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"}], 0x2300}}, {{&(0x7f00000066c0)=@sco={0x1f, @fixed={[], 0x11}}, 0x80, &(0x7f00000079c0)=[{&(0x7f0000006740)="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", 0x1000}, {&(0x7f0000007740)="aa4d88e22e54af15ce39dcbcd7838e3c361699797566af9f9923b987e733635c434bec35150abcb7904f449cabc3aeed5939ac260924d3af2753d7e63c52ba5462d686204254d33bf5f6a3fb2d41bfa36a8a95b3f3d0ed828cee9539bf3181a3483a9305f4a887776c3894c34142d639c7acb713b05d722d645fdbccaf85bb3999a664ad574a8ab3000096de18a371b37419ca83addc2ae68d", 0x99}, {&(0x7f0000007800)="576015dc4e20f644afeeba437c1e", 0xe}, {&(0x7f0000007840)="2d2d5ee282eaccd6", 0x8}, {&(0x7f0000007880)="f799a15477c0a521160abde1310dd4ae62", 0x11}, {&(0x7f00000078c0)="f7a1ff9b9f4b6aa53c666e59fe76ba76d8fb43e5333a9a2d7249e5e1ad11a9a5bc4b9deaa8407d73e0bb99027182dd498e081d2899dc257bd6be4998631b53b42408181e0b36eb3cedde979a79bd4eda8036784a5f16fc111e7499943cabefbdc567b00498a3e2b6e52855377e13dc35dce5528bd70c17d63b83df7cbecfa6dc177b7516123df300cace6faf6c7e34ca92f490a867d50114cc6d9e269cdc0f514761c98c6c656ac092aa26d07b59c5b4a49113a8581534e3756c8f0bf49ffdd99081e1de1092fedeed33fdb74b9d27bb923f63c3d96ac7d8677c281d49b7cf2154de503433aca07359a962fc2ed34598a4529f97", 0xf4}], 0x6, &(0x7f0000007a40)=[{0x30, 0x117, 0x1ff, "1e640a13fcff30c14c0a581a46caa05049e8c34b5142c63fbeda"}, {0x1010, 0x119, 0x0, "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"}], 0x1040}}], 0x2, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8940, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) sendmmsg$inet6(r1, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="147c27b6bb38d780d9e53c64cbce59cb295988c1945daeb9498c43670c3d28c65737971b7a61adee1fcc58477e0583c5da64b0ed94c6b15906dfd3d57c6e4b8aa2b3283fdff8104e7eddcb0c8d5791ee1d94d7fc8c43f3cb9d6d2b64a5e5c6834b347e3f88bf90949a3c48c39166c571c2f2f6266c8c8470d189b7e6d53c573383798d9c0a3b7e0b8e52e6d6679e8650256d76303466af6303ffeaeb3b060b7ff2b68c03fbdf613a", 0xa8}, {&(0x7f0000000ac0)="eef81e5136940cc10f50413ecde0be6edbf77362ae95fe3b235bf7a1b09c99979a9004a2f542b457405eff1a60f056a12295d79ebd10435697d8faf96a964c3a0ebb433b512d5b8a835872693126be2e8b2acd3a34a985a5e5ccf148d8f968ddc000653bab8d4078b5a8d2fb40589c7c2d61edeba86f2d71bfad65a495113509884154f094bc93ca51867934fe391521a070272da1ed0e70866f5cfdf6ecf6d9c94dba2b875a6865665a9abe08538a01c135c9044b1b1080b2c941512a775d2b0c891b502a78c2209842ca937a0d60ea777ced5408b35bd1a9b351ee4fe910e07236975020d34b89b8cd0a0d6545096d8574a7bee0878149c2beb07cfbb916ce04674558852504b9953a2b23555265bc5ff5b05d7f355b8ea595c445555323ada4ab18651cb2595cc1e18fc993d78114c34195852805ca27f60c337076916dac4d762dc6728939d1aa374953df831b61ac0eec6bdf09728abdd277ccdb1c8f2c97c1d324b32b8168f69f28813f800b73e5e159b0a761f6ceb75854ba7d4660b522262fd2703aca4f0678f085d0158a2fa3707c56e1072a5258fc965c9c775ff7b96653092ec273ca27d46dba9a9dc01785c14b623f03821e209e321a98ee8feecd908e942da5a4d1140f78fa9ab6bac5374ab1e2a8610fde9bf9efb8b34766a7697c00b32e6d6348666f64abf42ebce55de08121f3d3fc8b68b1de598b431015fadc0596db745f7ed606b17c1968e57a73ea2dc9a4b9a4434154cac0bd919a294dc6ba211f722c82fb31193517df0b0a82e0024be99540f567fc5f9a58e5be587c62c7e6ab957cfb5c5cbc9773757c58e75382adb929163ccd8a9983dd55e10959ca6023ffeccb82daff1044ac9a8a6a240b2481b9b166a4c3ee40d81ed818a503e9844ff25cb9362cb672b5abd3e7824bfac5ece3b391622701725a1c1c5098eae6abce833d92aeabca65c8835ba5eb2287a188b2b3685996191c45b4037b8018eafdf7ef7f7c37c6f29a7273356bbd50bb7b36045b16637e7ab40e0cd0c043068c3b469e3c2c6164142eeef2c969071891a9a2a13cdee9b8c26d5b98eb078632170b087c5c3962e50370e7ad1544d24ac3e151b1ebf411481857dcf37793f2038f3b574166da3c850ce845ce1e7b12a53b1ac3d57b43d6354d1f681e27c07d401a31231f351ef9c3720ac5df615343cd2320a86e2ddf3fb90cd9b7518a4381bf2cac08d2bde3ab77f8adeed6431240fe0a28e0595b7a70179f446698d0472e153c714034130e288552b8d4af9fecdbe7996fac55bd83af436026e847197f35f979c037761c853b99705551dd387dfca7d7528bd7f6c85080229641e412873dadf5ab54b3331b5ff8be9a5bc5c0766062729ba459e64e338f1bad17b8d3ea8de3808eec70cfaa1ddb6e00852496ff63b483e21c4dc98f845efa71ca6652c0226e6b9ad764150705bd257d07f858038d487e7a4b0cfe7a5901181d08d53d041262d8580ff655bd0921c113f193ae3ccb3cb571e3b95144753575c59b8c35c5e58fa6ef483138c3a9469af81497db0d1d5dc13b24f71bc087aaa2cb9609f0774d1fd3b9fb1ccdacb6466b89f2203704b76bedf650c27600240041b86a7f716d6006b92c485285dd76a230d45b45a3dbc90f18885ad574087525e5ed11b96df8683daf7f1a42d2b8e00c00f79a5dc37167887b2679618c5952c532f433a7bf41d7c608fb5177a378a34f906743db6e7cab48d17765061ad8df4d3996b833de667a4ae6c28d00121d7bea02d159ea9f563687a96d719f0231d21f4dc91ca1742fea4a5f51665ae0773a4fc4c2f4250c3de2aa0ff44d8bcd6e9d1ed96a320a73d91b77457669cb8836414c9b8a913d41fa55cdde0f5d6a0db83b84d5cf1fc153f2425877fb101fe6b3a88a6364b764f53cde76394890850f217c6cb3f590ff9e62403569cab880307ea68a1b8a79ab4ec2c11101246be711def4cf9d477d6ab3290847a74537b69cb28631e8878789fb83139b217c01c3965b13c3c299f38305201ce3403ba78ff46dcce82faacd730db0c58b5e57ed48221272ede5b84925a14531943583f9364438d04a7320cb77b90040e2efe854acf2148f4294f6ff14229d92e8b911ab7815425d32060d46581fb94e13b993174a84c261db10ea18736ad44fb048e0e38e253dcb43749fa7541f70d6c29ceb295c2230f75ce605a607ad49ebd85564a781a72c675cb93530f380d33b8d12eacf501abbc65dfab3436528ceded65bca802c142a94aa845af3b6c1b7a6c53b9449daae6b11a3fb2ecb092518ab491010ada68c15dfa2eabaede9022baabfafb5d6b7fb8a80bea82360b6b060259a6a101bc0a41bffb5e28fda2ca67f66bdb88afe88fb12e8fcf68413bc4ee012b98b69ad3a8740a1aebbd630ce90237ede1f6432c3507c176fb3c5b4bdea5ad099455a74baf4d958dd76d7d8802958b11e8a85456f3768381203dda03ce41907fa0e373ad98a68b6c016f03ba2f0ecacaa7014e720818b67421f18c7b35088f7fd92d4d5ea0365ce61d3ab48dce4d15dcad6c14270e87703fe37a8466696f737debded62ccd5c57f88c329e114845991bc50bb6ac159867aa0f371680e59fa1d224fa0ebe26d95a5c82e549de2bb5f568743cd6a825ee749e273a0fc68e5ab010617a1ef2a52e8bad665ef54d74708c2ba3d5d9c7a142a34b80d1cc461c21da3f03519805fed3dd71c483a61a1b0062e03a9c87a2879e09fd58502512d1ee9d7deb9c9aae43ca49c4c61aee809f82c574b021befbd5b04ac54a34cd6cf31d158e7a8d8e56242f60733f92c71027fac6cd1beb0428699e8a8f624f3428ca9319f5863c13ce222be9a219a8a669cc0f7b5287610fbd1359e2b795a0a7341c30cd0ece517a4dc8d4e7397edec8bd46416145654801cf8fc7552b3191cd0e9221565924ecff886a8b9c2761f031f0067d7d927c6119a54e06407147fc23e03b216414bcefc348004b6b880ae39ca88c8a70dd6b667ea70a4ce71b6b247c708b70a0f9e68265b8fc02a2abe811bf41cd9bc6e9df140fe125a4a45a0dc0bf6012033e0181fe5de43a77c87eded3e0f4534feabb6db05699b1bb39bd1cf8b9f896f8edc89ce29f48f520d8b243079b812e4c5af127302a458504d47977b2cb80d22a476675cafc17cd23aa6970f9135d8fbdc90089c7f8fe0edc2b4b05659e32262a446d7e1d971e7a1989e8a85fe1fe80c0fef58e3614a38f40bbb90a5ae46b57dd2b14092244a8211d74ce6508bd8046441eaef5018dbf459a5bd265ca1aa752f34b05ab0c93b10d15452c88bf29cfa42d333f018943f30efe1ccc654bf40041a6ed1e85f01eb25bc97251e04bb652ef05ec1b160b51cb50b6cf8d89875ed1b10c0a5a0aa8c51eed572304562fb23acd915d5e55faa964406c3286266c8818b13109b2b8b540cd3d7dad208cabd207b5ab2ef31d38aa737ca211d7b5f564c69405221fb56c7e8d731c07cc9266d6e5ae9c6161f5738ab53769cf0ffc42de29ebee6ccc7b4622cf6410a24ac87cf03ff16e45eb4c5f92ad6a706f3b4b4d4f2f8f69fcdc6221dde7d1ec4dffdeab7fa942891a8ef9f5c01ebc7416e248cd62c3ed2e3eea8228d4686dc91581d3f8eb73fe2d41eb35c81e1a687be2cf033265a0ad5bd2893c7357b1dea60d8b653cea32a229b066e0af24fd4f8794a76bccd7e462ce12c97b1557761ee89026651bb5b00fbd09647f85ad221c3e8107f2878fc283ac04aa7c90592a9047e03e6c5244a51322516f921c7844e632725496233e545c13fa823b558303ffdc93a476585c8e862ec37613d26a8ed38dfee51cb08c1d2919bfdbe2d080aabee83a2cbb429de15114e29d76241378ca6a2772f11ee752664f8647e46b2c76c7ea05a711ab949bb5a2c84be07b374874086ab00b87ed02433f6fd7e9aa33dd1522ff4e0f2c41927f6a155a8cb8cb8fa31b996af8889416a23041a761994eb54f952659e9d45e9110482f661abc6e597d42428d349f79cd9e3593c7b621efdb4e02d553b8268fe56e666c6c513571668e09f102e1037f006cf6873e7477cd9f16c9704d075dcb68b561b3a0ff8fc8d6b6daa1aa7149871d8d3ac10286c43dde3f810cf600a017d616925af9bbfa4f9eb4fc1a560876f9a7986e27fc7c35cd755a3b6f0b13cff2e2719f52fc1b8f4881f20c98f8f07a58ae35633d49663294b65845dfef20c3037b130524d5e744abd1517e65b3b41a244efd6b6eed463b42f0cffd6e8da2a349a4f3b3adec428ddf6ce30a602c03a9c455ccbf5580f1214864c61138e75bdd9f92bd62328d00841db07f26faa53373f2d5979189dac6fb463e9bbad82bc1cf7e32a31392471aec5e762f0e9522acb7fe3a7f7d149abc4d8bc27a1f8d0afa24df7b2be420e01748df5a5bbd4e1090f7561f5f5b42ce8e3f2d4342cbf9cfbe60bcb1997775812444967a133dbbc90a7a21a886e44c45c9c3f836afdc5c75936ccd754adf1606da94ee964a124000286650c531f92b977d13ac2e44b2778f92e2a99bc158c508ab91330d0cfee2dad7ebb455a09458ce1162f5677a8222fe04a63a585b3ed7bcdf1354a0f4d94dd276b095972717bf9176306f4c1931acc205f8bf37714ecb0109be802933425204a0d0f7a5c8fe35d931c591cf4976aee68460384a74803579636bb01bf2c4f64597e7fab8ac7d4e156d812edc98a943b5f7d15543ea7a3efffeea7410a8c32dc94aa921d482295b76a24763166034a5b6ce4143b3ed47b8f505e395ffdad4df9892e73722aa9bbc1a8a5b15e48d4afb5d4cd289c58974b5cf7749bec05edc26f25842776ee1eb2ed71a6309d60f4987959d690b31f0b65a66f2382d6578e25981150d2a6bbade96cc28ca702ca91f75f826b85bcf3b9e557cccee7a3a2845c5689301f3169248874980693049d68d3bea28934469c76445485dea39bc321c3ca4378bc3c7832c415e711ce1943201df5e829e86ac2972116b9bb5df14383397b5490f9047a5993b3736c723ea54925d65d4a3b379352bfa41688a5783dbd27f9f50dd0e6dbda1d9abbbf8121851d2a42718ab530dcdd153355a0962804b0e5cf7c01c1052af5967753b41eb340e0750d06c945e25882015ae0471b44610c060b9508297006342d8ba265e585c1103cc3b762279f494dd18cc9e980b951b87e03ec13fb82167034f8ccabd885a7b2707f8b1c6851a72842249c378e928e4946c345d9ba38abf054106a48dfa978505fd53b5f478464febbeae150814dbe9f73006ff7cc7bb2a7e5cd3abea21cd06220573d94fb38c9e07d9ab8e26e35377824646645a3bdb5e13aa0f1c5610d9889e81c000f5010e96a9231bf35fb32bb67201f7b4d353b89555198e7f47e413d6bfc32a97f2ab61a06aa1e6d869d420d9476d255188f9641d9dfa1bb45de1c215fec074458b35699c855ea8bf10a916e1afb51ae7ae328a257d72c965b9458bb1f7d062f08f5391917a5a7123bb7b1e86601bf1a1643a1723ce0947739640fdcccfa6e52988dd0b90a8cc4c15d66a4b111749641360eb2661d2e2765dcd64a43e6f3de8002673a2ab95f34e673ece212d98e04291e39b1743ddfad491268f496d9a5b2a85914f80d277fa56ea3a7dc57c649e803aed1712d20bf638f93aec9216d5448ce98942412fd04dd42d6aaa80a92d245dc640aea567cceee41e87fcf29d0f27e3af6f9c2c81a87aac3739cb99bbd21fa6dd2b50bbed2d755bd6738c6c4b2c7a38a010928f56fad1d67cf9721c699c28562c8b093dba27b43", 0x1000}, {&(0x7f0000000100)="3baae152195b895e2c0c852e647f5ee0a23de42a307f01942c885dde3dfb5a0a4db18b0fe37a97e5a6bfc36e91e8f34cd8dcf59ad196290c6f92adcb191484795dfb0d3c5e09564ed7f331e1f61d1cb2a1cd03c6f07c237f68abd6a54784437eecc2dc54e621f767ea907b5083c8fc04dbfa29b570df4207922fc130b2e804272dc387e795cd6f00923475", 0x8b}, {&(0x7f00000002c0)="6557ca019ce53abbd1ca1b2d3ab3210a532969ec9489014a2b4d1abeffac884d104c0081a071405bc91aab9546f6d0891a5c515a7b125d6145b6b21299a06a26d07b0d1970943757f42fa5b31d2af1f2a31d1509fb935d59b4571a0a79bdb9a53fb4f66538b3369b577cbbcfda3ce8dc0aeb6784e6f1ff1a5e017a73583d33259336c2b4ce45b85fff47140d47261f2ae16c782b26012b40d0117e971b8f9d73f68dc6b5d2ab8b30b0d36ffb115b558566358a44d8274450c0df27763dcb399fb1c786f172df917799ed8fb0d2d39c3bfb39d301b90b0b48307a183101c131388ed5ed06bd2e0261051f094268a7e7df5d55c0fb78", 0xf5}, {&(0x7f0000001d00)="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", 0x1000}, {&(0x7f00000001c0)="882ef89c0abc9d58788f7a8aeb5699d10109523d65309f3742bd889ce510aab7feeeccb338c977ab0e13c9796c24fa67956d1ffefe52f086d31491d9bb46db9eea834b19156a5b47f5fe27294b454887b89ca00d5029c6d50ce023e420a8e0909e2bdabde23edf14f12846a15292d4490926444fe5115b8abeec56f0fc391c640c56096fce74e6e57869bf049ca86d0d311f9091bacf9ef09574994757ac55438cca45cf0f5b", 0xa6}], 0x6, &(0x7f0000000480)=[@dstopts_2292={{0x48, 0x29, 0x4, {0xc, 0x5, [], [@ra={0x5, 0x2, 0x9}, @jumbo={0xc2, 0x4, 0xff}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7f, 0x200, [0xae]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}], 0x60}}, {{&(0x7f0000000500)={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x24}, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000540)="4c5d1106b33bbfc6a9d7ab4d7fe6e7ab3bbad31ced061e1805c74c1dfc6e48063ea6dd5a827aaed4935f52093407110ee2e2ecfd4d1cddb60f54a773b888fe3b267092ca727ec21706d64e9356ac0c11ca89e84b527696af62ca8d97f67a325e0b1aa1daa9c8beed878d1beeb0783861c4d0ca8bc1df500fb27803fe3ef81139a645f529a7467ef93c51d71101c681f13a18fad276517289e6836d96823613fdaf45c0f2322f3340761d0b1d6905abf97f40f8eda039801017def3887062b789cb5587d5302759dfeb524d2b1a9509565be3ecad23cafa8b3ab5238d76719a35f9ad8036f5cb956f8b6a6e", 0xeb}, {&(0x7f0000000640)="72553aab5d66037e007611cbf7f3e500e1c4efd8051e85fa35b7ea1fa0eb2f9ad5df830c1fb8c6bd8e2616343950cf41f7eb84386e376164ab3f027b022e7b5fb0abafb3dd2f7046566349fbc1cb56f172c0da2881a4e972e73c9f3353139e0c248a0e47ed8a7a2903f3f202fbb3d3693db299f88184560e14ef28f14517834d13035f146cde3fd967f62f4415b7d4c023f060b29d7ec48a57fc1ec6427c6a63f279cf1464f428f93604cd50e3b1cd48a11fdbbe6413e7e1adba7fe5ab96e2c87f9ab64be5cd435cf6094d5641ef3d12e63c97ab1ab6d0de199401402594da02370193f19ad6bb4282", 0xe9}], 0x2, &(0x7f0000000780)=[@rthdrdstopts={{0x100, 0x29, 0x37, {0x2b, 0x1d, [], [@pad1, @jumbo={0xc2, 0x4, 0x62}, @ra={0x5, 0x2, 0x7ff}, @hao={0xc9, 0x10, @private0}, @generic={0x2, 0xb5, "e104f12c765fced07d60903c59985b8ea77478d642121141d1cc57adf1bbda8a147ced2b083a24078c8ffbb75bec6b85046ec75e4d484c1d4086e2c242b90bbc4aaeffbf54a210eb746c24cd2966631e41e10f3912637dc1f260af287d97f770e7204ea0c53aefadcb9d507a9abb14786d6d156f8b752719b6740e4186cb5352aa3d6eef59eeaefb56824e4abfe5ce05d34cb0ea9aa1416650c539fa05689f19e962dfd772ea113ddb1ce4395dd9596ca9c40ab68a"}, @hao={0xc9, 0x10, @remote}]}}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x3c, 0x6, [], [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @pad1, @calipso={0x7, 0x18, {0x2, 0x4, 0x0, 0x1, [0x101, 0x18]}}, @pad1, @jumbo={0xc2, 0x4, 0xeaa7}]}}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x2, 0xc, [], [@calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x3, [0x9, 0x7]}}, @calipso={0x7, 0x48, {0x2, 0x10, 0xa0, 0x7f, [0x400, 0x3, 0x5, 0xffffffffffffffff, 0x3, 0x7, 0xfffffffffffffff7, 0x2]}}]}}}], 0x1c8}}, {{&(0x7f0000000980)={0xa, 0x4e21, 0x0, @mcast2, 0x46}, 0x1c, &(0x7f0000003ec0)=[{&(0x7f0000001ac0)="47ff9534481b67e1934bdfc352767b7c06d9155e536005e204ee1fbb92a799b0dca577d336b42995b9a389a136770206876cdf36af51f7f6174da53b31a5a92d54f0995c81dde09aa3d8d80729f3ae61d6ec590176dd033fd6cfb7a39b8cf3642a4960c49e6db901ca2400ef2419869f21366569fdf879c2ab1f19b28b67d35ca9e0fb66ed1c0c924f81a9c880650cf2ab7d433a533e080f1827b7f2a5c921abea706c445aa9a17c0f071cbfdcd7d2d9d2f44fcd392c5237e4fe5a7ea2626e6a1190c270808b7126d405c403d611b5177e0505eb818090d43c5c20c6f46873e75b5ba5a8a7e3ca0130d74790069d887e719895829469", 0xf6}, {&(0x7f00000009c0)="6523f2eb6af04a59d58b630c25978147a8b9a22999d2c76f1e42a74589ec3338413d9a9ddd8af76932e14f825aed95ddbb490c2717ab08783af3c02053f5af787be543adf3c1b00646c182469ac6641ae5760b9f4fe78a3d8e03fdd943d0414acc556fff9adbcfaf77b293f024a8a18f506973b813f9607a9ad4d5ecb8242e0f0caacc4276c3c30d118f", 0x8a}, {&(0x7f0000001bc0)="4efb11f6dffe81903a1f0d937a9ca7546dd1cb4a871267994e6ed282f02e4c901924f35185914c1173e6b5a0faead56a2eaef9b11832e6668c29ff618a5016b7c2bb7cd666d0f14c6ed0a1ed27e25f4c9876653992b040b4573d32bf223f2640b506bee760cb0be0eed06cbf0993c93e473b3b273585ac948aaf89e2dab888750ccbf5f62149c9a960cb3ceb3b81d3f2d5086a4847cac34f7d0111181cde99421d0b2ca98438abd34b8b217a28e515e0179db24fe43e2f8c4b31ad3465d677f9daa4598d269a52f35c69c50984169b675132c424b38136f1462e8ad2c24b184024638d298fa8e67a16e2a8c4d505f4f606ad8faf0bfc1a51c4", 0xf9}, {&(0x7f0000002d00)="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", 0x1000}, {&(0x7f0000003d00)="a7eed5fd09b9a5ddb197736a8409ecee8869b84e7c850f044be4e60cb8a13f290a65fe6f756c1574e4530211c061dfb71906b2088cf37ebb3646438316034c2659a3d7d740893066b1a78224da752a52abbfbacf9da28752a2e9fa46e2bf504b24a1db9d180f470d4b4fe071908c81f3d4c720e819602a0dcf4ba00b14b4e0d536ef921ca2f3fe24f08767", 0x8b}, {&(0x7f0000003dc0)="6976efb89128a5d1e2c3c2c953749984af24020e2cc2c7cab2b748a22a46d025f533dcf8be811c90c5f7133222fa6ba496548551f02f3ea17bf810ff9092952c7831bd96df319b3f3ffdb0f164bd60a3445d99c2c4614518ff5207458eb9b78e84395a4e51346ed806d3e3cb8c4c282a5f", 0x71}, {&(0x7f0000003e40)="0a08a94e7ac80522e9cdbf75829b06b90657a2a1d7b32c272594c2a3d79e6e814edf04853407eb307e77641c6eafbd8c534896742dc6db3cd531c558339961a48f009de2ccaba28781620dc19a760883e2a723cb2f3d4846bfd88c07c84348", 0x5f}], 0x7, &(0x7f0000003f40)=[@hopopts_2292={{0x48, 0x29, 0x36, {0x3c, 0x5, [], [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x0, [0x3ff, 0xc0e6]}}, @enc_lim={0x4, 0x1, 0x6}, @pad1, @enc_lim]}}}], 0x48}}], 0x3, 0x800) r2 = dup(r0) sendmmsg(r2, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001cc0)='!u', 0x2}], 0x1}}], 0x1, 0x0) 18:41:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000003c0)={r0}) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x3f9, 0x2, 0x70bd29, 0x25dfdbfc, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000070103080004400000000400fdff00"/28], 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3fb, 0x100, 0x70bd28, 0x25dfdbff, "", [""]}, 0x10}}, 0x24048004) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) ioctl$SCSI_IOCTL_SYNC(r4, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x18, 0x3, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x4}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x5}], {0x14}}, 0x54}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x5) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)={0xc4, 0x0, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x400}, @CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @empty}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x488c0}, 0x1) 18:41:40 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:40 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x70, 0x30, 0x17b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x45, 0x1}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 18:41:40 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) [ 871.665825][T19340] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 871.905821][T19340] usb 5-1: Using ep0 maxpacket: 8 [ 872.036659][T19340] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 872.047401][T19340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.058583][T19340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.068434][T19340] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 872.081389][T19340] usb 5-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 872.090535][T19340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.100473][T19340] usb 5-1: config 0 descriptor?? 18:41:41 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:41 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:41:41 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000040)) 18:41:41 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x70, 0x30, 0x17b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x45, 0x1}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) [ 872.566388][T19340] hid-generic 0003:2505:0220.0010: unknown main item tag 0x0 [ 872.573866][T19340] hid-generic 0003:2505:0220.0010: unknown main item tag 0x0 [ 872.603088][T19340] hid-generic 0003:2505:0220.0010: unbalanced delimiter at end of report description [ 872.630474][T19340] hid-generic: probe of 0003:2505:0220.0010 failed with error -22 [ 872.768542][ T3589] usb 5-1: USB disconnect, device number 101 [ 872.925764][T19340] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 873.165733][T19340] usb 6-1: Using ep0 maxpacket: 8 18:41:42 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:41:42 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:42 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 873.285909][T19340] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 873.313529][T19340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 18:41:42 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 18:41:42 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) [ 873.343057][T19340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.362950][T19340] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 18:41:42 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:42 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) [ 873.394529][T19340] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 873.415586][T19340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.435122][T19340] usb 6-1: config 0 descriptor?? [ 873.715695][T10789] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 873.926509][T19340] hid-generic 0003:2505:0220.0011: unknown main item tag 0x0 [ 873.933903][T19340] hid-generic 0003:2505:0220.0011: unknown main item tag 0x0 [ 873.950604][T19340] hid-generic 0003:2505:0220.0011: unbalanced delimiter at end of report description [ 873.965146][T19340] hid-generic: probe of 0003:2505:0220.0011 failed with error -22 [ 873.976929][T10789] usb 5-1: Using ep0 maxpacket: 8 [ 874.096876][T10789] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 874.107683][T10789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.119164][T10789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.129247][T10789] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 874.142468][T10789] usb 5-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 874.149679][ T9564] usb 6-1: USB disconnect, device number 39 [ 874.155503][T10789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.169563][T10789] usb 5-1: config 0 descriptor?? 18:41:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 874.666470][T10789] hid-generic 0003:2505:0220.0012: unknown main item tag 0x0 [ 874.673952][T10789] hid-generic 0003:2505:0220.0012: unknown main item tag 0x0 [ 874.697982][T10789] hid-generic 0003:2505:0220.0012: unbalanced delimiter at end of report description [ 874.714094][T10789] hid-generic: probe of 0003:2505:0220.0012 failed with error -22 [ 874.867528][T10789] usb 5-1: USB disconnect, device number 102 18:41:44 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:44 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:44 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000040)) 18:41:44 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:41:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 18:41:44 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x20, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @main=@item_4={0x3, 0x0, 0xa, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:41:44 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:44 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 18:41:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:44 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 18:41:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:44 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) [ 875.885615][T10789] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 875.895655][ T9690] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 876.125553][T10789] usb 6-1: Using ep0 maxpacket: 8 [ 876.155547][ T9690] usb 5-1: Using ep0 maxpacket: 8 [ 876.245742][T10789] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 876.256576][T10789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.267590][T10789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.277366][T10789] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 876.285567][ T9690] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 876.290841][T10789] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 876.302601][ T9690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.310429][T10789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.321004][ T9690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.331493][T10789] usb 6-1: config 0 descriptor?? [ 876.340558][ T9690] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 876.358447][ T9690] usb 5-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 876.367846][ T9690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.378142][ T9690] usb 5-1: config 0 descriptor?? [ 876.826211][T10789] hid-generic 0003:2505:0220.0013: unknown main item tag 0x0 [ 876.833709][T10789] hid-generic 0003:2505:0220.0013: unknown main item tag 0x0 [ 876.842622][T10789] hid-generic 0003:2505:0220.0013: unbalanced delimiter at end of report description [ 876.852252][T10789] hid-generic: probe of 0003:2505:0220.0013 failed with error -22 [ 877.031321][T10789] usb 6-1: USB disconnect, device number 40 [ 877.115555][ T9690] usbhid 5-1:0.0: can't add hid device: -71 [ 877.121544][ T9690] usbhid: probe of 5-1:0.0 failed with error -71 [ 877.132766][ T9690] usb 5-1: USB disconnect, device number 103 18:41:47 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:41:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 18:41:47 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:47 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:41:47 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x20, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @main=@item_4={0x3, 0x0, 0xa, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:41:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 18:41:47 executing program 3: setgroups(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 18:41:47 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:47 executing program 3: setgroups(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:47 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:41:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x45, 0x1}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 18:41:47 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:41:47 executing program 3: setgroups(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:47 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) [ 878.915387][ T9690] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 878.923141][ T9564] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 879.155401][ T9690] usb 5-1: Using ep0 maxpacket: 8 [ 879.166348][ T9564] usb 6-1: Using ep0 maxpacket: 8 [ 879.276045][ T9690] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 879.286846][ T9564] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 879.297574][ T9690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.309441][ T9564] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.320558][ T9690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.330674][ T9564] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.340707][ T9690] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 879.353908][ T9564] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 879.367071][ T9690] usb 5-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 879.376365][ T9564] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 879.385661][ T9690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.393871][ T9564] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.404721][ T9690] usb 5-1: config 0 descriptor?? [ 879.413499][ T9564] usb 6-1: config 0 descriptor?? [ 879.896090][ T9564] hid-generic 0003:2505:0220.0014: unknown main item tag 0x0 [ 879.903570][ T9564] hid-generic 0003:2505:0220.0014: unknown main item tag 0x0 [ 879.919942][ T9564] hid-generic 0003:2505:0220.0014: unbalanced delimiter at end of report description [ 879.933752][ T9564] hid-generic: probe of 0003:2505:0220.0014 failed with error -22 [ 880.100872][ T9564] usb 6-1: USB disconnect, device number 41 [ 880.135342][ T9690] usbhid 5-1:0.0: can't add hid device: -71 [ 880.141281][ T9690] usbhid: probe of 5-1:0.0 failed with error -71 [ 880.149006][ T9690] usb 5-1: USB disconnect, device number 104 18:41:49 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:41:49 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x45, 0x1}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 18:41:49 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:49 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:41:49 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x20, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @main=@item_4={0x3, 0x0, 0xa, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:41:49 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:49 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:41:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x45, 0x1}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 18:41:49 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:49 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:49 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) [ 880.945272][ T4812] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 880.955734][ T9690] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 881.185252][ T4812] usb 5-1: Using ep0 maxpacket: 8 [ 881.195696][ T9690] usb 6-1: Using ep0 maxpacket: 8 [ 881.305369][ T4812] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 881.316218][ T9690] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 881.326924][ T4812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.337910][ T9690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.348789][ T4812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.358589][ T9690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.368324][ T4812] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 881.381294][ T9690] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 881.394165][ T4812] usb 5-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 881.403223][ T9690] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 881.412260][ T4812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.420263][ T9690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.428950][ T4812] usb 5-1: config 0 descriptor?? [ 881.435218][ T9690] usb 6-1: config 0 descriptor?? [ 881.915847][ T9690] hid-generic 0003:2505:0220.0015: unknown main item tag 0x0 [ 881.923253][ T9690] hid-generic 0003:2505:0220.0015: unknown main item tag 0x0 [ 881.930659][ T9690] hid-generic 0003:2505:0220.0015: unbalanced delimiter at end of report description [ 881.940413][ T9690] hid-generic: probe of 0003:2505:0220.0015 failed with error -22 [ 882.133893][ T9690] usb 6-1: USB disconnect, device number 42 [ 882.166381][ T4812] usbhid 5-1:0.0: can't add hid device: -71 [ 882.172338][ T4812] usbhid: probe of 5-1:0.0 failed with error -71 [ 882.183483][ T4812] usb 5-1: USB disconnect, device number 105 18:41:51 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:41:51 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x14, 0x30, 0x17b}, 0x14}}, 0x0) 18:41:51 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:51 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:41:51 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x21, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global, @main=@item_4={0x3, 0x0, 0xa, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:41:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x14, 0x30, 0x17b}, 0x14}}, 0x0) 18:41:51 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:51 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x14, 0x30, 0x17b}, 0x14}}, 0x0) 18:41:51 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:41:51 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) [ 882.955165][ T7] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 882.965229][T10789] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 883.195159][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 883.205631][T10789] usb 6-1: Using ep0 maxpacket: 8 [ 883.315284][ T7] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 883.326098][T10789] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 883.336806][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.348376][T10789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.359493][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.369491][T10789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.379509][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 883.392768][T10789] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 883.405916][ T7] usb 5-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 883.414920][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.423333][T10789] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 883.432635][T10789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.441349][ T7] usb 5-1: config 0 descriptor?? [ 883.450619][T10789] usb 6-1: config 0 descriptor?? [ 883.935819][T10789] hid-generic 0003:2505:0220.0016: unknown main item tag 0x0 [ 883.943217][T10789] hid-generic 0003:2505:0220.0016: unknown main item tag 0x0 [ 883.959616][T10789] hid-generic 0003:2505:0220.0016: unbalanced delimiter at end of report description [ 883.973636][T10789] hid-generic: probe of 0003:2505:0220.0016 failed with error -22 [ 884.153411][T10789] usb 6-1: USB disconnect, device number 43 [ 884.185112][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 884.191085][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 884.201737][ T7] usb 5-1: USB disconnect, device number 106 18:41:53 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:41:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x18, 0x30, 0x17b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 18:41:53 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x1fc, 0x0) 18:41:53 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:53 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:41:53 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x21, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global, @main=@item_4={0x3, 0x0, 0xa, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:41:53 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x18, 0x30, 0x17b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 18:41:53 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x1fc, 0x0) 18:41:53 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:53 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:41:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x18, 0x30, 0x17b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) [ 884.985061][ T9690] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 885.005216][ T4812] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 885.225019][ T9690] usb 5-1: Using ep0 maxpacket: 8 [ 885.245209][ T4812] usb 6-1: Using ep0 maxpacket: 8 [ 885.345223][ T9690] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 885.356912][ T9690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.368384][ T4812] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 885.379189][ T9690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.389529][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.400630][ T9690] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 885.413847][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.423813][ T9690] usb 5-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 885.433210][ T4812] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 885.446499][ T9690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.454746][ T4812] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 885.467422][ T9690] usb 5-1: config 0 descriptor?? [ 885.472488][ T4812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.485078][ T4812] usb 6-1: config 0 descriptor?? [ 886.026585][ T4812] usbhid 6-1:0.0: can't add hid device: -71 [ 886.032536][ T4812] usbhid: probe of 6-1:0.0 failed with error -71 [ 886.043670][ T4812] usb 6-1: USB disconnect, device number 44 [ 886.204969][ T9690] usbhid 5-1:0.0: can't add hid device: -71 [ 886.211067][ T9690] usbhid: probe of 5-1:0.0 failed with error -71 [ 886.221987][ T9690] usb 5-1: USB disconnect, device number 107 18:41:55 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:41:55 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:41:55 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x1fc, 0x0) 18:41:55 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x70, 0x30, 0x17b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x0, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x45, 0x1}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 18:41:55 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x21, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global, @main=@item_4={0x3, 0x0, 0xa, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:41:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x70, 0x30, 0x17b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x0, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x45, 0x1}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 18:41:55 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x1fc, 0x0) 18:41:55 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:55 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:41:55 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x1fc, 0x0) 18:41:55 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) [ 886.814929][T10789] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 886.994909][ T9690] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 887.084894][T10789] usb 6-1: Using ep0 maxpacket: 8 [ 887.225133][T10789] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 887.235848][T10789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.245517][ T9690] usb 5-1: Using ep0 maxpacket: 8 [ 887.247541][T10789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.261423][T10789] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 887.274413][T10789] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 887.283471][T10789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.292106][T10789] usb 6-1: config 0 descriptor?? [ 887.394892][ T9690] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 887.394936][ T9690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.394957][ T9690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.394975][ T9690] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 887.395001][ T9690] usb 5-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 887.448215][ T9690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.458691][ T9690] usb 5-1: config 0 descriptor?? [ 887.834855][T10789] usbhid 6-1:0.0: can't add hid device: -71 [ 887.840932][T10789] usbhid: probe of 6-1:0.0 failed with error -71 [ 887.852301][T10789] usb 6-1: USB disconnect, device number 45 [ 888.204961][ T9690] usbhid 5-1:0.0: can't add hid device: -71 [ 888.210915][ T9690] usbhid: probe of 5-1:0.0 failed with error -71 [ 888.218296][ T9690] usb 5-1: USB disconnect, device number 108 18:41:57 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:41:57 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:41:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x70, 0x30, 0x17b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x0, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x45, 0x1}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 18:41:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x1fc, 0x0) 18:41:57 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:57 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x20, {[@global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0xa, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:41:57 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x64, 0x30, 0x17b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 18:41:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x1fc, 0x0) 18:41:57 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:41:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x64, 0x30, 0x17b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) [ 888.614838][ T4812] usb 6-1: new high-speed USB device number 46 using dummy_hcd 18:41:57 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) [ 888.864806][ T4812] usb 6-1: Using ep0 maxpacket: 8 [ 888.954805][ T9690] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 888.994906][ T4812] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 889.005723][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.017181][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.027188][ T4812] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 889.040359][ T4812] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 889.049684][ T4812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.060685][ T4812] usb 6-1: config 0 descriptor?? [ 889.204789][ T9690] usb 5-1: Using ep0 maxpacket: 8 [ 889.344881][ T9690] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 889.356752][ T9690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.367855][ T9690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.377659][ T9690] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 889.390628][ T9690] usb 5-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 889.399847][ T9690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.408911][ T9690] usb 5-1: config 0 descriptor?? [ 889.604759][ T4812] usbhid 6-1:0.0: can't add hid device: -71 [ 889.610738][ T4812] usbhid: probe of 6-1:0.0 failed with error -71 [ 889.617987][ T4812] usb 6-1: USB disconnect, device number 46 18:41:58 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:41:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x64, 0x30, 0x17b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 18:41:58 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:41:58 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x1fc, 0x0) 18:41:58 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) [ 890.146343][ T9690] usbhid 5-1:0.0: can't add hid device: -71 [ 890.152274][ T9690] usbhid: probe of 5-1:0.0 failed with error -71 [ 890.159696][ T9690] usb 5-1: USB disconnect, device number 109 [ 890.324707][ T4812] usb 6-1: new high-speed USB device number 47 using dummy_hcd 18:41:59 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x20, {[@global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0xa, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:41:59 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:41:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:41:59 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x1fc, 0x0) 18:41:59 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) [ 890.564716][ T4812] usb 6-1: Using ep0 maxpacket: 8 18:41:59 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:41:59 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x0) [ 890.684875][ T4812] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 890.701107][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.718721][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.736267][ T4812] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 890.755622][ T4812] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 890.764888][ T4812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.774586][ T4812] usb 6-1: config 0 descriptor?? [ 890.914691][T19340] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 891.164702][T19340] usb 5-1: Using ep0 maxpacket: 8 [ 891.294976][T19340] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 891.307005][T19340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.315341][ T4812] usbhid 6-1:0.0: can't add hid device: -71 [ 891.318175][T19340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.324738][ T4812] usbhid: probe of 6-1:0.0 failed with error -71 [ 891.335205][T19340] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 891.346850][ T4812] usb 6-1: USB disconnect, device number 47 [ 891.354812][T19340] usb 5-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 891.368474][T19340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.377284][T19340] usb 5-1: config 0 descriptor?? 18:42:00 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:42:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x50, 0x30, 0x17b, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_bpf={0x38, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) 18:42:00 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:42:00 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:42:00 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x0) [ 891.781766][T25553] FAULT_INJECTION: forcing a failure. [ 891.781766][T25553] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 891.818389][T25553] CPU: 0 PID: 25553 Comm: syz-executor.3 Not tainted 5.12.0-rc4-syzkaller #0 [ 891.827157][T25553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 891.837198][T25553] Call Trace: [ 891.840471][T25553] dump_stack+0x137/0x19d [ 891.844892][T25553] should_fail+0x23c/0x250 [ 891.849357][T25553] should_fail_usercopy+0x16/0x20 [ 891.854422][T25553] _copy_from_user+0x1c/0xd0 [ 891.859022][T25553] iovec_from_user+0xc4/0x2d0 [ 891.863835][T25553] __import_iovec+0x49/0x270 [ 891.868416][T25553] ? __rcu_read_unlock+0x5c/0x250 [ 891.873430][T25553] ? fsnotify_perm+0x59/0x2e0 [ 891.878097][T25553] import_iovec+0xb8/0xd0 [ 891.882420][T25553] do_preadv+0x109/0x230 [ 891.886720][T25553] ? __fget_light+0x219/0x260 [ 891.891394][T25553] ? fput+0x2d/0x130 [ 891.895279][T25553] ? ksys_write+0x157/0x180 [ 891.899774][T25553] __x64_sys_preadv+0x54/0x60 [ 891.904450][T25553] do_syscall_64+0x39/0x80 [ 891.908870][T25553] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 891.914839][T25553] RIP: 0033:0x466459 [ 891.918721][T25553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 891.938314][T25553] RSP: 002b:00007fb83e137188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 891.946716][T25553] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 891.954661][T25553] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 891.962638][T25553] RBP: 00007fb83e1371d0 R08: 0000000000000000 R09: 0000000000000000 [ 891.970584][T25553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.978533][T25553] R13: 00007ffd256c803f R14: 00007fb83e137300 R15: 0000000000022000 [ 892.174605][ T4541] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 892.244601][T19340] usbhid 5-1:0.0: can't add hid device: -71 [ 892.250690][T19340] usbhid: probe of 5-1:0.0 failed with error -71 [ 892.262333][T19340] usb 5-1: USB disconnect, device number 110 [ 892.414595][ T4541] usb 6-1: Using ep0 maxpacket: 8 [ 892.534759][ T4541] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 892.545562][ T4541] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.556726][ T4541] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.566551][ T4541] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 892.579590][ T4541] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 892.588729][ T4541] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.597548][ T4541] usb 6-1: config 0 descriptor?? 18:42:01 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x20, {[@global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0xa, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:42:01 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:42:01 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:42:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x50, 0x30, 0x17b, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_bpf={0x38, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) 18:42:01 executing program 3 (fault-call:2 fault-nth:1): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x0) 18:42:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x50, 0x30, 0x17b, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_bpf={0x38, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) 18:42:01 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) [ 892.768916][T25588] FAULT_INJECTION: forcing a failure. [ 892.768916][T25588] name failslab, interval 1, probability 0, space 0, times 1 [ 892.800887][T25588] CPU: 1 PID: 25588 Comm: syz-executor.3 Not tainted 5.12.0-rc4-syzkaller #0 [ 892.809665][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 892.819706][T25588] Call Trace: [ 892.822976][T25588] dump_stack+0x137/0x19d [ 892.827308][T25588] should_fail+0x23c/0x250 [ 892.831770][T25588] __should_failslab+0x81/0x90 [ 892.836601][T25588] should_failslab+0x5/0x20 [ 892.841100][T25588] kmem_cache_alloc_node_trace+0x5b/0x310 [ 892.846811][T25588] ? __kmalloc_node+0x30/0x40 [ 892.851571][T25588] __kmalloc_node+0x30/0x40 [ 892.856072][T25588] kvmalloc_node+0x81/0xf0 [ 892.860491][T25588] seq_read_iter+0x145/0x910 [ 892.865275][T25588] ? __fsnotify_parent+0x32f/0x430 [ 892.870387][T25588] seq_read+0x221/0x260 [ 892.874566][T25588] do_iter_read+0x2be/0x4b0 [ 892.879131][T25588] do_preadv+0x13b/0x230 [ 892.883400][T25588] ? fput+0x2d/0x130 [ 892.887282][T25588] ? ksys_write+0x157/0x180 [ 892.891766][T25588] __x64_sys_preadv+0x54/0x60 [ 892.896434][T25588] do_syscall_64+0x39/0x80 [ 892.900848][T25588] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 892.906744][T25588] RIP: 0033:0x466459 [ 892.910632][T25588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 892.930220][T25588] RSP: 002b:00007fb83e137188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 892.938606][T25588] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 892.946552][T25588] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 892.954497][T25588] RBP: 00007fb83e1371d0 R08: 0000000000000000 R09: 0000000000000000 [ 892.962459][T25588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.970407][T25588] R13: 00007ffd256c803f R14: 00007fb83e137300 R15: 0000000000022000 [ 893.144534][T19340] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 893.274543][ T4541] usbhid 6-1:0.0: can't add hid device: -71 [ 893.280533][ T4541] usbhid: probe of 6-1:0.0 failed with error -71 [ 893.287508][ T4541] usb 6-1: USB disconnect, device number 48 [ 893.404537][T19340] usb 5-1: Using ep0 maxpacket: 8 [ 893.555541][T19340] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 893.566368][T19340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.577571][T19340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.587423][T19340] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 893.600411][T19340] usb 5-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 893.609617][T19340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.618312][T19340] usb 5-1: config 0 descriptor?? 18:42:02 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:42:02 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:42:02 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:42:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x60, 0x30, 0x17b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 18:42:02 executing program 3 (fault-call:2 fault-nth:2): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x0) [ 893.767485][T25625] FAULT_INJECTION: forcing a failure. [ 893.767485][T25625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.780630][T25625] CPU: 0 PID: 25625 Comm: syz-executor.3 Not tainted 5.12.0-rc4-syzkaller #0 [ 893.789378][T25625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 893.799429][T25625] Call Trace: [ 893.802710][T25625] dump_stack+0x137/0x19d [ 893.807035][T25625] should_fail+0x23c/0x250 [ 893.811445][T25625] should_fail_usercopy+0x16/0x20 [ 893.816460][T25625] _copy_to_iter+0x169/0xa10 [ 893.821048][T25625] ? __check_object_size+0x253/0x310 [ 893.826325][T25625] seq_read_iter+0x7f0/0x910 [ 893.830980][T25625] seq_read+0x221/0x260 [ 893.835201][T25625] do_iter_read+0x2be/0x4b0 [ 893.839751][T25625] do_preadv+0x13b/0x230 [ 893.843987][T25625] ? fput+0x2d/0x130 [ 893.847868][T25625] ? ksys_write+0x157/0x180 [ 893.852385][T25625] __x64_sys_preadv+0x54/0x60 [ 893.857061][T25625] do_syscall_64+0x39/0x80 [ 893.861468][T25625] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 893.867356][T25625] RIP: 0033:0x466459 [ 893.871232][T25625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 893.890829][T25625] RSP: 002b:00007fb83e137188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 893.899217][T25625] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 893.907165][T25625] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 893.915206][T25625] RBP: 00007fb83e1371d0 R08: 0000000000000000 R09: 0000000000000000 [ 893.923156][T25625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.931144][T25625] R13: 00007ffd256c803f R14: 00007fb83e137300 R15: 0000000000022000 [ 894.094591][ T7] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 894.354463][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 894.444477][T19340] usbhid 5-1:0.0: can't add hid device: -71 [ 894.450429][T19340] usbhid: probe of 5-1:0.0 failed with error -71 [ 894.459347][T19340] usb 5-1: USB disconnect, device number 111 [ 894.494489][ T7] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 894.505268][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.516741][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.526766][ T7] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 894.539870][ T7] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 894.549210][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.558099][ T7] usb 6-1: config 0 descriptor?? 18:42:03 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x21, {[@global, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0xa, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:42:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x60, 0x30, 0x17b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 18:42:03 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:42:03 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:42:03 executing program 3 (fault-call:2 fault-nth:3): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x0) 18:42:03 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) [ 894.897054][T25647] FAULT_INJECTION: forcing a failure. [ 894.897054][T25647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 894.948325][T25647] CPU: 1 PID: 25647 Comm: syz-executor.3 Not tainted 5.12.0-rc4-syzkaller #0 [ 894.957179][T25647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 894.967234][T25647] Call Trace: [ 894.970506][T25647] dump_stack+0x137/0x19d [ 894.974829][T25647] should_fail+0x23c/0x250 [ 894.979247][T25647] should_fail_usercopy+0x16/0x20 [ 894.984445][T25647] _copy_to_user+0x1c/0x90 [ 894.988859][T25647] simple_read_from_buffer+0xab/0x120 [ 894.994325][T25647] proc_fail_nth_read+0xf6/0x140 [ 894.999305][T25647] ? rw_verify_area+0x136/0x250 [ 895.004152][T25647] ? proc_fault_inject_write+0x200/0x200 [ 895.009906][T25647] vfs_read+0x154/0x5d0 [ 895.014064][T25647] ? __fget_light+0x219/0x260 [ 895.018789][T25647] ksys_read+0xce/0x180 [ 895.022978][T25647] __x64_sys_read+0x3e/0x50 [ 895.027542][T25647] do_syscall_64+0x39/0x80 [ 895.031954][T25647] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 895.037848][T25647] RIP: 0033:0x4191dc [ 895.041726][T25647] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 895.061319][T25647] RSP: 002b:00007fb83e137170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 895.069706][T25647] RAX: ffffffffffffffda RBX: 0000000000000063 RCX: 00000000004191dc [ 895.077652][T25647] RDX: 000000000000000f RSI: 00007fb83e1371e0 RDI: 0000000000000004 [ 895.085629][T25647] RBP: 00007fb83e1371d0 R08: 0000000000000000 R09: 0000000000000000 18:42:03 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) [ 895.093588][T25647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 895.101535][T25647] R13: 00007ffd256c803f R14: 00007fb83e137300 R15: 0000000000022000 [ 895.214493][ T7] usbhid 6-1:0.0: can't add hid device: -71 [ 895.220439][ T7] usbhid: probe of 6-1:0.0 failed with error -71 [ 895.231383][ T7] usb 6-1: USB disconnect, device number 49 [ 895.264420][ T4541] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 895.504501][ T4541] usb 5-1: Using ep0 maxpacket: 8 18:42:04 executing program 5: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:42:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x60, 0x30, 0x17b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 18:42:04 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:42:04 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x0) 18:42:04 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) [ 895.624435][ T4541] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 895.643305][ T4541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.695417][ T4541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.728254][ T4541] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 895.752516][ T4541] usb 5-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 895.762026][ T4541] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.771846][ T4541] usb 5-1: config 0 descriptor?? [ 896.514397][ T4541] usbhid 5-1:0.0: can't add hid device: -71 [ 896.520377][ T4541] usbhid: probe of 5-1:0.0 failed with error -71 [ 896.531937][ T4541] usb 5-1: USB disconnect, device number 112 18:42:05 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x21, {[@global, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0xa, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:42:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:05 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:05 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:42:05 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x46d}], 0x1, 0x0, 0x0) 18:42:05 executing program 5: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:42:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:05 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:05 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x20000263}], 0x1, 0x0, 0x0) 18:42:05 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:42:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:05 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 897.314308][ T4541] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 897.584313][ T4541] usb 5-1: Using ep0 maxpacket: 8 [ 897.724452][ T4541] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 897.735293][ T4541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.746515][ T4541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.756302][ T4541] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 897.769275][ T4541] usb 5-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 897.778328][ T4541] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.787586][ T4541] usb 5-1: config 0 descriptor?? [ 898.514254][ T4541] usbhid 5-1:0.0: can't add hid device: -71 [ 898.520290][ T4541] usbhid: probe of 5-1:0.0 failed with error -71 [ 898.528124][ T4541] usb 5-1: USB disconnect, device number 113 18:42:07 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x21, {[@global, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0xa, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:42:07 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x7ffff000}], 0x1, 0x0, 0x0) 18:42:07 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) 18:42:07 executing program 1 (fault-call:1 fault-nth:0): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:07 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:42:07 executing program 5: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:42:07 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1fc, 0x0) [ 899.006378][T25764] FAULT_INJECTION: forcing a failure. [ 899.006378][T25764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 899.028304][T25764] CPU: 0 PID: 25764 Comm: syz-executor.1 Not tainted 5.12.0-rc4-syzkaller #0 [ 899.037095][T25764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 899.047337][T25764] Call Trace: [ 899.050612][T25764] dump_stack+0x137/0x19d [ 899.054943][T25764] should_fail+0x23c/0x250 [ 899.059355][T25764] should_fail_usercopy+0x16/0x20 [ 899.064393][T25764] _copy_from_user+0x1c/0xd0 [ 899.068986][T25764] __copy_msghdr_from_user+0x44/0x350 [ 899.074381][T25764] ? __fget_light+0x219/0x260 [ 899.079059][T25764] __sys_sendmsg+0x135/0x270 [ 899.083651][T25764] ? kstrtouint_from_user+0x104/0x130 [ 899.089097][T25764] ? __rcu_read_unlock+0x5c/0x250 [ 899.094116][T25764] ? fsnotify_perm+0x59/0x2e0 [ 899.098788][T25764] ? __fsnotify_parent+0x32f/0x430 [ 899.103891][T25764] ? get_pid_task+0x90/0xc0 [ 899.108385][T25764] ? vfs_write+0x572/0x7e0 [ 899.112870][T25764] ? __fget_light+0x219/0x260 [ 899.117622][T25764] ? fput+0x2d/0x130 [ 899.121510][T25764] ? ksys_write+0x157/0x180 [ 899.126094][T25764] __x64_sys_sendmsg+0x42/0x50 [ 899.130855][T25764] do_syscall_64+0x39/0x80 [ 899.135267][T25764] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 899.141191][T25764] RIP: 0033:0x466459 18:42:07 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0xffffffffffffffff}], 0x1, 0x0, 0x0) 18:42:07 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:42:07 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x1fc, 0x0) 18:42:07 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:42:08 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x1fc, 0x0) [ 899.145078][T25764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 899.164762][T25764] RSP: 002b:00007f143d960188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 899.173191][T25764] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 899.181157][T25764] RDX: 0000000000000000 RSI: 0000000020000980 RDI: 0000000000000003 [ 899.189121][T25764] RBP: 00007f143d9601d0 R08: 0000000000000000 R09: 0000000000000000 [ 899.197083][T25764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.205048][T25764] R13: 00007ffcff3d725f R14: 00007f143d960300 R15: 0000000000022000 [ 899.374186][ T7] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 899.654146][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 899.804307][ T7] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 899.815169][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.826534][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.836669][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 899.849859][ T7] usb 5-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 899.859256][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.869207][ T7] usb 5-1: config 0 descriptor?? [ 900.604106][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 900.610045][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 900.621828][ T7] usb 5-1: USB disconnect, device number 114 18:42:09 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:42:09 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x1fc, 0x0) 18:42:09 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x2, 0x0, 0x0) 18:42:09 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:42:09 executing program 1 (fault-call:1 fault-nth:1): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:09 executing program 4: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x1, 0xc6, 0xb, 0x3, 0x9, 0x9, 0x7, 0x1}, &(0x7f0000000080)=0x20) syz_mount_image$xfs(&(0x7f00000003c0)='xfs\x00', &(0x7f0000000400)='./file1\x00', 0x0, 0x0, &(0x7f0000001900), 0x0, &(0x7f00000019c0)={[{@noattr2='noattr2'}, {@uquota='uquota'}, {@qnoenforce='qnoenforce'}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @local, 0x2}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="16000000", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000040)=r4, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e23, 0x8, @private0={0xfc, 0x0, [], 0x1}, 0x322a}}, 0x0, 0x7, 0x7, 0x0, 0x8, 0x17c4, 0xc3}, &(0x7f0000000180)=0x9c) ioctl$CHAR_RAW_DISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000200)=0x7) 18:42:09 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x1fc, 0x0) 18:42:09 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x3, 0x0, 0x0) 18:42:09 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) [ 901.126129][T25817] FAULT_INJECTION: forcing a failure. [ 901.126129][T25817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 901.159443][T25819] ptrace attach of "/root/syz-executor.0"[25818] was attempted by "/root/syz-executor.0"[25819] 18:42:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000700)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8940, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000140)={0x4, {{0xa, 0x4e21, 0x6f84a6e9, @rand_addr=' \x01\x00'}}, {{0xa, 0x4e20, 0x7ff, @private0, 0x1000}}}, 0x108) 18:42:10 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x1fc, 0x0) [ 901.195387][T25817] CPU: 0 PID: 25817 Comm: syz-executor.1 Not tainted 5.12.0-rc4-syzkaller #0 [ 901.204168][T25817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 901.214265][T25817] Call Trace: [ 901.217530][T25817] dump_stack+0x137/0x19d [ 901.221862][T25817] should_fail+0x23c/0x250 [ 901.226283][T25817] should_fail_usercopy+0x16/0x20 [ 901.231301][T25817] _copy_from_user+0x1c/0xd0 [ 901.235886][T25817] iovec_from_user+0xc4/0x2d0 18:42:10 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x2, @remote, 0xffff}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7fff, 0x0], 0x2, 0x800, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x8, @loopback, 0xd109}], 0x1c) r3 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x8, 0x3690, 0x20, @local, @dev={0xfe, 0x80, [], 0xf}, 0x8, 0x700, 0x3, 0x1}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @local, 0x2}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000040)=r7, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000001c0)={r7, 0x48b}, &(0x7f0000000200)=0x8) r8 = openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x22102, 0x124, 0x1c}, 0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f00000002c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x28) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x7b, &(0x7f0000000100)=@assoc_value={r4}, 0x8) [ 901.240556][T25817] ? __alloc_pages_nodemask+0x1a8/0x350 [ 901.246099][T25817] ? __mod_memcg_lruvec_state+0xfa/0x260 [ 901.251724][T25817] ? should_fail+0xd6/0x250 [ 901.256273][T25817] __import_iovec+0x49/0x270 [ 901.260874][T25817] import_iovec+0xb8/0xd0 [ 901.265198][T25817] __sys_sendmsg+0x1ab/0x270 [ 901.269891][T25817] ? __rcu_read_unlock+0x5c/0x250 [ 901.274915][T25817] ? fsnotify_perm+0x59/0x2e0 [ 901.279600][T25817] ? __fsnotify_parent+0x32f/0x430 [ 901.284701][T25817] ? get_pid_task+0x90/0xc0 [ 901.289191][T25817] ? vfs_write+0x572/0x7e0 [ 901.293653][T25817] ? __fget_light+0x219/0x260 [ 901.298394][T25817] ? fput+0x2d/0x130 [ 901.302282][T25817] ? ksys_write+0x157/0x180 [ 901.306786][T25817] __x64_sys_sendmsg+0x42/0x50 [ 901.311552][T25817] do_syscall_64+0x39/0x80 [ 901.316015][T25817] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 901.321930][T25817] RIP: 0033:0x466459 [ 901.325812][T25817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 901.345403][T25817] RSP: 002b:00007f143d960188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 901.353804][T25817] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 901.361761][T25817] RDX: 0000000000000000 RSI: 0000000020000980 RDI: 0000000000000003 [ 901.369758][T25817] RBP: 00007f143d9601d0 R08: 0000000000000000 R09: 0000000000000000 [ 901.377721][T25817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.385681][T25817] R13: 00007ffcff3d725f R14: 00007f143d960300 R15: 0000000000022000 18:42:10 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:42:10 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:42:10 executing program 1 (fault-call:1 fault-nth:2): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:10 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x1fc, 0x0) 18:42:10 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x4, 0x0, 0x0) 18:42:10 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) [ 901.837573][T25857] ptrace attach of "/root/syz-executor.0"[25855] was attempted by "/root/syz-executor.0"[25857] [ 901.849559][T25859] FAULT_INJECTION: forcing a failure. [ 901.849559][T25859] name failslab, interval 1, probability 0, space 0, times 0 [ 901.878912][T25859] CPU: 1 PID: 25859 Comm: syz-executor.1 Not tainted 5.12.0-rc4-syzkaller #0 [ 901.887754][T25859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 901.897797][T25859] Call Trace: [ 901.901091][T25859] dump_stack+0x137/0x19d [ 901.906120][T25859] should_fail+0x23c/0x250 [ 901.910537][T25859] __should_failslab+0x81/0x90 [ 901.915297][T25859] should_failslab+0x5/0x20 [ 901.919829][T25859] kmem_cache_alloc_node+0x56/0x310 [ 901.925023][T25859] ? __alloc_skb+0xed/0x420 [ 901.929525][T25859] __alloc_skb+0xed/0x420 [ 901.933847][T25859] netlink_sendmsg+0x4c7/0x7c0 [ 901.938603][T25859] ? netlink_getsockopt+0x720/0x720 [ 901.943866][T25859] ____sys_sendmsg+0x360/0x4d0 [ 901.948629][T25859] ? import_iovec+0xb8/0xd0 [ 901.953170][T25859] __sys_sendmsg+0x1ed/0x270 [ 901.957754][T25859] ? __fsnotify_parent+0x32f/0x430 [ 901.962919][T25859] ? get_pid_task+0x90/0xc0 [ 901.967420][T25859] ? vfs_write+0x572/0x7e0 [ 901.971898][T25859] ? __fget_light+0x219/0x260 [ 901.976608][T25859] ? fput+0x2d/0x130 [ 901.980548][T25859] ? ksys_write+0x157/0x180 [ 901.985053][T25859] __x64_sys_sendmsg+0x42/0x50 [ 901.989825][T25859] do_syscall_64+0x39/0x80 [ 901.994264][T25859] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 902.000136][T25859] RIP: 0033:0x466459 [ 902.004006][T25859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 18:42:10 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:42:10 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x5, 0x0, 0x0) 18:42:10 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x1fc, 0x0) [ 902.024240][T25859] RSP: 002b:00007f143d960188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.032628][T25859] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 902.040602][T25859] RDX: 0000000000000000 RSI: 0000000020000980 RDI: 0000000000000003 [ 902.048605][T25859] RBP: 00007f143d9601d0 R08: 0000000000000000 R09: 0000000000000000 [ 902.056710][T25859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.064706][T25859] R13: 00007ffcff3d725f R14: 00007f143d960300 R15: 0000000000022000 18:42:10 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) 18:42:10 executing program 1 (fault-call:1 fault-nth:3): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 902.141922][T25882] FAULT_INJECTION: forcing a failure. [ 902.141922][T25882] name failslab, interval 1, probability 0, space 0, times 0 [ 902.154922][T25882] CPU: 1 PID: 25882 Comm: syz-executor.1 Not tainted 5.12.0-rc4-syzkaller #0 [ 902.163756][T25882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 902.173858][T25882] Call Trace: [ 902.177137][T25882] dump_stack+0x137/0x19d [ 902.181586][T25882] should_fail+0x23c/0x250 [ 902.186124][T25882] __should_failslab+0x81/0x90 [ 902.190880][T25882] should_failslab+0x5/0x20 [ 902.195383][T25882] kmem_cache_alloc_node_trace+0x5b/0x310 [ 902.201194][T25882] ? __kmalloc_node_track_caller+0x30/0x40 [ 902.207495][T25882] __kmalloc_node_track_caller+0x30/0x40 [ 902.213126][T25882] ? netlink_sendmsg+0x4c7/0x7c0 [ 902.218136][T25882] __alloc_skb+0x187/0x420 [ 902.222598][T25882] netlink_sendmsg+0x4c7/0x7c0 [ 902.227363][T25882] ? netlink_getsockopt+0x720/0x720 [ 902.232562][T25882] ____sys_sendmsg+0x360/0x4d0 [ 902.237348][T25882] ? import_iovec+0xb8/0xd0 [ 902.241883][T25882] __sys_sendmsg+0x1ed/0x270 [ 902.246472][T25882] ? __fsnotify_parent+0x32f/0x430 [ 902.251628][T25882] ? get_pid_task+0x90/0xc0 [ 902.256141][T25882] ? vfs_write+0x572/0x7e0 [ 902.260553][T25882] ? __fget_light+0x219/0x260 [ 902.265259][T25882] ? fput+0x2d/0x130 [ 902.269177][T25882] ? ksys_write+0x157/0x180 [ 902.273680][T25882] __x64_sys_sendmsg+0x42/0x50 [ 902.278439][T25882] do_syscall_64+0x39/0x80 [ 902.282848][T25882] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 902.288783][T25882] RIP: 0033:0x466459 [ 902.292698][T25882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 902.312844][T25882] RSP: 002b:00007f143d960188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.321234][T25882] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 902.329179][T25882] RDX: 0000000000000000 RSI: 0000000020000980 RDI: 0000000000000003 18:42:11 executing program 4: syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004a634e2005015f1471830000000109022d00010000000009040000000202ff00052406000005240000000d240f010069784b5f844f4197042402"], 0x0) r0 = syz_usb_connect(0x3, 0x87b, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0xbc, 0x19, 0x5c, 0x10, 0xaf0, 0x8600, 0xa858, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x869, 0x4, 0xdd, 0x40, 0x40, 0x1, [{{0x9, 0x4, 0x6d, 0x80, 0x4, 0xab, 0x72, 0xfe, 0x4, [@generic={0xfe, 0x8, "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"}], [{{0x9, 0x5, 0x5, 0x10, 0x40, 0x8, 0x4, 0x2}}, {{0x9, 0x5, 0xa, 0x1, 0x10, 0x4, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x9}]}}, {{0x9, 0x5, 0x8, 0x4, 0x8, 0x3f, 0x3f, 0x4, [@generic={0x100, 0x11, "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"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x230, 0x1, 0x2, 0x0, [@generic={0x28, 0x8, "d15bb45c2212bdebc997d2eaca1dd3eefca57f8563fa45082973bf6a02444c57fc069eaaf194"}]}}]}}, {{0x9, 0x4, 0x0, 0x71, 0x6, 0x80, 0x1, 0xfe, 0x7, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "b9c43ec5"}, {0x5, 0x24, 0x0, 0xfff7}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0x7, 0x4}, [@acm={0x4}, @country_functional={0xe, 0x24, 0x7, 0x0, 0x9, [0x972, 0x4, 0x5, 0x100]}, @acm={0x4, 0x24, 0x2, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x7f, 0x1, 0x4, 0x5, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffd, 0x7, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8e}]}], [{{0x9, 0x5, 0x7, 0x14, 0x10, 0x3f, 0x7f, 0xb0, [@generic={0x70, 0x1, "a3f4e4e816ac89392937e3b1fb6ce411fa47451283e9e6d21243eb5ac70d89d9b46844797b9099ca55706ab03e8b31a2bdedbf4f6daedfc907cf144b5afb117ebd6abfa66d79cec9d2fd6c451622c9b789b0c0542fe0b43a0e45862834b4c7e22e94c67f0f05d2c202f873dd3d93"}, @generic={0x51, 0x23, "a9afba43a1cef55835aa3eb02acc1a25208795923c6eda5ec005b553703ec5f78fe82f04d8f687080343f33071eb11f374bc18f39666db90d5af6a6e6ed03cb1efdb57397616b3e413f2fb0970b336"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x6, 0x0, 0x9, [@generic={0xdb, 0x6, "069c57921798ce547b0faee7552c1f803a157b20e507ad426ffa36e11b71d6a44053e873c76009540f7a347bfd030269e17cbc43f39179e86388f99c3cb6a2f6e4ecd0a436c435322ed8c56d573260b53400cbf5670a0912589eb3e55e64b23dbf2188e5a70e5733907b55883e3f6499e6a6ec69eb96a82cb1cfb8e9c8ef4ab67f5b9d822fd25eb87676c37db98de303d72e003ea9f9ca8299c6d33732e821e8755cfefde0285479aa006aff74226dc8c491cfb155dcec5f946381a2b7267af33b45daefa33cae40c39f925ab5a28d63c90ca1bc92a76a3f1c"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x6}]}}, {{0x9, 0x5, 0x6, 0x6, 0x200, 0x7f, 0xff, 0x1, [@generic={0xda, 0x4, "9165ce1b92340e2976b21bdbf038c68b8f046173e01606614c4ba59054d2651578f4a83cc64126b234169f41ebe5d426e4b92707d74ef59f64fb73e610ed3f45ccb255fb2875646b35c7798ed0ca58e7d6d0a7a374f6e13cd3aec25dfa6ab56490b8ab1320bbf03e0d5358387441df3ecada9b8870581640e612b128b889a858f8f1a612e46aa7d87943eb40c631d7e5d41e93750f55b7b0826b618938c16e0fa36a1fddd48a1fa16088658f5b3ceadf5094a7367556eaa8a8a3b16a670e2d8f0e1538b9eb7da632bcb41e74c451f3e0e4b59cd816582175"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0xa, 0xb5, 0xe1}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x18, 0x5, 0x2, [@generic={0xfa, 0x21, "5fe3037399be5a650e5031e0c3ab2cab647cae4649244c74297bde5497d9576605ba2d91fc96020e3010113ba0b33af96007a5d60665755cf0616f37305a0b8c0d4b794fb90b2b6d931ef275a5a649cb0fec28c6ebdaece52847716e088d393f374648d3ecf426233e74a5984f714a406e4f675025368d39f2e518dedcd2e6b29ac37c7c4a4545c83f7f9fcd22e0e4d5439de1022395549807d82f438c3cbd5b7b93d91a1740fc488e1c90c98b26c6650b0db7628fe3ba567d1a552a7ce306930248bcd014313b97fad89ca70b66d74d55b5f5e97500a69d35a34df284011bb7f41c2b7ddbfa07d7ab737be56abb87642169dd5aa2656809"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x200}]}}, {{0x9, 0x5, 0x879c32cd36db5e64, 0x0, 0x8, 0x7f, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x62}, @generic={0xc2, 0x23, "8f3ff16c74f19999848566138a132193d1179d4fdbc3992132cfdf699706f978aee187e0d103b11c12975d5d10b0f3730d661bff70dbc3431cc3a370187f605e89853a01bd4b4dacf2a527ad916cad9d3e9a7093231fbf3b2605122d612a1d4a9a3ad3568d15445144d7152c887c007e9c9a456d75a387991289742f41f243b06ebe03ff5e74734e612ef65d406a4214de79d76650462487f2487d44fd304427455cf82014c74a8ac53f952bb282e03e059644b1d2b35151f17f53162d4fd1ca"}]}}]}}, {{0x9, 0x4, 0x5a, 0x6, 0x8, 0x70, 0x5e, 0x4c, 0x1f, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "3b7596f65ddb"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x5, 0xff}, [@obex={0x5, 0x24, 0x15, 0x1f}, @acm={0x4}, @obex={0x5, 0x24, 0x15, 0x3}]}], [{{0x9, 0x5, 0x5, 0x1, 0x20, 0x1, 0x6, 0x6}}, {{0x9, 0x5, 0x2, 0x1c, 0x10, 0x2, 0x20, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x81, 0x100}]}}, {{0x9, 0x5, 0x80, 0x8, 0x200, 0xe4, 0x2, 0x50, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x76b9}]}}, {{0x9, 0x5, 0xf, 0x0, 0x48, 0x21, 0x3, 0xe5, [@generic={0xd, 0x3, "0d91cff98319be7d1c87d0"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0xff, 0x1f, 0x2}}, {{0x9, 0x5, 0x6, 0x8, 0x40, 0xfe, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x7f, 0x2}]}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0xc9, 0x45, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x62, 0x30b}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0xe0, 0x4, 0x1}}]}}, {{0x9, 0x4, 0x19, 0x81, 0x3, 0xff, 0xff, 0xff, 0x7, [@generic={0x5f, 0x8, "f4d941e7b090901f35197370d1b2f2d99f49758528af543e38cb1188fb60baa8c9f755b86dddd6ff05e5024fabc224543d5110e50485f5d8c10a06804830135687d228c9a68d3805e1efba8cb06a550e14f7b45de6c37980f1cca686a5"}], [{{0x9, 0x5, 0xe, 0x37644565fae1e25f, 0x40, 0x20, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x9c43}]}}, {{0x9, 0x5, 0x7, 0x1, 0x20, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0x80, 0x0, 0x0, 0x1, 0x4, 0x1}}]}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x3, 0x81, 0x9, 0x20, 0xc0}, 0x30, &(0x7f0000000900)={0x5, 0xf, 0x30, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0xb, 0x5}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x400, 0xf0f, 0x7, [0xff0000, 0x3f00, 0x3f60, 0x0, 0x30, 0xc0]}]}, 0x5, [{0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x407}}, {0x101, &(0x7f0000000980)=@string={0x101, 0x3, "fbb872017c3d9ad5b3dbcb317dd595f1422b4d8e632e551cbf7f87d096702aff692022b0709bdb706b3d86c613acde579742295ab3a9c3dfe4d574e0080347c55e66c4b75959944a5e93f6e05f06a8d1ae3543a6e99788434cfb2cc2403e76bd4db206dd9d4e12f78f9fb6afe2b0bb6b5027316ee4c84467221cb2f6efc53993205c216077383bd52b90a4a40775433f9d8e7784618fd38055d56d6ac1a64ae0af063bd1460373a3f5936269993d9a4ea579f13dd20b38639ded746eb927744dd75c622696cc9ff3a30c0e7cfcb369fe419bed9d1613737c04fecb57e0fc80f26c336da9960a4f746547cd0255f86b517c87cf01fe79cc90de838dbd732224"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xf1, &(0x7f0000000b00)=@string={0xf1, 0x3, "3a3e14e6b308644dc8570501327297bde14c7aaee8ec7914531734f0665afdae3a138101c6381360d4809733145c6137e40c6b9ce188d433f46b9f0b0f9b053b4969b521eee2960bcbca7c6d61de089542e81528b61798aae9b3cd8ab79362f3198f5b70ad13c73fa585313d016f413bef6c7ae95ece32a5880c9f4f28593880fd4af7faa38a24dc5867da82753469b83635701bd66d3d4809d0a6db2cecbe15db991f835ab0376b1f977cb901e1fbb81c034f193f98bd814bb2ae315893122f19608885c9add6b69e9ea79956da708266e16c1dc7ad5849af32d7e56ba8e7cc042c73bd45e7ba3efa26cbf125f354"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x414}}]}) syz_usb_control_io(r0, &(0x7f0000000ec0)={0x2c, &(0x7f0000000cc0)={0x20, 0x31, 0x1d, {0x1d, 0xe, "eea9e2e61b8f0e16560b073998300769225215c028454e9f7d5cea"}}, &(0x7f0000000d00)={0x0, 0x3, 0x55, @string={0x55, 0x3, "3bf9cdd6892094b48f32808df8dd03928f379ef7e9d9ccd897afa676a3c3860b08bfe6e99dfce6d2f3a46cf96948ea9b090d4707164214b9d4c7c0bdab1af942e6394ce222a77612e9c3b00085701633e9ef16"}}, &(0x7f0000000d80)={0x0, 0xf, 0xac, {0x5, 0xf, 0xac, 0x4, [@generic={0x8f, 0x10, 0x3, "40f5115bff3bb6632e0d2eac61064d3fbf01f0e894b2c16fcdd4c86099963c19ed84a381eef2682f1f78e7ead81cd89541a7623e49bde68fb09180b268ffb40a848fc0eeef307bf2987aafc5260825c118e90af81615d6e26e816a14276d56b05d643cd0cd11c2aa65c07e5437c6d2bd9ef5edf51040293f941a87b75129ca3a4495cea42cacc4a8e54c72dd"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x93, 0x1, 0x7f, 0x8e0f, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x52, 0x3, 0x7}]}}, &(0x7f0000000e40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x60, 0x54, 0xff, "690fa591", "fbe11529"}}, &(0x7f0000000e80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x1, 0x5, 0xfd, 0x3f, 0x545, 0x2}}}, &(0x7f0000001380)={0x84, &(0x7f0000000f00)={0x20, 0x5, 0xa5, "e8fff2cd701fe2e812d9b73548fb8f80a44cd1fbad0f1d02c94c3cc6625ff1984c17d83aa14a98892d1d9bac45a174ecef9624d65aee56492d6dd6600d8d8df92b2190d3a4baa0430ad301171a56dadd1d3cf77c8b3e4ff690920d9d210ebcd905617fb581064026824ff0bb5289964e95dc8b16529748fa2ce1b0d171acb181fc19526d6c0f327e684efd48641a01b7c648e2110705c40bd9c191a2cbc5ddd4454db249ad"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001040)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000001080)={0x20, 0x0, 0x8, {0x0, 0x8, [0xf00]}}, &(0x7f00000010c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000001100)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001140)={0x40, 0xb, 0x2, "27ec"}, &(0x7f0000001180)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000011c0)={0x40, 0x13, 0x6, @dev={[], 0xf}}, &(0x7f0000001200)={0x40, 0x17, 0x6, @local}, &(0x7f0000001240)={0x40, 0x19, 0x2, "17df"}, &(0x7f0000001280)={0x40, 0x1a, 0x2, 0x8b98}, &(0x7f00000012c0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000001300)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001340)={0x40, 0x21, 0x1}}) [ 902.337124][T25882] RBP: 00007f143d9601d0 R08: 0000000000000000 R09: 0000000000000000 [ 902.345087][T25882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.353037][T25882] R13: 00007ffcff3d725f R14: 00007f143d960300 R15: 0000000000022000 18:42:11 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x6, 0x0, 0x0) 18:42:11 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:42:11 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x1fc, 0x0) 18:42:11 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:11 executing program 1 (fault-call:1 fault-nth:4): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:11 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x1fc, 0x0) [ 902.687353][ T7] usb 5-1: new high-speed USB device number 115 using dummy_hcd 18:42:11 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x7, 0x0, 0x0) 18:42:11 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x0) [ 902.730704][T25907] FAULT_INJECTION: forcing a failure. [ 902.730704][T25907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 902.765423][T25907] CPU: 0 PID: 25907 Comm: syz-executor.1 Not tainted 5.12.0-rc4-syzkaller #0 [ 902.774298][T25907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 902.784342][T25907] Call Trace: [ 902.787610][T25907] dump_stack+0x137/0x19d [ 902.791932][T25907] should_fail+0x23c/0x250 [ 902.796340][T25907] should_fail_usercopy+0x16/0x20 [ 902.801364][T25907] _copy_from_iter_full+0x11f/0x5f0 [ 902.807263][T25907] ? __virt_addr_valid+0x15a/0x1a0 [ 902.812373][T25907] ? __check_object_size+0x253/0x310 [ 902.817717][T25907] netlink_sendmsg+0x579/0x7c0 [ 902.822482][T25907] ? netlink_getsockopt+0x720/0x720 [ 902.827675][T25907] ____sys_sendmsg+0x360/0x4d0 [ 902.832438][T25907] ? import_iovec+0xb8/0xd0 [ 902.836934][T25907] __sys_sendmsg+0x1ed/0x270 [ 902.841589][T25907] ? __fsnotify_parent+0x32f/0x430 [ 902.846694][T25907] ? get_pid_task+0x90/0xc0 [ 902.851188][T25907] ? vfs_write+0x572/0x7e0 [ 902.855669][T25907] ? __fget_light+0x219/0x260 [ 902.860355][T25907] ? fput+0x2d/0x130 [ 902.864291][T25907] ? ksys_write+0x157/0x180 [ 902.868789][T25907] __x64_sys_sendmsg+0x42/0x50 [ 902.873555][T25907] do_syscall_64+0x39/0x80 [ 902.878086][T25907] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 902.884138][T25907] RIP: 0033:0x466459 [ 902.888050][T25907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 902.908301][T25907] RSP: 002b:00007f143d960188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.916759][T25907] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 18:42:11 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:11 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x8, 0x0, 0x0) 18:42:11 executing program 2 (fault-call:5 fault-nth:0): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x0) [ 902.924730][T25907] RDX: 0000000000000000 RSI: 0000000020000980 RDI: 0000000000000003 [ 902.932704][T25907] RBP: 00007f143d9601d0 R08: 0000000000000000 R09: 0000000000000000 [ 902.940650][T25907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.948710][T25907] R13: 00007ffcff3d725f R14: 00007f143d960300 R15: 0000000000022000 [ 903.002413][T25922] FAULT_INJECTION: forcing a failure. [ 903.002413][T25922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.018642][T25922] CPU: 0 PID: 25922 Comm: syz-executor.2 Not tainted 5.12.0-rc4-syzkaller #0 [ 903.027405][T25922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 903.037446][T25922] Call Trace: [ 903.040788][T25922] dump_stack+0x137/0x19d [ 903.045114][T25922] should_fail+0x23c/0x250 [ 903.049517][T25922] should_fail_usercopy+0x16/0x20 [ 903.054532][T25922] _copy_from_user+0x1c/0xd0 [ 903.059119][T25922] iovec_from_user+0xc4/0x2d0 [ 903.063788][T25922] __import_iovec+0x49/0x270 [ 903.068393][T25922] ? __rcu_read_unlock+0x5c/0x250 [ 903.073452][T25922] ? fsnotify_perm+0x59/0x2e0 [ 903.078131][T25922] import_iovec+0xb8/0xd0 [ 903.082452][T25922] do_preadv+0x109/0x230 [ 903.086698][T25922] ? __fget_light+0x219/0x260 [ 903.091372][T25922] ? fput+0x2d/0x130 [ 903.095265][T25922] ? ksys_write+0x157/0x180 [ 903.099763][T25922] __x64_sys_preadv+0x54/0x60 [ 903.105130][T25922] do_syscall_64+0x39/0x80 [ 903.109541][T25922] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 903.115431][T25922] RIP: 0033:0x466459 [ 903.119314][T25922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 903.138904][T25922] RSP: 002b:00007f24176f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 903.147351][T25922] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 903.155296][T25922] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 903.163242][T25922] RBP: 00007f24176f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 903.171200][T25922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.179153][T25922] R13: 00007ffc91fcd00f R14: 00007f24176f4300 R15: 0000000000022000 [ 903.235085][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 903.353960][ T7] usb 5-1: New USB device found, idVendor=0105, idProduct=145f, bcdDevice=83.71 [ 903.363055][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.373246][ T7] usb 5-1: config 0 descriptor?? [ 903.414726][ T7] rndis_wlan: probe of 5-1:0.0 failed with error -22 [ 903.421936][ T7] rndis_host: probe of 5-1:0.0 failed with error -22 [ 903.615736][T25891] udc-core: couldn't find an available UDC or it's busy [ 903.622746][T25891] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 903.632222][ T4812] usb 5-1: USB disconnect, device number 115 [ 904.393877][ T7] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 904.664087][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 904.803935][ T7] usb 5-1: New USB device found, idVendor=0105, idProduct=145f, bcdDevice=83.71 [ 904.812979][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.823635][ T7] usb 5-1: config 0 descriptor?? [ 904.864270][ T7] rndis_wlan: probe of 5-1:0.0 failed with error -22 [ 904.871079][ T7] rndis_host: probe of 5-1:0.0 failed with error -22 18:42:13 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000980)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0xfd}}}}}]}}]}}, &(0x7f0000000f80)={0x0, 0x0, 0xf, &(0x7f0000000a00)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x10, 0xfc}]}}) 18:42:13 executing program 1 (fault-call:1 fault-nth:5): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:13 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:13 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x9, 0x0, 0x0) 18:42:13 executing program 2 (fault-call:5 fault-nth:1): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x0) 18:42:13 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) [ 905.065044][T25891] udc-core: couldn't find an available UDC or it's busy [ 905.065798][ T7] usb 5-1: USB disconnect, device number 116 [ 905.072003][T25891] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 905.129030][T25970] FAULT_INJECTION: forcing a failure. [ 905.129030][T25970] name failslab, interval 1, probability 0, space 0, times 0 [ 905.143440][T25970] CPU: 0 PID: 25970 Comm: syz-executor.1 Not tainted 5.12.0-rc4-syzkaller #0 [ 905.148496][T25972] FAULT_INJECTION: forcing a failure. [ 905.148496][T25972] name failslab, interval 1, probability 0, space 0, times 0 [ 905.152328][T25970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 905.152340][T25970] Call Trace: [ 905.152348][T25970] dump_stack+0x137/0x19d [ 905.182568][T25970] should_fail+0x23c/0x250 [ 905.186974][T25970] ? skb_clone+0x12c/0x1f0 [ 905.191431][T25970] __should_failslab+0x81/0x90 [ 905.196184][T25970] should_failslab+0x5/0x20 [ 905.200749][T25970] kmem_cache_alloc+0x46/0x320 [ 905.205497][T25970] ? rhashtable_jhash2+0x13a/0x1a0 [ 905.210662][T25970] skb_clone+0x12c/0x1f0 [ 905.214902][T25970] netlink_deliver_tap+0x2a0/0x470 [ 905.220094][T25970] ? __rcu_read_unlock+0x5c/0x250 [ 905.225110][T25970] netlink_unicast+0x5de/0x6c0 [ 905.229860][T25970] netlink_sendmsg+0x6f8/0x7c0 [ 905.234624][T25970] ? netlink_getsockopt+0x720/0x720 [ 905.239879][T25970] ____sys_sendmsg+0x360/0x4d0 [ 905.244630][T25970] ? import_iovec+0xb8/0xd0 [ 905.249116][T25970] __sys_sendmsg+0x1ed/0x270 [ 905.253731][T25970] ? __fsnotify_parent+0x32f/0x430 [ 905.258903][T25970] ? get_pid_task+0x90/0xc0 [ 905.263427][T25970] ? vfs_write+0x572/0x7e0 [ 905.267827][T25970] ? __fget_light+0x219/0x260 [ 905.272487][T25970] ? fput+0x2d/0x130 [ 905.276448][T25970] ? ksys_write+0x157/0x180 [ 905.280952][T25970] __x64_sys_sendmsg+0x42/0x50 [ 905.285712][T25970] do_syscall_64+0x39/0x80 [ 905.290122][T25970] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 905.296010][T25970] RIP: 0033:0x466459 [ 905.299883][T25970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 905.319474][T25970] RSP: 002b:00007f143d960188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 18:42:14 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xa, 0x0, 0x0) [ 905.327865][T25970] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 905.335819][T25970] RDX: 0000000000000000 RSI: 0000000020000980 RDI: 0000000000000003 [ 905.343783][T25970] RBP: 00007f143d9601d0 R08: 0000000000000000 R09: 0000000000000000 [ 905.351794][T25970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.359747][T25970] R13: 00007ffcff3d725f R14: 00007f143d960300 R15: 0000000000022000 [ 905.371273][T25972] CPU: 1 PID: 25972 Comm: syz-executor.2 Not tainted 5.12.0-rc4-syzkaller #0 [ 905.380041][T25972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 905.390161][T25972] Call Trace: [ 905.393443][T25972] dump_stack+0x137/0x19d [ 905.397782][T25972] should_fail+0x23c/0x250 [ 905.402199][T25972] __should_failslab+0x81/0x90 [ 905.406954][T25972] should_failslab+0x5/0x20 [ 905.411450][T25972] kmem_cache_alloc_node_trace+0x5b/0x310 [ 905.417166][T25972] ? __kmalloc_node+0x30/0x40 [ 905.421876][T25972] __kmalloc_node+0x30/0x40 18:42:14 executing program 1 (fault-call:1 fault-nth:6): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 905.426370][T25972] kvmalloc_node+0x81/0xf0 [ 905.430840][T25972] seq_read_iter+0x145/0x910 [ 905.435418][T25972] ? __fsnotify_parent+0x32f/0x430 [ 905.440566][T25972] seq_read+0x221/0x260 [ 905.444711][T25972] do_iter_read+0x2be/0x4b0 [ 905.449282][T25972] do_preadv+0x13b/0x230 [ 905.453514][T25972] ? fput+0x2d/0x130 [ 905.457228][T25987] FAULT_INJECTION: forcing a failure. [ 905.457228][T25987] name failslab, interval 1, probability 0, space 0, times 0 [ 905.457396][T25972] ? ksys_write+0x157/0x180 [ 905.474468][T25972] __x64_sys_preadv+0x54/0x60 [ 905.479143][T25972] do_syscall_64+0x39/0x80 [ 905.483557][T25972] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 905.489559][T25972] RIP: 0033:0x466459 [ 905.493434][T25972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 905.513020][T25972] RSP: 002b:00007f24176f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 905.521422][T25972] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 905.529372][T25972] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 905.537320][T25972] RBP: 00007f24176f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 905.545279][T25972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.553228][T25972] R13: 00007ffc91fcd00f R14: 00007f24176f4300 R15: 0000000000022000 [ 905.561186][T25987] CPU: 0 PID: 25987 Comm: syz-executor.1 Not tainted 5.12.0-rc4-syzkaller #0 [ 905.569943][T25987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 905.580007][T25987] Call Trace: [ 905.583272][T25987] dump_stack+0x137/0x19d [ 905.587596][T25987] should_fail+0x23c/0x250 [ 905.592005][T25987] __should_failslab+0x81/0x90 [ 905.596830][T25987] ? tcf_action_init_1+0x13e/0x420 [ 905.602007][T25987] should_failslab+0x5/0x20 [ 905.606495][T25987] kmem_cache_alloc_trace+0x49/0x340 [ 905.611757][T25987] ? __nla_parse+0x3c/0x50 [ 905.616173][T25987] tcf_action_init_1+0x13e/0x420 [ 905.621136][T25987] ? tc_action_load_ops+0x1ea/0x430 [ 905.626312][T25987] tcf_action_init+0x16e/0x3a0 [ 905.631063][T25987] tc_ctl_action+0x209/0x530 [ 905.635647][T25987] ? tcf_free_cookie_rcu+0x30/0x30 [ 905.640756][T25987] rtnetlink_rcv_msg+0x728/0x7c0 [ 905.645692][T25987] ? ___cache_free+0x3c/0x2f0 [ 905.650348][T25987] ? skb_network_protocol+0x144/0x340 [ 905.655704][T25987] ? __kfree_skb+0xfe/0x150 [ 905.660187][T25987] ? kmem_cache_free+0x59/0x100 [ 905.665016][T25987] ? __kfree_skb+0xfe/0x150 [ 905.669499][T25987] ? consume_skb+0x4b/0x160 [ 905.673983][T25987] ? nlmon_xmit+0x47/0x50 [ 905.678301][T25987] ? xmit_one+0x173/0x2e0 [ 905.682612][T25987] ? local_bh_enable+0x1b/0x20 [ 905.687351][T25987] ? __dev_queue_xmit+0xc25/0x1580 [ 905.692462][T25987] ? __skb_clone+0x2b9/0x2d0 [ 905.697044][T25987] ? __rcu_read_unlock+0x5c/0x250 [ 905.702070][T25987] netlink_rcv_skb+0x13e/0x240 [ 905.706811][T25987] ? rtnetlink_bind+0x60/0x60 [ 905.711475][T25987] rtnetlink_rcv+0x18/0x20 [ 905.715871][T25987] netlink_unicast+0x5fc/0x6c0 [ 905.720658][T25987] netlink_sendmsg+0x6f8/0x7c0 [ 905.725403][T25987] ? netlink_getsockopt+0x720/0x720 [ 905.730632][T25987] ____sys_sendmsg+0x360/0x4d0 [ 905.735454][T25987] ? import_iovec+0xb8/0xd0 [ 905.739938][T25987] __sys_sendmsg+0x1ed/0x270 [ 905.744628][T25987] ? __fsnotify_parent+0x32f/0x430 [ 905.749729][T25987] ? get_pid_task+0x90/0xc0 [ 905.754212][T25987] ? vfs_write+0x572/0x7e0 [ 905.758622][T25987] ? __fget_light+0x219/0x260 [ 905.763277][T25987] ? fput+0x2d/0x130 [ 905.767151][T25987] ? ksys_write+0x157/0x180 [ 905.771644][T25987] __x64_sys_sendmsg+0x42/0x50 [ 905.776410][T25987] do_syscall_64+0x39/0x80 [ 905.780825][T25987] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 905.786768][T25987] RIP: 0033:0x466459 [ 905.790640][T25987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 905.810228][T25987] RSP: 002b:00007f143d960188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 905.818625][T25987] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 18:42:14 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:14 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xb, 0x0, 0x0) 18:42:14 executing program 1 (fault-call:1 fault-nth:7): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:14 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xc, 0x0, 0x0) [ 905.826582][T25987] RDX: 0000000000000000 RSI: 0000000020000980 RDI: 0000000000000003 [ 905.834531][T25987] RBP: 00007f143d9601d0 R08: 0000000000000000 R09: 0000000000000000 [ 905.842480][T25987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.850448][T25987] R13: 00007ffcff3d725f R14: 00007f143d960300 R15: 0000000000022000 [ 905.932516][T25997] FAULT_INJECTION: forcing a failure. [ 905.932516][T25997] name failslab, interval 1, probability 0, space 0, times 0 [ 905.933821][ T4541] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 905.959155][T25997] CPU: 1 PID: 25997 Comm: syz-executor.1 Not tainted 5.12.0-rc4-syzkaller #0 [ 905.967913][T25997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 905.977954][T25997] Call Trace: [ 905.981293][T25997] dump_stack+0x137/0x19d [ 905.985700][T25997] should_fail+0x23c/0x250 [ 905.990105][T25997] ? radix_tree_node_alloc+0x9c/0x1f0 [ 905.995542][T25997] __should_failslab+0x81/0x90 [ 906.000324][T25997] should_failslab+0x5/0x20 [ 906.004824][T25997] kmem_cache_alloc+0x46/0x320 [ 906.009578][T25997] radix_tree_node_alloc+0x9c/0x1f0 [ 906.014766][T25997] idr_get_free+0x22a/0x5d0 [ 906.019256][T25997] idr_alloc_u32+0xaa/0x150 [ 906.023758][T25997] tcf_idr_check_alloc+0x138/0x230 [ 906.028867][T25997] tcf_bpf_init+0x13c/0x7c0 [ 906.033372][T25997] ? kmem_cache_alloc_trace+0x1c6/0x340 [ 906.038908][T25997] tcf_action_init_1+0x2d5/0x420 [ 906.043956][T25997] tcf_action_init+0x16e/0x3a0 [ 906.048708][T25997] tc_ctl_action+0x209/0x530 [ 906.053273][T25997] ? rb_insert_color+0x2fa/0x310 [ 906.058189][T25997] ? tcf_free_cookie_rcu+0x30/0x30 [ 906.063342][T25997] rtnetlink_rcv_msg+0x728/0x7c0 [ 906.068256][T25997] ? ___cache_free+0x3c/0x2f0 [ 906.072940][T25997] ? skb_network_protocol+0x144/0x340 [ 906.078318][T25997] ? __kfree_skb+0xfe/0x150 [ 906.082813][T25997] ? kmem_cache_free+0x59/0x100 [ 906.087677][T25997] ? __kfree_skb+0xfe/0x150 [ 906.092170][T25997] ? consume_skb+0x4b/0x160 [ 906.096648][T25997] ? nlmon_xmit+0x47/0x50 [ 906.100954][T25997] ? xmit_one+0x173/0x2e0 [ 906.105261][T25997] ? local_bh_enable+0x1b/0x20 [ 906.109997][T25997] ? __dev_queue_xmit+0xc25/0x1580 [ 906.115122][T25997] ? __skb_clone+0x2b9/0x2d0 [ 906.119689][T25997] ? __rcu_read_unlock+0x5c/0x250 [ 906.124695][T25997] netlink_rcv_skb+0x13e/0x240 [ 906.129433][T25997] ? rtnetlink_bind+0x60/0x60 [ 906.134127][T25997] rtnetlink_rcv+0x18/0x20 [ 906.138585][T25997] netlink_unicast+0x5fc/0x6c0 [ 906.143336][T25997] netlink_sendmsg+0x6f8/0x7c0 [ 906.148122][T25997] ? netlink_getsockopt+0x720/0x720 [ 906.153374][T25997] ____sys_sendmsg+0x360/0x4d0 [ 906.158159][T25997] ? import_iovec+0xb8/0xd0 [ 906.162635][T25997] __sys_sendmsg+0x1ed/0x270 [ 906.167376][T25997] ? __fsnotify_parent+0x32f/0x430 [ 906.172522][T25997] ? get_pid_task+0x90/0xc0 [ 906.177077][T25997] ? vfs_write+0x572/0x7e0 [ 906.181470][T25997] ? __fget_light+0x219/0x260 [ 906.186122][T25997] ? fput+0x2d/0x130 [ 906.190061][T25997] ? ksys_write+0x157/0x180 [ 906.194608][T25997] __x64_sys_sendmsg+0x42/0x50 [ 906.199415][T25997] do_syscall_64+0x39/0x80 [ 906.203806][T25997] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 906.209701][T25997] RIP: 0033:0x466459 [ 906.213568][T25997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 906.233147][T25997] RSP: 002b:00007f143d960188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.241574][T25997] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 906.249519][T25997] RDX: 0000000000000000 RSI: 0000000020000980 RDI: 0000000000000003 [ 906.257479][T25997] RBP: 00007f143d9601d0 R08: 0000000000000000 R09: 0000000000000000 [ 906.265429][T25997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.273392][T25997] R13: 00007ffcff3d725f R14: 00007f143d960300 R15: 0000000000022000 [ 906.443742][ T4541] usb 6-1: device descriptor read/64, error 18 [ 906.503744][ T7] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 906.713736][ T4541] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 906.753721][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 906.903719][ T4541] usb 6-1: device descriptor read/64, error 18 [ 906.983870][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 907.023756][ T4541] usb usb6-port1: attempt power cycle [ 907.204340][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 907.213383][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.221878][ T7] usb 5-1: Product: syz [ 907.226354][ T7] usb 5-1: Manufacturer: syz [ 907.230940][ T7] usb 5-1: SerialNumber: syz [ 907.476292][T19340] usb 5-1: USB disconnect, device number 117 [ 907.733695][ T4541] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 907.824383][ T4541] usb 6-1: Invalid ep0 maxpacket: 0 [ 907.973740][ T4541] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 908.063679][ T4541] usb 6-1: Invalid ep0 maxpacket: 0 [ 908.068899][ T4541] usb usb6-port1: unable to enumerate USB device [ 908.253743][ T7] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 908.503619][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 908.723897][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 18:42:17 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000004dd6000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100001f34010400000000000000040004800000020073797a30002e37000900010073797a30ec000000080003400000000022000200b717fa41a1c9ef49ca7d80", @ANYRES16, @ANYBLOB="578d9ab514aaac741c23fe034a77f415c193db21"], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 18:42:17 executing program 2 (fault-call:5 fault-nth:2): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x0) 18:42:17 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:17 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xd, 0x0, 0x0) 18:42:17 executing program 1 (fault-call:1 fault-nth:8): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:17 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) [ 908.825801][T26030] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 908.836432][T26034] FAULT_INJECTION: forcing a failure. [ 908.836432][T26034] name failslab, interval 1, probability 0, space 0, times 0 [ 908.838474][T26036] FAULT_INJECTION: forcing a failure. [ 908.838474][T26036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 908.859347][T26034] CPU: 0 PID: 26034 Comm: syz-executor.1 Not tainted 5.12.0-rc4-syzkaller #0 [ 908.870916][T26034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.880951][T26034] Call Trace: [ 908.884214][T26034] dump_stack+0x137/0x19d [ 908.888529][T26034] should_fail+0x23c/0x250 [ 908.892963][T26034] __should_failslab+0x81/0x90 [ 908.897705][T26034] ? kzalloc+0x16/0x20 [ 908.901754][T26034] should_failslab+0x5/0x20 [ 908.906243][T26034] __kmalloc+0x66/0x380 [ 908.910377][T26034] ? __radix_tree_replace+0x187/0x1a0 [ 908.915728][T26034] kzalloc+0x16/0x20 [ 908.919607][T26034] tcf_idr_create+0x39/0x3b0 [ 908.924180][T26034] tcf_bpf_init+0x1d1/0x7c0 [ 908.928672][T26034] ? kmem_cache_alloc_trace+0x1c6/0x340 [ 908.934323][T26034] tcf_action_init_1+0x2d5/0x420 [ 908.939246][T26034] tcf_action_init+0x16e/0x3a0 [ 908.943994][T26034] tc_ctl_action+0x209/0x530 [ 908.948589][T26034] ? tcf_free_cookie_rcu+0x30/0x30 [ 908.953934][T26034] rtnetlink_rcv_msg+0x728/0x7c0 [ 908.958857][T26034] ? ___cache_free+0x3c/0x2f0 [ 908.963511][T26034] ? skb_network_protocol+0x144/0x340 [ 908.968868][T26034] ? __kfree_skb+0xfe/0x150 [ 908.973352][T26034] ? kmem_cache_free+0x59/0x100 [ 908.978182][T26034] ? __kfree_skb+0xfe/0x150 [ 908.982664][T26034] ? consume_skb+0x4b/0x160 [ 908.987195][T26034] ? nlmon_xmit+0x47/0x50 [ 908.991503][T26034] ? xmit_one+0x173/0x2e0 [ 908.995868][T26034] ? local_bh_enable+0x1b/0x20 [ 909.000609][T26034] ? __dev_queue_xmit+0xc25/0x1580 [ 909.005699][T26034] ? __skb_clone+0x2b9/0x2d0 [ 909.010384][T26034] ? __rcu_read_unlock+0x5c/0x250 [ 909.015393][T26034] netlink_rcv_skb+0x13e/0x240 [ 909.020135][T26034] ? rtnetlink_bind+0x60/0x60 [ 909.024801][T26034] rtnetlink_rcv+0x18/0x20 [ 909.029235][T26034] netlink_unicast+0x5fc/0x6c0 [ 909.033988][T26034] netlink_sendmsg+0x6f8/0x7c0 [ 909.038767][T26034] ? netlink_getsockopt+0x720/0x720 [ 909.043973][T26034] ____sys_sendmsg+0x360/0x4d0 [ 909.048725][T26034] ? import_iovec+0xb8/0xd0 [ 909.053216][T26034] __sys_sendmsg+0x1ed/0x270 [ 909.057889][T26034] ? __fsnotify_parent+0x32f/0x430 [ 909.062994][T26034] ? get_pid_task+0x90/0xc0 [ 909.067482][T26034] ? vfs_write+0x572/0x7e0 [ 909.071886][T26034] ? __fget_light+0x219/0x260 [ 909.076546][T26034] ? fput+0x2d/0x130 [ 909.080477][T26034] ? ksys_write+0x157/0x180 [ 909.085000][T26034] __x64_sys_sendmsg+0x42/0x50 [ 909.089747][T26034] do_syscall_64+0x39/0x80 [ 909.094146][T26034] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 909.100043][T26034] RIP: 0033:0x466459 [ 909.104499][T26034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 909.124088][T26034] RSP: 002b:00007f143d960188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 909.132502][T26034] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 909.140453][T26034] RDX: 0000000000000000 RSI: 0000000020000980 RDI: 0000000000000003 [ 909.148458][T26034] RBP: 00007f143d9601d0 R08: 0000000000000000 R09: 0000000000000000 [ 909.156409][T26034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.164416][T26034] R13: 00007ffcff3d725f R14: 00007f143d960300 R15: 0000000000022000 [ 909.172375][T26036] CPU: 1 PID: 26036 Comm: syz-executor.2 Not tainted 5.12.0-rc4-syzkaller #0 [ 909.181134][T26036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 909.191177][T26036] Call Trace: [ 909.194447][T26036] dump_stack+0x137/0x19d [ 909.198808][T26036] should_fail+0x23c/0x250 [ 909.203217][T26036] should_fail_usercopy+0x16/0x20 [ 909.203570][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 909.208226][T26036] _copy_to_iter+0x169/0xa10 [ 909.219949][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.221817][T26036] ? __check_object_size+0x253/0x310 [ 909.221839][T26036] seq_read_iter+0x7f0/0x910 [ 909.221858][T26036] seq_read+0x221/0x260 [ 909.243760][T26036] do_iter_read+0x2be/0x4b0 [ 909.248281][T26036] do_preadv+0x13b/0x230 [ 909.252559][T26036] ? fput+0x2d/0x130 [ 909.254893][ T7] usb 5-1: can't set config #1, error -71 [ 909.256444][T26036] ? ksys_write+0x157/0x180 [ 909.266235][ T7] usb 5-1: USB disconnect, device number 118 [ 909.266612][T26036] __x64_sys_preadv+0x54/0x60 [ 909.277221][T26036] do_syscall_64+0x39/0x80 [ 909.281663][T26036] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 909.287564][T26036] RIP: 0033:0x466459 [ 909.291489][T26036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 909.311102][T26036] RSP: 002b:00007f24176f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 909.319597][T26036] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 18:42:18 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 909.323563][T10789] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 909.327603][T26036] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 909.327616][T26036] RBP: 00007f24176f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 909.327626][T26036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.327637][T26036] R13: 00007ffc91fcd00f R14: 00007f24176f4300 R15: 0000000000022000 18:42:18 executing program 1 (fault-call:1 fault-nth:9): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:18 executing program 2 (fault-call:5 fault-nth:3): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x0) 18:42:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = clone3(&(0x7f0000001440)={0x40000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setopts(0x4206, r0, 0x1, 0x4) wait4(0x0, 0x0, 0x0, 0x0) ptrace$peekuser(0x3, r1, 0x6) 18:42:18 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xe, 0x0, 0x0) [ 909.377020][T26047] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 909.436552][T26054] FAULT_INJECTION: forcing a failure. [ 909.436552][T26054] name failslab, interval 1, probability 0, space 0, times 0 [ 909.457371][T26057] FAULT_INJECTION: forcing a failure. [ 909.457371][T26057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.470638][T26054] CPU: 0 PID: 26054 Comm: syz-executor.1 Not tainted 5.12.0-rc4-syzkaller #0 [ 909.479384][T26054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 909.489427][T26054] Call Trace: [ 909.492696][T26054] dump_stack+0x137/0x19d [ 909.497141][T26054] should_fail+0x23c/0x250 [ 909.501547][T26054] __should_failslab+0x81/0x90 [ 909.501680][T26058] IPVS: ftp: loaded support on port[0] = 21 [ 909.506918][T26054] should_failslab+0x5/0x20 [ 909.517290][T26054] kmem_cache_alloc_node+0x56/0x310 [ 909.522486][T26054] ? consume_skb+0x4b/0x160 [ 909.527000][T26054] ? __alloc_skb+0xed/0x420 [ 909.531495][T26054] __alloc_skb+0xed/0x420 [ 909.535835][T26054] netlink_ack+0x292/0x690 [ 909.540305][T26054] ? __rcu_read_unlock+0x5c/0x250 [ 909.545347][T26054] netlink_rcv_skb+0x1b7/0x240 [ 909.550102][T26054] ? rtnetlink_bind+0x60/0x60 [ 909.554794][T26054] rtnetlink_rcv+0x18/0x20 [ 909.559209][T26054] netlink_unicast+0x5fc/0x6c0 [ 909.564030][T26054] netlink_sendmsg+0x6f8/0x7c0 [ 909.568792][T26054] ? netlink_getsockopt+0x720/0x720 [ 909.574049][T26054] ____sys_sendmsg+0x360/0x4d0 [ 909.578811][T26054] ? import_iovec+0xb8/0xd0 [ 909.583309][T26054] __sys_sendmsg+0x1ed/0x270 [ 909.587940][T26054] ? __fsnotify_parent+0x32f/0x430 [ 909.593044][T26054] ? get_pid_task+0x90/0xc0 [ 909.597539][T26054] ? vfs_write+0x572/0x7e0 [ 909.601955][T26054] ? __fget_light+0x219/0x260 [ 909.607141][T26054] ? fput+0x2d/0x130 [ 909.611031][T26054] ? ksys_write+0x157/0x180 [ 909.615577][T26054] __x64_sys_sendmsg+0x42/0x50 [ 909.620362][T26054] do_syscall_64+0x39/0x80 [ 909.624764][T26054] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 909.630647][T26054] RIP: 0033:0x466459 [ 909.634520][T26054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 909.654106][T26054] RSP: 002b:00007f143d960188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 909.662493][T26054] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 909.670461][T26054] RDX: 0000000000000000 RSI: 0000000020000980 RDI: 0000000000000003 [ 909.678427][T26054] RBP: 00007f143d9601d0 R08: 0000000000000000 R09: 0000000000000000 18:42:18 executing program 4: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) [ 909.686376][T26054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 909.694342][T26054] R13: 00007ffcff3d725f R14: 00007f143d960300 R15: 0000000000022000 [ 909.702294][T26057] CPU: 1 PID: 26057 Comm: syz-executor.2 Not tainted 5.12.0-rc4-syzkaller #0 [ 909.711053][T26057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 909.715211][T10789] usb 6-1: device descriptor read/64, error 18 [ 909.721173][T26057] Call Trace: [ 909.721182][T26057] dump_stack+0x137/0x19d 18:42:18 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000380)}, 0x2040, 0x2009, 0x3f, 0x0, 0x4, 0x0, 0x1f}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setregid(0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={{}, 0x3, 0x8, 0x1}) fchown(0xffffffffffffffff, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)='system.posix_acl_default\x00', &(0x7f0000000bc0), 0x24, 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000100)=""/59, &(0x7f0000000200)=0x3b) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="88ee973f1b6e59"], 0x14}}, 0x0) [ 909.734918][T26057] should_fail+0x23c/0x250 [ 909.739349][T26057] should_fail_usercopy+0x16/0x20 [ 909.744365][T26057] _copy_to_user+0x1c/0x90 [ 909.748900][T26057] simple_read_from_buffer+0xab/0x120 [ 909.754277][T26057] proc_fail_nth_read+0xf6/0x140 [ 909.759252][T26057] ? rw_verify_area+0x136/0x250 [ 909.764109][T26057] ? proc_fault_inject_write+0x200/0x200 [ 909.769735][T26057] vfs_read+0x154/0x5d0 [ 909.773922][T26057] ? __fget_light+0x219/0x260 [ 909.778663][T26057] ksys_read+0xce/0x180 [ 909.782828][T26057] __x64_sys_read+0x3e/0x50 [ 909.787329][T26057] do_syscall_64+0x39/0x80 [ 909.791750][T26057] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 909.797710][T26057] RIP: 0033:0x4191dc [ 909.801584][T26057] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 909.821246][T26057] RSP: 002b:00007f24176f4170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 909.829637][T26057] RAX: ffffffffffffffda RBX: 0000000000000063 RCX: 00000000004191dc 18:42:18 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x10, 0x0, 0x0) 18:42:18 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x0) [ 909.837619][T26057] RDX: 000000000000000f RSI: 00007f24176f41e0 RDI: 0000000000000005 [ 909.845602][T26057] RBP: 00007f24176f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 909.853550][T26057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.861498][T26057] R13: 00007ffc91fcd00f R14: 00007f24176f4300 R15: 0000000000022000 18:42:18 executing program 1 (fault-call:1 fault-nth:10): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:18 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x11, 0x0, 0x0) [ 909.997884][T26098] FAULT_INJECTION: forcing a failure. [ 909.997884][T26098] name failslab, interval 1, probability 0, space 0, times 0 [ 910.010710][T26098] CPU: 0 PID: 26098 Comm: syz-executor.1 Not tainted 5.12.0-rc4-syzkaller #0 [ 910.019455][T26098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 910.029497][T26098] Call Trace: [ 910.032768][T26098] dump_stack+0x137/0x19d [ 910.037094][T26098] should_fail+0x23c/0x250 [ 910.041504][T26098] __should_failslab+0x81/0x90 [ 910.046254][T26098] should_failslab+0x5/0x20 [ 910.050755][T26098] kmem_cache_alloc_node_trace+0x5b/0x310 [ 910.056568][T26098] ? __kmalloc_node_track_caller+0x30/0x40 [ 910.062368][T26098] __kmalloc_node_track_caller+0x30/0x40 [ 910.067990][T26098] ? netlink_ack+0x292/0x690 [ 910.072573][T26098] __alloc_skb+0x187/0x420 [ 910.077026][T26098] netlink_ack+0x292/0x690 [ 910.081495][T26098] ? __rcu_read_unlock+0x5c/0x250 [ 910.086609][T26098] netlink_rcv_skb+0x1b7/0x240 [ 910.091395][T26098] ? rtnetlink_bind+0x60/0x60 [ 910.096105][T26098] rtnetlink_rcv+0x18/0x20 [ 910.100507][T26098] netlink_unicast+0x5fc/0x6c0 [ 910.105335][T26098] netlink_sendmsg+0x6f8/0x7c0 [ 910.110107][T26098] ? netlink_getsockopt+0x720/0x720 [ 910.115297][T26098] ____sys_sendmsg+0x360/0x4d0 [ 910.120059][T26098] ? import_iovec+0xb8/0xd0 [ 910.124552][T26098] __sys_sendmsg+0x1ed/0x270 [ 910.129167][T26098] ? __fsnotify_parent+0x32f/0x430 [ 910.134319][T26098] ? get_pid_task+0x90/0xc0 [ 910.138811][T26098] ? vfs_write+0x572/0x7e0 [ 910.143248][T26098] ? __fget_light+0x219/0x260 [ 910.147900][T26098] ? fput+0x2d/0x130 [ 910.151767][T26098] ? ksys_write+0x157/0x180 [ 910.156245][T26098] __x64_sys_sendmsg+0x42/0x50 [ 910.160985][T26098] do_syscall_64+0x39/0x80 [ 910.165376][T26098] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 910.171315][T26098] RIP: 0033:0x466459 [ 910.175181][T26098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 910.194849][T26098] RSP: 002b:00007f143d960188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 910.203236][T26098] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 910.211202][T26098] RDX: 0000000000000000 RSI: 0000000020000980 RDI: 0000000000000003 [ 910.219188][T26098] RBP: 00007f143d9601d0 R08: 0000000000000000 R09: 0000000000000000 [ 910.227133][T26098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 910.235118][T26098] R13: 00007ffcff3d725f R14: 00007f143d960300 R15: 0000000000022000 [ 910.245475][T10789] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 910.443517][T10789] usb 6-1: device descriptor read/64, error 18 [ 910.563598][T10789] usb usb6-port1: attempt power cycle [ 910.621916][T26089] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 911.283475][T10789] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 911.373671][T10789] usb 6-1: Invalid ep0 maxpacket: 0 [ 911.523451][T10789] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 911.623452][T10789] usb 6-1: Invalid ep0 maxpacket: 0 [ 911.628724][T10789] usb usb6-port1: unable to enumerate USB device 18:42:20 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) [ 912.293405][T10789] usb 6-1: new high-speed USB device number 58 using dummy_hcd 18:42:21 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:21 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x46d}], 0x1, 0x0, 0x0) 18:42:21 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x12, 0x0, 0x0) 18:42:21 executing program 1 (fault-call:1 fault-nth:11): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:21 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01801800000000000000710000007100000005000000000000000100000f01000000000000000000000001800000db0f0000000000000e0100000001000000000000000000000a00000000000000000600000d0000000000000000000000000087f29cfb311776000000000000000000000000000004000000000000000000000000000000004b9f00"/154], 0x0, 0x91, 0x0, 0x2}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) tkill(0x0, 0x1e) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040)) 18:42:21 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x40, 0x23, 0x4a, {0x4a, 0x23, "c90daa924a6e553742517efdb19e1e2cc249159cffc86b6c410157561106d5c0ebf4dcf475ff34fabe5d12b29edf38e3174561079faff15d6ea5bd5e9061e00771aede47463dc959"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}, &(0x7f0000000100)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "aa4107354f489e6550dd1dc0d4eb1422"}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x1, 0xff00, 0xfffe, [0x0, 0xf, 0xc0, 0x1bff0, 0xc000]}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x1, 0x7f, 0x7, "fe4a7306", "217fec89"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x4, 0x40, 0x1, 0x1, 0x7, 0x2}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x40, 0x6, 0xb9, "3a60a05c387ee9fcdd97168de85e54960c4d763e8e51ae5c524f717dbd8b7ae76c2fa746e4199a9fea7de7f1432d1fc090af82efcea703e642c90ad4b3b4f66ae4042c5d25748c5ef0d4993d3139d8491ca88b0c36baa08e7db935d3a8c86b7e2963fbb5337064b9758d1be5eb60e54a2b95b50a357aa8a2232b57014463f4ed64b31c046b6023af87959699ae33ecbaa935de7c4a458c3719345120ef203002df730eecf6a03a7e6fc2984de681d80055fca8d1e28faffe81"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1000, 0x20}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x81}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e898"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000540)={0x40, 0x17, 0x6, @random="a5915c2ac791"}, &(0x7f0000000580)={0x40, 0x19, 0x2, "ac2d"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x3f}, &(0x7f0000000600)={0x40, 0x1c, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096411306e53f07010000102a90005709007a54c8850f80"], 0x0}, 0x0) [ 912.428917][T26130] FAULT_INJECTION: forcing a failure. [ 912.428917][T26130] name failslab, interval 1, probability 0, space 0, times 0 [ 912.455372][T26130] CPU: 1 PID: 26130 Comm: syz-executor.1 Not tainted 5.12.0-rc4-syzkaller #0 [ 912.464155][T26130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 912.474211][T26130] Call Trace: [ 912.477493][T26130] dump_stack+0x137/0x19d [ 912.482078][T26130] should_fail+0x23c/0x250 [ 912.486573][T26130] ? skb_clone+0x12c/0x1f0 [ 912.491051][T26130] __should_failslab+0x81/0x90 [ 912.496046][T26130] should_failslab+0x5/0x20 [ 912.500558][T26130] kmem_cache_alloc+0x46/0x320 [ 912.505459][T26130] ? rhashtable_jhash2+0x13a/0x1a0 [ 912.510646][T26130] skb_clone+0x12c/0x1f0 [ 912.514896][T26130] netlink_deliver_tap+0x2a0/0x470 [ 912.520012][T26130] ? netlink_attachskb+0x42a/0x590 [ 912.525144][T26130] ? __rcu_read_unlock+0x5c/0x250 [ 912.530180][T26130] netlink_unicast+0x427/0x6c0 [ 912.534948][T26130] netlink_ack+0x63e/0x690 [ 912.539373][T26130] ? __rcu_read_unlock+0x5c/0x250 [ 912.544450][T26130] netlink_rcv_skb+0x1b7/0x240 [ 912.549215][T26130] ? rtnetlink_bind+0x60/0x60 [ 912.553894][T26130] rtnetlink_rcv+0x18/0x20 [ 912.558311][T26130] netlink_unicast+0x5fc/0x6c0 [ 912.563080][T26130] netlink_sendmsg+0x6f8/0x7c0 [ 912.567857][T26130] ? netlink_getsockopt+0x720/0x720 [ 912.573111][T26130] ____sys_sendmsg+0x360/0x4d0 [ 912.577877][T26130] ? import_iovec+0xb8/0xd0 [ 912.582379][T26130] __sys_sendmsg+0x1ed/0x270 [ 912.587134][T26130] ? __fsnotify_parent+0x32f/0x430 [ 912.592249][T26130] ? get_pid_task+0x90/0xc0 [ 912.596759][T26130] ? vfs_write+0x572/0x7e0 [ 912.601185][T26130] ? __fget_light+0x219/0x260 [ 912.605874][T26130] ? fput+0x2d/0x130 [ 912.609774][T26130] ? ksys_write+0x157/0x180 [ 912.614347][T26130] __x64_sys_sendmsg+0x42/0x50 [ 912.619123][T26130] do_syscall_64+0x39/0x80 [ 912.623542][T26130] entry_SYSCALL_64_after_hwframe+0x44/0xae 18:42:21 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x64, 0x0, 0x0) 18:42:21 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x300, 0x0, 0x0) [ 912.629442][T26130] RIP: 0033:0x466459 [ 912.633337][T26130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 912.652943][T26130] RSP: 002b:00007f143d960188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 912.661487][T26130] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 912.669465][T26130] RDX: 0000000000000000 RSI: 0000000020000980 RDI: 0000000000000003 18:42:21 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x20000263}], 0x1, 0x0, 0x0) 18:42:21 executing program 1 (fault-call:1 fault-nth:12): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:21 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xa00, 0x0, 0x0) [ 912.677436][T26130] RBP: 00007f143d9601d0 R08: 0000000000000000 R09: 0000000000000000 [ 912.685407][T26130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 912.693380][T26130] R13: 00007ffcff3d725f R14: 00007f143d960300 R15: 0000000000022000 [ 912.704998][T10789] usb 6-1: device descriptor read/64, error 18 [ 912.772370][T26158] FAULT_INJECTION: forcing a failure. [ 912.772370][T26158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 912.785640][T26158] CPU: 1 PID: 26158 Comm: syz-executor.1 Not tainted 5.12.0-rc4-syzkaller #0 [ 912.794412][T26158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 912.804508][T26158] Call Trace: [ 912.807796][T26158] dump_stack+0x137/0x19d [ 912.812134][T26158] should_fail+0x23c/0x250 [ 912.816602][T26158] should_fail_usercopy+0x16/0x20 [ 912.821634][T26158] _copy_to_user+0x1c/0x90 [ 912.826106][T26158] simple_read_from_buffer+0xab/0x120 [ 912.831494][T26158] proc_fail_nth_read+0xf6/0x140 [ 912.836436][T26158] ? rw_verify_area+0x136/0x250 [ 912.841292][T26158] ? proc_fault_inject_write+0x200/0x200 [ 912.846994][T26158] vfs_read+0x154/0x5d0 [ 912.851366][T26158] ? __fget_light+0x219/0x260 [ 912.856048][T26158] ksys_read+0xce/0x180 [ 912.860206][T26158] __x64_sys_read+0x3e/0x50 [ 912.864725][T26158] do_syscall_64+0x39/0x80 [ 912.869144][T26158] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 912.875300][T26158] RIP: 0033:0x4191dc [ 912.879198][T26158] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 912.899315][T26158] RSP: 002b:00007f143d960170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 912.907718][T26158] RAX: ffffffffffffffda RBX: 0000000000000068 RCX: 00000000004191dc [ 912.916122][T26158] RDX: 000000000000000f RSI: 00007f143d9601e0 RDI: 0000000000000004 [ 912.924084][T26158] RBP: 00007f143d9601d0 R08: 0000000000000000 R09: 0000000000000000 [ 912.932047][T26158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 912.940115][T26158] R13: 00007ffcff3d725f R14: 00007f143d960300 R15: 0000000000022000 [ 912.949226][ T4541] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 913.093517][T10789] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 913.143480][ T4541] usb 5-1: device descriptor read/64, error 18 [ 913.303388][T10789] usb 6-1: device descriptor read/64, error 18 [ 913.413328][ T4541] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 913.423668][T10789] usb usb6-port1: attempt power cycle [ 913.603836][ T4541] usb 5-1: device descriptor read/64, error 18 [ 913.723394][ T4541] usb usb5-port1: attempt power cycle [ 914.143355][T10789] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 914.253583][T10789] usb 6-1: Invalid ep0 maxpacket: 0 [ 914.424123][T10789] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 914.433372][ T4541] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 914.544103][T10789] usb 6-1: Invalid ep0 maxpacket: 0 [ 914.549389][T10789] usb usb6-port1: unable to enumerate USB device [ 914.603584][ T4541] usb 5-1: device descriptor read/8, error -61 18:42:23 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) [ 914.873244][ T4541] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 915.043408][ T4541] usb 5-1: device descriptor read/8, error -61 [ 915.163288][ T4541] usb usb5-port1: unable to enumerate USB device [ 915.293248][ T4812] usb 6-1: new high-speed USB device number 62 using dummy_hcd 18:42:24 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:24 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x7ffff000}], 0x1, 0x0, 0x0) 18:42:24 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xb95, 0x0, 0x0) 18:42:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:24 executing program 4: ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0xfc, 0x7, 0x1}) clone(0x8de214f2d5f44688, 0x0, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_setup(0x7f, &(0x7f0000000000)=0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8940, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8940, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYRESOCT=r3, @ANYBLOB="c717f7e148600d81dad5e72d115604b6f512dadc8f42ac8deeb95652455e6f1c5f33424d592b9fa64427cceff6dcca2224b72a55aab88ffbc0fdb84b7cf1a95633f3e1b2ef050000006db296bd7687856bf6470cec91234aad07b8b4dbff4b2017e1ddf8647236c63b7d02c4b837f609edbc6a3b3bf389393b3bce44af8d26e5f459ca47d8b4c109f309d861e5ec8833c75b5f720d71f066402c4b3c1680403b56b777f0e2485cb15f3ef7cbd68d725f49faf1584bbfa64b6da7db4d78c06839bc91c7149143852dcb4bea4a3d40f9a44f1893b8616d9d11b0f0b9c8b39633ba9559f4cc80de810ebfd6ca36937c45b36e916144bded6f22bfc4779866ef9128c55ac818f6a0db153d5dcb5ca707f0ede449f018c56596dd79dc8bbcc0ec870fcd145b7f03542027dfc0d168be1601cde0d04f00d85418412c47643b403bb898f57c991882ace78177ca70e06032bbac6133c6a67f4ec82faa8b5c49110093364daa378cd1a538dd86b5c42d445552e4ace6f9553d6fca89870ec9ba8a479aeb09424d12bac3d5f134532e158307828342464084278ccd0e5a75", @ANYRES64=r0]) r4 = socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr(r4, &(0x7f0000000a80)=@random={'security.', 'dont_hash'}, &(0x7f0000000ac0)='msdos\x00', 0x6, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8940, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) io_submit(r1, 0x2, &(0x7f0000000300)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f00000001c0)="8aa31efc03873ef4f837af4a4b3d5f7ca2637cbb284f4e4834e1e158fa1f4a03b34bf72d83133eb4d73930c6eb9765cd48589f822a81334579e456cec2046e4ae48535e1ff2f13490193af08f71a7725b00d12ce3d29a05d6e6cf52a105083b12b2580929ec068dc5059348f", 0x6c, 0xfffffffffffff2f5, 0x0, 0x2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x0, r4, &(0x7f0000000280)="74aff3ec20de73bf9768ac403a2379b3a41ded84a775a0", 0x17}]) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x84500, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000380)='./file0\x00', 0x1f, 0x7, &(0x7f00000009c0)=[{&(0x7f00000003c0)="d1e4caeeaf5894b5f93ad7f4a11bd0b2726b13e382acae46079a9e3c82b954a61a", 0x21, 0x8}, {&(0x7f0000000400)="720fb09800c9f5a1cf6f08c3a3c6380818a6ced9babdc09468762b66df25ad4189f4578337024ee65348524d8acd16926bc827d96342fb625ae7f0fb8596e13e154600706c1f7938b5", 0x49, 0x1}, {&(0x7f0000000480)="da98b3524a0dcb482735deafd10f300c842cdd19c5c219af0d592eed285a59ba3ff731ca72d20bdbc4109ba0d7c90fce4f7d91eeefaf8df2452592effc9a81381334254a61a355f01ccc653596d132b5d69a8846c55ed50c720ea9383c1ecc3f4110b29033152edf350570dcaae8c22d60a41e63603baab3baeec84a111f2eeda19acba2e8c87b5e1d2c4c345d2db9c4a6df14a48e01aa04ac", 0x99, 0x9}, {&(0x7f0000000740)="7a0440dd3151f3adc2ca5a738ef7a3b9f9dc334d90e2187a2896ee410f42efbd7c57744d41b60a082b998ab8587b8d45721ac404fa008d0cc644f997871adf9ba5483dffb5e51a0dddab21564ef5137a88fea499d677a80d56825cca54cfae38", 0x60, 0x2}, {&(0x7f00000007c0)="397ab9fbb27ebec0bca223aa4cd0d3092daf16c707752bd749022507f356228d7557154a1cd1724b7180a58d0e444f5dc79cb198aa6dec258fd2a49db9cdb080f6b064ec3c1437d5507cc3c14c3055fc4a28a771e0f4601c6bccd8686917155fae618a50d67fa0590d7bf9a9a70c", 0x6e, 0x4}, {&(0x7f0000000840)="a61ac8235f1b517f9727e12a01821e73d56d6840ee34d1194d20554c03550ad2ea215afd19f8c3c18b8756e77476afd63030c030a714ef49207f63ad7197bb8fc6bc0c26c07b607594d0664006f5a549b7c5ec819c63d5028dac49fd8b181e03b0122d6281b5c3d926cbe558fb759c8e4d8054b68f46640eb128512df16057d09c568fb1b60ab8f93ff056440b3f45de13c7de5ed1068edda64b3777fd1d7f33ba96648f955ce16be1384a35938e3b7448fe202fcd3a2855d9a96be0c3e1e361ae3c3b724ae4e888719e374dc2214879e9833225ff3ec317f283094de75af50d2817d1b0e830160c", 0xe8, 0x6}, {&(0x7f0000000940)="42ef256ca097aaf12d2b30c56d0890787930d85b9904acc41b7a18a8f2c128bd5eb2b5e918a0f10a402e2419265094711a0d56a57c74147f32bda2107119688aa0a41cd73198a23f89206194c9f51daeebf5fc6f02405a", 0x57, 0x5}], 0x86481, &(0x7f0000000540)={[{@nodots='nodots'}, {@fat=@check_strict='check=strict'}, {@dots='dots'}, {@fat=@quiet='quiet'}, {@nodots='nodots'}, {@dots='dots'}], [{@dont_hash='dont_hash'}, {@hash='hash'}]}) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x12b, 0xffffffffffffffff, &(0x7f0000000080)="e573d1d28ecfdbd463087aad115da24e439fdcc4a955cc1d4766ca710914c2578a5cf1189b2f97836108ea1e3105d7f4d95051d23a85b6f0adbb20f71818e640fc979daf6afd081e533878e7e6fc3e1e21803307111eaae1f08a76e940f79fcf6ee780957ab9b669648038a4f89c32510465653d81bcc698f77472cf11a5", 0x7e, 0x40, 0x0, 0x1, r5}, &(0x7f0000000180)) 18:42:24 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:24 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xbb3, 0x0, 0x0) 18:42:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:24 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0xffffffffffffffff}], 0x1, 0x0, 0x0) [ 915.533213][ T4812] usb 6-1: Using ep0 maxpacket: 8 18:42:24 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x2, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 915.653376][ T4812] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 915.680910][ T4812] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 915.690475][ T4812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.706218][ T4812] usb 6-1: config 0 descriptor?? [ 915.755185][ T4812] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 18:42:26 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:42:26 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xbcd, 0x0, 0x0) 18:42:26 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:26 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x2, 0x0, 0x0) 18:42:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x3, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:26 executing program 4: mlockall(0x1) clone(0x40280000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x7) gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) process_vm_writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/233, 0xe9}, {&(0x7f0000000080)=""/101, 0x65}], 0x2, &(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) [ 917.846169][ T4541] usb 6-1: USB disconnect, device number 62 18:42:26 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xbe4, 0x0, 0x0) 18:42:26 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x3, 0x0, 0x0) 18:42:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x4, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:26 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:26 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xc04, 0x0, 0x0) 18:42:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x5, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 918.138657][T26259] IPVS: ftp: loaded support on port[0] = 21 [ 918.289492][T26231] IPVS: ftp: loaded support on port[0] = 21 [ 918.303276][ T4541] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 918.543067][ T4541] usb 6-1: Using ep0 maxpacket: 8 [ 918.663247][ T4541] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 918.676146][ T4541] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 918.686070][ T4541] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.695386][ T4541] usb 6-1: config 0 descriptor?? [ 918.734815][ T4541] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 18:42:29 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:42:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x6, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:29 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x4, 0x0, 0x0) 18:42:29 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xc1b, 0x0, 0x0) 18:42:29 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x400000, 0x0) ioctl$CHAR_RAW_RAGET(0xffffffffffffffff, 0x1263, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) fchown(0xffffffffffffffff, 0xee01, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x102c25, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004b00)=[{{&(0x7f0000000a00)=@nl=@unspec, 0x80, &(0x7f0000003280)=[{&(0x7f0000000bc0)=""/243, 0xf3}, {&(0x7f0000000cc0)=""/111, 0x6f}, {&(0x7f0000000d40)=""/192, 0xc0}, {&(0x7f00000010c0)=""/169, 0xa9}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/87, 0x57}, {&(0x7f0000000580)=""/4, 0x4}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/88, 0x58}], 0x9, &(0x7f0000003340)=""/98, 0x62}, 0x4}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000033c0)=""/96, 0x60}, {&(0x7f0000003440)=""/98, 0x62}, {&(0x7f0000000600)=""/5, 0x5}], 0x3}}, {{&(0x7f00000034c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000003540)=""/165, 0xa5}, {&(0x7f0000003600)=""/249, 0xf9}, {&(0x7f0000000a80)=""/58, 0x3a}], 0x3, &(0x7f0000003700)}, 0x2}, {{&(0x7f0000003740)=@rc={0x1f, @fixed}, 0x80, 0x0}}], 0x4, 0x4000, &(0x7f0000004c00)={0x0, 0x3938700}) [ 920.899713][ T4812] usb 6-1: USB disconnect, device number 63 18:42:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x7, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:29 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x5, 0x0, 0x0) 18:42:29 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:29 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xc82, 0x0, 0x0) 18:42:29 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x6, 0x0, 0x0) [ 921.352914][ T4812] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 921.592883][ T4812] usb 6-1: Using ep0 maxpacket: 8 [ 921.712888][ T4812] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 921.725823][ T4812] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 921.735176][ T4812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.744237][ T4812] usb 6-1: config 0 descriptor?? [ 921.785048][ T4812] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 18:42:32 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:42:32 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:32 executing program 4: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109423b000101000000090400001202060000052406000005240000000d240f55c3d3a0ea58714084b01a1801000000000000000000090582020002"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x51, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102020000102505a1a440000102030109023f000101c420020904000403020600400906000082a837fb05240008000d240f01384200004261ffff0109058202000040030709050302200006080100"], &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x1f, 0x0, 0x80, 0x8, 0x3f}, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="05970f0000"], 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x81d}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 18:42:32 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xc95, 0x0, 0x0) 18:42:32 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x7, 0x0, 0x0) 18:42:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x9, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:32 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 923.946086][ T4812] usb 6-1: USB disconnect, device number 64 18:42:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xa, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:32 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:32 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x8, 0x0, 0x0) 18:42:32 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xca0, 0x0, 0x0) 18:42:32 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 924.272714][ T4541] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 924.372677][ T4812] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 924.612914][ T4812] usb 6-1: Using ep0 maxpacket: 8 [ 924.672698][ T4541] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 924.680309][ T4541] usb 5-1: can't read configurations, error -61 [ 924.732666][ T4812] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 924.743383][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.754369][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.764230][ T4812] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 924.777165][ T4812] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 924.786214][ T4812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.794898][ T4812] usb 6-1: config 0 descriptor?? [ 924.812956][ T3236] ieee802154 phy0 wpan0: encryption failed: -22 [ 924.819222][ T3236] ieee802154 phy1 wpan1: encryption failed: -22 [ 924.835193][ T4812] usbhid 6-1:0.0: can't add hid device: -22 [ 924.841146][ T4812] usbhid: probe of 6-1:0.0 failed with error -22 [ 924.847507][ T4541] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 925.272625][ T4541] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 925.280217][ T4541] usb 5-1: can't read configurations, error -61 [ 925.286511][ T4541] usb usb5-port1: attempt power cycle [ 925.992571][ T4541] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 926.243275][ T4541] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 926.250899][ T4541] usb 5-1: can't read configurations, error -61 [ 926.402554][ T4541] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 926.652584][ T4541] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 926.660239][ T4541] usb 5-1: can't read configurations, error -61 [ 926.667139][ T4541] usb usb5-port1: unable to enumerate USB device 18:42:35 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:42:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xb, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:35 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xdac, 0x0, 0x0) 18:42:35 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x9, 0x0, 0x0) 18:42:35 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:35 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)={{0x14, 0x2}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3}], {0x14}}, 0x3c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x1, 0x3, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3f}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000180)={{r0}, {@val, @actul_num={@val=0x2b, 0x663d, 0x4b}}}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x150, 0x150, 0x0, 0x0, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}, {0x20}}, @common=@inet=@l2tp={{0x30, 'l2tp\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) [ 926.992797][T10789] usb 6-1: USB disconnect, device number 65 18:42:35 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:35 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xa, 0x0, 0x0) 18:42:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:35 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x3f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) sendmsg$inet(r0, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c) [ 927.061065][T26448] xt_l2tp: invalid flags combination: 0 18:42:35 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xdae, 0x0, 0x0) 18:42:35 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 927.432522][T10789] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 927.703325][T10789] usb 6-1: Using ep0 maxpacket: 8 [ 927.852491][T10789] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 927.863338][T10789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.874522][T10789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.884309][T10789] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 927.897298][T10789] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 927.906418][T10789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.916486][T10789] usb 6-1: config 0 descriptor?? [ 927.954603][T10789] usbhid 6-1:0.0: can't add hid device: -22 [ 927.960643][T10789] usbhid: probe of 6-1:0.0 failed with error -22 18:42:38 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:42:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xf, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:38 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xdb6, 0x0, 0x0) 18:42:38 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xb, 0x0, 0x0) 18:42:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000000c0)="360f01c966b8ab000f00d88fe978cb3af30fc7b47c295b0000c4e1fd604c262db8a50000000f23d80f21f835000000f00f23f866baf80cb864ef4b8eef66bafc0ced260f01c866baf80cb8c453b88cef66bafc0cb805000000efb90d0800000f32", 0x61}], 0x1, 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:42:38 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:38 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 930.028611][ T4812] usb 6-1: USB disconnect, device number 66 18:42:38 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xc, 0x0, 0x0) 18:42:38 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x10, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:38 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xdc0, 0x0, 0x0) 18:42:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000000c0)="360f01c966b8ab000f00d88fe978cb3af30fc7b47c295b0000c4e1fd604c262db8a50000000f23d80f21f835000000f00f23f866baf80cb864ef4b8eef66bafc0ced260f01c866baf80cb8c453b88cef66bafc0cb805000000efb90d0800000f32", 0x61}], 0x1, 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 930.512317][ T4812] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 930.772288][ T4812] usb 6-1: Using ep0 maxpacket: 8 [ 930.893089][ T4812] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 930.903830][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.915295][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 930.925335][ T4812] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 930.938699][ T4812] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 930.948009][ T4812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.956906][ T4812] usb 6-1: config 0 descriptor?? [ 930.995641][ T4812] usbhid 6-1:0.0: can't add hid device: -22 [ 931.001568][ T4812] usbhid: probe of 6-1:0.0 failed with error -22 18:42:41 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:42:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x11, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:41 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:41 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xd, 0x0, 0x0) 18:42:41 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xdd0, 0x0, 0x0) 18:42:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x10000012, 0xc72, 0x6, 0x3f, 0x0, 0x0, 0xfffffffc, 0x40010000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x9}], 0x1, 0x10003, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x1000000000) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x2, 0x10000007, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x12400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x7}, 0x11014, 0x8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f00000001c0)) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0xffffffac, 0x20040080, 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'veth1_vlan\x00'}) [ 933.076230][ T4812] usb 6-1: USB disconnect, device number 67 18:42:41 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x56, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:41 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xe, 0x0, 0x0) 18:42:42 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xe03, 0x0, 0x0) 18:42:42 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x10, 0x0, 0x0) 18:42:42 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 933.532169][ T4812] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 933.774004][ T4812] usb 6-1: Using ep0 maxpacket: 8 [ 933.892152][ T4812] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 933.902923][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.914139][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.923919][ T4812] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 933.936846][ T4812] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 933.945916][ T4812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.955805][ T4812] usb 6-1: config 0 descriptor?? [ 934.492086][ T4812] usbhid 6-1:0.0: can't add hid device: -71 [ 934.498025][ T4812] usbhid: probe of 6-1:0.0 failed with error -71 [ 934.505527][ T4812] usb 6-1: USB disconnect, device number 68 18:42:43 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:42:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x60, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:43 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='fuseblk\x00', 0x407, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) read$FUSE(r1, &(0x7f0000001940)={0x2020}, 0x2020) syz_mount_image$udf(&(0x7f0000000080)='udf\x00', &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffc, 0x8, &(0x7f0000001700)=[{&(0x7f0000000180)="0c62a646a50fc4e36db5af0573f73b58893a63df966fe4b6dddec696ed57749ce9d63189a46280d863256c5c7f22194b95daf8b39ad9d47fdb6ca11ae00ac188e4ad15e49eb46eed4c4216c5232cea64c339e029efab02df5e01b1615ca1fdc92dcfce8be6118ce52432675b8e21ef25c32acdc928c911c4ca599b0410a0e1cbfeb43a7b97d18f4b455669617b252a2948e21d56a404aa454ad9c98b155d92669e", 0xa1, 0x10000}, {&(0x7f0000000240)="1e5f4509c9cb2aa5cf1e70c42905660898eb0bf13027e6e8c04ba09e3d5134635fd391aaf96dabd4aa14162ea9900d86e94982a2930abf1e4112084b8b13829ec9a1340f3e4a9e14cb1159ce583074a42cde6e13a6c28cbaab810d14bf6d88a270f3c7e8aca57bb452fce2260f81806b", 0x70, 0xfffffffffffffc01}, {&(0x7f00000002c0)="e1fca08cdd8dc878a190a2745c780d951faf299faa9542f3e0672f99463974884d8b905456d9892e3605594dc0e9f80bd7c7ef84cebfbe838b75981585a4874169657e38d882f4b8e5b121096d62115c57bdb4c76f7bf9e28f9850d6", 0x5c, 0x7f}, {&(0x7f0000000340)="93d79993909409483e6e0a6aa8d3ff7419986a0ea0a252faf016af689e5ba0f7577298e9f332f0f4a51234de22e520cf23956720c8c2a4d65ae6cb970ec82321a7ca445fb496666465017e870b02dcc43c4c966ec14c8b9ea922f94adbe68ca88e421696313d74231bb99454f555900c1cee067a5df8f4e088e5921c5f456b66c6577e5032bc9e5d0a6f343758d808de32ae8bb965d65149ca52ce9c2dfe8c6be71fdb54aa8245d3bda63bacc7a366", 0xaf, 0x6}, {&(0x7f0000000400)="17be1333c2887093e5b59d48af2b4d696d3f1686fb795aedcee07e976a491ea665af67309e1b9baa5d397ec5327bc7cd2150e8831eb14d1c5b169f19e210594d0ae09eebb6bed79617ecdbd77905a9e4e5b080a2ba5ee39037cb51adb8a4541978b75d230cbfd99620428adebc96f904658cda19055b6a7dbaa1a9b9cf3ae6bc5fbfc231f8466a070952377f23880fee86cea4230f94a8d2927dbdabdbe54080951a9ee0995017564833", 0xaa, 0x40000000000}, {&(0x7f0000000540)="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", 0x1000, 0x10000000100}, {&(0x7f0000001540)="577c3580e7351559e8d0b4572f70928a54ce575c7a62217dd311b8a99c803495689f3c0b4287e3b1d5411140f005884ece73e9a3b83b29f491432ec30775f4035e0eec92a98d68f5fa6f12a3883e96536d0367bd3ab4b342003148d072dea58f170437a8af92e964ac6906fac9d91819ba4fd8a997c97950fd2749ca7d7df54e03e7c0497c47f99d47735927c47d973c1419dddc7461ccf593a39aa15b26b7acc594dee8d9654d26a22101983b0fb15f79d017d15e890d2510", 0xb9, 0x36b7ae3}, {&(0x7f0000001600)="5e2588b68e0a6cddee1f292e606d2baa64fed65c09fce51b28eb71d4b8f20e6b17ce26b693e0386f14f0c85c87feeed20658cc8485610bfdeaad049f00e3fd420a9e4659525eacc3a0f3ee456c0edc1ef7d17e0e03351a413ff39ffe0cb81959c85e05615e3d779326bae458c8c99229ee58267b03c0ffd449b41c9cdffcd952d936ff691ef5e41073a672bf97f5896929bc8ea5bc0603f35b494a0457f0addf5698896339cf81f2e9fea1de6bbeeffd6fb838af9009835e7ec59ed55b629df2acc8b618caf677831a67434a98291ffa45305019a13c603bd5d8cf613aba41d3bfaca7487df4b7f3e3b2cf2b2b", 0xed, 0x8}], 0x4000, &(0x7f0000001880)={[{@undelete='undelete'}, {@partition={'partition', 0x3d, 0xfffffffffffffffb}}, {@bs={'bs', 0x3d, 0x6}}, {@partition={'partition', 0x3d, 0x4}}, {@unhide='unhide'}], [{@hash='hash'}, {@pcr={'pcr', 0x3d, 0x20}}, {@obj_role={'obj_role', 0x3d, '-'}}, {@permit_directio='permit_directio'}]}) 18:42:43 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xe2a, 0x0, 0x0) 18:42:43 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x11, 0x0, 0x0) 18:42:43 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x8a, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 934.962920][T26628] /dev/loop0: Can't open blockdev 18:42:43 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xe77, 0x0, 0x0) 18:42:43 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xaa, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:43 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x12, 0x0, 0x0) 18:42:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x9) mmap(&(0x7f000005a000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050701000000000000aa5422e500", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r6, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) [ 935.123911][T26655] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 935.225656][T26664] device veth3 entered promiscuous mode [ 935.272027][ T9690] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 935.522018][ T9690] usb 6-1: Using ep0 maxpacket: 8 [ 935.642104][ T9690] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 935.653121][ T9690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.664203][ T9690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.673995][ T9690] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 935.686911][ T9690] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 935.695993][ T9690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.704713][ T9690] usb 6-1: config 0 descriptor?? [ 936.241979][ T9690] usbhid 6-1:0.0: can't add hid device: -71 [ 936.248014][ T9690] usbhid: probe of 6-1:0.0 failed with error -71 [ 936.259648][ T9690] usb 6-1: USB disconnect, device number 69 18:42:45 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:42:45 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xba, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:45 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xedd, 0x0, 0x0) 18:42:45 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x64, 0x0, 0x0) 18:42:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x4001, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x705000) ioctl$SOUND_OLD_MIXER_INFO(r1, 0x80304d65, &(0x7f0000000140)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000001280)={{r3}, "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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000200)=0x200, 0xfffffee2) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x40, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r4, 0x4004510f, &(0x7f0000000240)=0xffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="b42900"/16], 0x10}}], 0x2, 0x0) 18:42:45 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xef0, 0x0, 0x0) 18:42:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xfa, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:45 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x300, 0x0, 0x0) 18:42:45 executing program 4: ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000100)={0x0, 0x3000, 0x0, 0xe1, 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8940, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) dup2(0xffffffffffffffff, r0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) io_setup(0x7f, &(0x7f0000000000)=0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r3]) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) io_getevents(r3, 0xffffffff7fffffff, 0x1, &(0x7f0000000140)=[{}], &(0x7f0000000240)={r4, r5+10000000}) fcntl$setstatus(r2, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r6, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) io_submit(r6, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 18:42:45 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:45 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf21, 0x0, 0x0) [ 936.991932][ T3589] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 937.271938][ T3589] usb 6-1: Using ep0 maxpacket: 8 [ 937.401910][ T3589] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 937.413835][ T3589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.425015][ T3589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.435826][ T3589] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 937.448808][ T3589] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 937.459127][ T3589] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.469522][ T3589] usb 6-1: config 0 descriptor?? [ 938.021895][ T3589] usbhid 6-1:0.0: can't add hid device: -71 [ 938.027919][ T3589] usbhid: probe of 6-1:0.0 failed with error -71 [ 938.036797][ T3589] usb 6-1: USB disconnect, device number 70 18:42:47 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x13a, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:47 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xa00, 0x0, 0x0) 18:42:47 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf26, 0x0, 0x0) 18:42:47 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:42:47 executing program 4: r0 = syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)={[{@ignore_local_fs='ignore_local_fs'}, {@hostdata={'hostdata', 0x3d, '@('}}, {@statfs_percent={'statfs_percent', 0x3d, 0xffff}}]}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x8800, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl='posixacl'}, {@cachetag={'cachetag', 0x3d, 'ignore_local_fs'}}, {@nodevmap='nodevmap'}, {@version_L='version=9p2000.L'}, {@nodevmap='nodevmap'}, {@access_user='access=user'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@audit='audit'}, {@smackfstransmute={'smackfstransmute', 0x3d, ']}#'}}]}}) unlink(&(0x7f0000000000)='./file0\x00') 18:42:47 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xb95, 0x0, 0x0) 18:42:47 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:47 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf32, 0x0, 0x0) 18:42:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x19a, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:47 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xbb3, 0x0, 0x0) 18:42:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000000c0)=0x2, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002600815a"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0, 0x0, 0x0, 0x500e0000}}], 0x344, 0x10122, 0x0) 18:42:47 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x1dc, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:47 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf38, 0x0, 0x0) 18:42:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x22a, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 938.761837][T10789] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 938.774082][T26806] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 938.785339][T26796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 938.796643][T26796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 938.807131][T26796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 938.818515][T26796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 938.897672][T26796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 938.907315][T26809] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 938.917168][T26809] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 938.927357][T26809] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 939.001797][T10789] usb 6-1: Using ep0 maxpacket: 8 [ 939.121817][T10789] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 939.132621][T10789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.144261][T10789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 939.154298][T10789] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 939.167472][T10789] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 939.176802][T10789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.187423][T10789] usb 6-1: config 0 descriptor?? [ 939.741754][T10789] usbhid 6-1:0.0: can't add hid device: -71 [ 939.747685][T10789] usbhid: probe of 6-1:0.0 failed with error -71 [ 939.754800][T10789] usb 6-1: USB disconnect, device number 71 18:42:48 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:42:48 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xbcd, 0x0, 0x0) 18:42:48 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:48 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf45, 0x0, 0x0) 18:42:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x270, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:48 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(r0, &(0x7f0000000100), 0x1, &(0x7f0000000300)) tkill(r1, 0x40) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) rt_sigqueueinfo(r2, 0x3f, &(0x7f0000000080)={0x1c, 0x5, 0x8}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) clone3(&(0x7f0000000280)={0x48004000, &(0x7f0000000000), 0x0, 0x0, {}, &(0x7f0000000140)=""/147, 0x93, 0x0, &(0x7f0000000040)=[0x0, r0, r1], 0x3}, 0xfffffc38) 18:42:49 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x2c6, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:49 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf4b, 0x0, 0x0) 18:42:49 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0xb, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0x3, 0xc}, @timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x0, [{@loopback}, {@empty}]}]}}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@mpls_getroute={0x30, 0x1a, 0x400, 0x70bd2b, 0x25dfdbff, {0x1c, 0x14, 0x14, 0x9, 0xff, 0x1, 0xfe, 0xccb8dc0de19d8942, 0x2200}, [@RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x4800, 0x2, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8804) 18:42:49 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xbe4, 0x0, 0x0) 18:42:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x300, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 940.451714][ T3589] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 940.711706][ T3589] usb 6-1: Using ep0 maxpacket: 8 [ 940.831834][ T3589] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 940.842584][ T3589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.854056][ T3589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.864208][ T3589] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 940.877395][ T3589] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 940.886731][ T3589] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.895660][ T3589] usb 6-1: config 0 descriptor?? [ 941.431663][ T3589] usbhid 6-1:0.0: can't add hid device: -71 [ 941.437627][ T3589] usbhid: probe of 6-1:0.0 failed with error -71 [ 941.445329][ T3589] usb 6-1: USB disconnect, device number 72 18:42:50 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:42:50 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x64, &(0x7f0000000140)="c4c691019919daffffff7fc5d61abc6cd1b3ddac7d0098d3e0a5fc79c0fe7282987364e69e6fe42ff9373a5efaa8b507c946a8cc45edef31ede99a1af0f0824f1047f42bf98adf49a9f092b0dfc95e6bdf88ce57f97c67907acbd02e481c4dc80869df8c"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)="2512be6ebec419112e42780742c57a42fcc27e3608d7138d") r3 = gettid() tkill(r3, 0x40) 18:42:50 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xc04, 0x0, 0x0) 18:42:50 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x310, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:50 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf57, 0x0, 0x0) 18:42:50 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:50 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xc1b, 0x0, 0x0) 18:42:50 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000580), &(0x7f0000000700)=0x4) r2 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x9, 0x3, 0x9a0, 0x90, 0x0, 0xb0, 0x0, 0xb0, 0x908, 0x1a8, 0x1a8, 0x908, 0x1a8, 0x3, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, '\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x850, 0x878, 0x0, {}, [@common=@unspec=@u32={{0x7e0, 'u32\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0xa00) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="63300000fbdbdf250220003400"/22], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4015) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$affs(&(0x7f0000000200)='affs\x00', &(0x7f0000000240)='./file0\x00', 0x80, 0x1, &(0x7f0000000280)=[{&(0x7f0000000380)="7c563a58afda7b531f38b9da37abb2c96d6328ae630c1b2ca0ad2591e5c8a59df20e8e87207e4d9f73ae6445968531dec389eb905a24760fd50998d90e0751c0c0718f68b51a76e395c469a8a8a4e0adfb54edc87bf565b6741c509558430daed52bcb11ac6017a0e59d24b26b0726bc4b85c71fb1aee4d72c99ff9da675dcc4a825b626331e60", 0x87, 0x8cb3}], 0x240420, &(0x7f0000000300)={[{']'}, {'}+'}, {'NOTRACK\x00'}, {'u32\x00'}, {'+/*#!)'}, {'NOTRACK\x00'}], [{@euid_eq={'euid', 0x3d, r4}}]}) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000600)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe4) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004340)={&(0x7f0000000d00)=ANY=[@ANYBLOB="20002dbd7097daa5da28865900fedbdf2501001601ee47df00", @ANYRES32=0x0, @ANYRES32=r8, @ANYRES32, @ANYBLOB="5a82e0cbc565f1dc945d09e1912b1fa01cba2defbc2c43e3ce8586108a2009b8dfc06c5286824b5bbca276caaf9d8becd794e05c2add55ae5330851f6ef55cd675f6fe693225564b83be25106d3a478d9f3a441d4ddba48f705a60f1172d2e306bb440ff0fe1b6265665ef10e9dfbb7b03e776c5d868bf435b47c3e1e3998bc7bea8526ba41ff0c56f1daae59daa51915443d5199580fba1175244a30b32ef86a85eb5ebd064acc04416835752eb5808c397d8ccf045c2b7934ec9d1e28f79b7f50077257927d0b6f4407a3673578f3b0547d32e5575d765db8edb1feb7bebc80d7a3ee7f26a6a1c51be5f2e646d0f0217c28b", @ANYBLOB="40000100240101006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000700000000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000019000400686173685f746f5f706f72745f6d617070696e67000000003800010024000100616374697665706f727400000000000000000000000000000000000000000100050003000300000008000400f3caef77e10aaea9bdd98b655af380601d654fdad4d5330a49fd9914f8e9b540b6638c59ee3b011f94a9f67e51d60a0000000000", @ANYRES32=0x0, @ANYBLOB="38000100240000106d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008b0ad921c88db6eb1fd330d020004000010000038000102240001006d636173745f72656a6f696e5f696e74657276616c0000000000001dce9d126ac050fa0003000000", @ANYRESHEX=r5, @ANYRESOCT, @ANYRES32=r8, @ANYRES16=r6], 0x220}, 0x1, 0x0, 0x0, 0x4040005}, 0x4000041) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x34, 0x66, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xf, 0xf}, {0x3, 0xf}, {0x7, 0xb}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x8255}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8c00000010003b0c00000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="800000000100000008000a47b503a2933aba87ec996f81afea00", @ANYRES32=0x0, @ANYBLOB="640012800b00010065727370616e00005400028006000f00fb030000080007007f00000104001200080015006574090004001200060011004e220000080004000000000006000f0016b2000008000100", @ANYRES32=0x0, @ANYBLOB="050008007e0000000500170000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000800) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000480)='yeah\x00', 0x5) 18:42:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x356, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:50 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf5d, 0x0, 0x0) [ 942.026301][T26911] x_tables: duplicate underflow at hook 3 [ 942.052394][T26914] x_tables: duplicate underflow at hook 3 [ 942.193730][ T3589] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 942.442706][ T3589] usb 6-1: Using ep0 maxpacket: 8 [ 942.581742][ T3589] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 942.592571][ T3589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.604064][ T3589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 942.614176][ T3589] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 942.627298][ T3589] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 942.636688][ T3589] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.645619][ T3589] usb 6-1: config 0 descriptor?? [ 943.191577][ T3589] usbhid 6-1:0.0: can't add hid device: -71 [ 943.197602][ T3589] usbhid: probe of 6-1:0.0 failed with error -71 [ 943.206616][ T3589] usb 6-1: USB disconnect, device number 73 18:42:52 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:42:52 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xc82, 0x0, 0x0) 18:42:52 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x3c1, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:52 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf73, 0x0, 0x0) 18:42:52 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x3, &(0x7f0000000340)=[{&(0x7f00000000c0)="2950044c2a10f44344650e74db6fc7422262534421a801dc9218255371aa7fa12cf7fc6cc8c38c1a10779a9be5acc236480f2e83e935ef6f35bcb7f86719d9de094a8f59989a7ff4acb3ef52cb7d14276880a4a21a9b3a1aff0fb684021ba4198280dcd128bd1f7c5f9546860aa9ed7e27c49425cd175abd488374174da77378d2149b0a4494f3e6b7be5633b3c234688a6c8893a378", 0x96, 0xfffffffffffffffb}, {&(0x7f0000000180)="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", 0xfb}, {&(0x7f0000000280)="e93a572d190d52e4b20f8b7ff1fa4e2d99ad6708e2e4cbc3b46b82b7d9a7275e124d369ffb2d55ed1562d57465fba0cd48b1f0b91c1d66bc4fb722c09df6ca4f22a0c71e284571dd07da1f15c4ca689cf81f748fe4e30b22867011c3d72af00078e00b244b090e3fd8ba58398401fd62a7652aeab70483379e85593a2b799b55273b874828d9553ea088913173f1ac61626021d35b665cb698a26c7b4844985ee4b151", 0xa3, 0x2}], 0x1000408, &(0x7f00000003c0)={[{@notreelog='notreelog'}, {@compress_force='compress-force'}, {@fragment_data='fragment=data'}, {@ref_verify='ref_verify'}, {@nospace_cache='nospace_cache'}, {@nossd='nossd'}], [{@seclabel='seclabel'}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000580)={0x208, @time={0x6, 0x2}, 0x40, {0x8, 0x80}, 0x80, 0x0, 0x7f}) r2 = socket$inet_udp(0x2, 0x2, 0x0) preadv(r2, &(0x7f0000000980)=[{&(0x7f00000005c0)=""/158, 0x9e}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/226, 0xe2}, {&(0x7f0000000900)=""/53, 0x35}, {&(0x7f0000000940)=""/3, 0x3}], 0x6, 0xfff, 0x7) readv(r1, &(0x7f0000000540)=[{&(0x7f0000000440)=""/195, 0xc3}], 0x1) 18:42:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x3d0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:52 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:52 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf7d, 0x0, 0x0) 18:42:52 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xc95, 0x0, 0x0) 18:42:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x3c}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x82800, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=@deltclass={0x454, 0x29, 0x8, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xe}, {0x3, 0xd}, {0x2, 0xc}}, [@tclass_kind_options=@c_clsact={0xb, 0x1, 'clsact\x00'}, @tclass_kind_options=@c_taprio={0xb, 0x1, 'taprio\x00'}, @tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0x408, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0xfffffffa, 0x6, 0x9d8b, 0x2, 0x6, 0xcf6, 0x44290c26, 0x7, 0x5, 0x3, 0x7, 0x6, 0x100, 0xfffffffb, 0x5, 0x2, 0x5, 0x800, 0xffffffc1, 0x6, 0x10, 0x5, 0x1, 0x9, 0x205, 0x2, 0x9, 0x2, 0x199c, 0x80, 0xe030, 0x1, 0x6, 0x6, 0x9, 0x9, 0x3, 0x9, 0x6, 0x6, 0xb49, 0x0, 0x20, 0x1, 0x80, 0x2, 0x0, 0x200, 0x7fff, 0x2, 0x1, 0x4, 0x5, 0x1, 0xfff, 0x4, 0xc7f, 0x1, 0x8, 0x4, 0x10000, 0x8, 0x3, 0x2, 0x20, 0x11ef233f, 0x5, 0x54a, 0x7, 0x31, 0x80000001, 0x0, 0x20, 0x6835, 0x6, 0x8, 0x6, 0x6, 0x80000000, 0x7f, 0x2, 0x2, 0x3, 0x3, 0xa8, 0x1, 0xbd, 0x5f41, 0x6, 0xff5e, 0xa2, 0x6, 0x0, 0x93e9, 0x9fe, 0x10100000, 0x20, 0xe8f, 0xf7, 0xaff, 0x5, 0x1, 0x10001, 0x61a4, 0xfff, 0x0, 0x400, 0x6, 0x9e, 0x80000000, 0xffffffff, 0x3, 0x1f, 0x20, 0x2, 0x101, 0x339d1d4, 0x9, 0x0, 0x8, 0x3, 0xcd, 0x3, 0xaea, 0x10b3, 0x200, 0x4, 0x7, 0x8, 0x40, 0x3, 0x401, 0x80000000, 0x0, 0x2, 0x80000001, 0x38, 0x3, 0x1, 0x5, 0x4, 0x2, 0x31, 0x3f, 0xfffff8d3, 0x5732, 0x5, 0x2, 0x4, 0x31b, 0x3ab, 0x821, 0xfff, 0x3ff, 0x7fffffff, 0x0, 0x4, 0x40, 0x3f, 0x80000001, 0x8, 0x3f, 0x0, 0x0, 0x0, 0x709b5c5c, 0x5, 0x8, 0x7, 0x7a, 0x5357cd34, 0x9df, 0xfffffffb, 0x8000, 0x80, 0x7fff, 0x3, 0xd76, 0xfffffffc, 0x0, 0x1, 0xfffff526, 0x2, 0x9, 0x7fffffff, 0x8001, 0xff, 0x9, 0x9, 0x8, 0x9, 0x1, 0x6, 0x1, 0xc4e7, 0x46e, 0xffff, 0x6, 0x6, 0x0, 0x5c, 0x4, 0x6, 0x7fffffff, 0x2, 0x6, 0x1, 0x68a, 0x2, 0x3ff, 0x800, 0x2, 0xfff, 0xaf59, 0x4000000, 0x3, 0x0, 0x8, 0x7ff, 0x8, 0xfffffffc, 0x3, 0x1b2, 0xffffff79, 0x1, 0x0, 0x6, 0x7, 0x10001, 0x7, 0x21bfdbc0, 0xfff, 0x9, 0x7fff, 0x4, 0x1000, 0x5, 0x3, 0xb76, 0x2, 0x7f, 0x8001, 0xe228810, 0x4, 0x5, 0x9, 0x6d14c5cc, 0x54, 0x3, 0x8, 0xfffffffe, 0x9, 0x2, 0xfffffffc, 0x6c, 0x2]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x80}}]}, 0x454}, 0x1, 0x0, 0x0, 0x4044001}, 0x84) 18:42:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x500, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 943.971568][ T3589] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 944.231490][ T3589] usb 6-1: Using ep0 maxpacket: 8 [ 944.362334][ T3589] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 944.374491][ T3589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.385563][ T3589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.396342][ T3589] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 944.409205][ T3589] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 944.419463][ T3589] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.428092][ T3589] usb 6-1: config 0 descriptor?? [ 944.981451][ T3589] usbhid 6-1:0.0: can't add hid device: -71 [ 944.987385][ T3589] usbhid: probe of 6-1:0.0 failed with error -71 [ 944.994392][ T3589] usb 6-1: USB disconnect, device number 74 18:42:54 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:42:54 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:54 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xca0, 0x0, 0x0) 18:42:54 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf7f, 0x0, 0x0) 18:42:54 executing program 4: ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = creat(&(0x7f0000001300)='./file0\x00', 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x41eb, &(0x7f00000002c0)={0x0, 0x2a5f, 0x10, 0x0, 0x4b}, &(0x7f0000144000/0x4000)=nil, &(0x7f0000aa2000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000200)={0x4, 0x8, 0x2, 0x6, 0xfff, 0x3}) io_uring_enter(r0, 0x1e90, 0x6488, 0x4, &(0x7f0000000040), 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) io_uring_enter(r5, 0x3b61, 0x8c0, 0x2, &(0x7f0000000180)={[0x1]}, 0x8) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000080)=""/124) 18:42:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x600, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:54 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xdac, 0x0, 0x0) 18:42:54 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x700, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:54 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf81, 0x0, 0x0) 18:42:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x900, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:54 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xdae, 0x0, 0x0) [ 945.722841][T10789] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 945.962728][T10789] usb 6-1: Using ep0 maxpacket: 8 [ 946.081482][T10789] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 946.092361][T10789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.103633][T10789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.113435][T10789] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 946.126371][T10789] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 946.135448][T10789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.144208][T10789] usb 6-1: config 0 descriptor?? [ 946.701347][T10789] usbhid 6-1:0.0: can't add hid device: -71 [ 946.707401][T10789] usbhid: probe of 6-1:0.0 failed with error -71 [ 946.715275][T10789] usb 6-1: USB disconnect, device number 75 18:42:55 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:42:55 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:55 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf83, 0x0, 0x0) 18:42:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xa00, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:55 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xdb6, 0x0, 0x0) 18:42:55 executing program 4: ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = creat(&(0x7f0000001300)='./file0\x00', 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x41eb, &(0x7f00000002c0)={0x0, 0x2a5f, 0x10, 0x0, 0x4b}, &(0x7f0000144000/0x4000)=nil, &(0x7f0000aa2000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000200)={0x4, 0x8, 0x2, 0x6, 0xfff, 0x3}) io_uring_enter(r0, 0x1e90, 0x6488, 0x4, &(0x7f0000000040), 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) io_uring_enter(r5, 0x3b61, 0x8c0, 0x2, &(0x7f0000000180)={[0x1]}, 0x8) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000080)=""/124) 18:42:55 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xdc0, 0x0, 0x0) 18:42:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xb00, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:56 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf8a, 0x0, 0x0) 18:42:56 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:56 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xdd0, 0x0, 0x0) 18:42:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xc00, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 947.441298][ T3589] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 947.721317][ T3589] usb 6-1: Using ep0 maxpacket: 8 [ 947.891284][ T3589] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 947.902030][ T3589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 947.912953][ T3589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 947.922781][ T3589] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 947.935857][ T3589] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 947.944908][ T3589] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.953492][ T3589] usb 6-1: config 0 descriptor?? [ 948.491249][ T3589] usbhid 6-1:0.0: can't add hid device: -71 [ 948.497239][ T3589] usbhid: probe of 6-1:0.0 failed with error -71 [ 948.504683][ T3589] usb 6-1: USB disconnect, device number 76 18:42:57 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:42:57 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf8c, 0x0, 0x0) 18:42:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:57 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xe03, 0x0, 0x0) 18:42:57 executing program 4: ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = creat(&(0x7f0000001300)='./file0\x00', 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x41eb, &(0x7f00000002c0)={0x0, 0x2a5f, 0x10, 0x0, 0x4b}, &(0x7f0000144000/0x4000)=nil, &(0x7f0000aa2000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000200)={0x4, 0x8, 0x2, 0x6, 0xfff, 0x3}) io_uring_enter(r0, 0x1e90, 0x6488, 0x4, &(0x7f0000000040), 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) io_uring_enter(r5, 0x3b61, 0x8c0, 0x2, &(0x7f0000000180)={[0x1]}, 0x8) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000080)=""/124) 18:42:57 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf8e, 0x0, 0x0) 18:42:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x1003, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:57 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xe2a, 0x0, 0x0) 18:42:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x1100, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:57 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 949.331228][ T4812] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 949.591158][ T4812] usb 6-1: Using ep0 maxpacket: 8 [ 949.711959][ T4812] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 949.722682][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.734130][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 949.744240][ T4812] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 949.757369][ T4812] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 949.766706][ T4812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.775813][ T4812] usb 6-1: config 0 descriptor?? [ 950.311129][ T4812] usbhid 6-1:0.0: can't add hid device: -71 [ 950.317090][ T4812] usbhid: probe of 6-1:0.0 failed with error -71 [ 950.327967][ T4812] usb 6-1: USB disconnect, device number 77 18:42:59 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:42:59 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xe77, 0x0, 0x0) 18:42:59 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf90, 0x0, 0x0) 18:42:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x155a, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:59 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:59 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8940, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESDEC=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv6_getaddr={0x88, 0x16, 0x100, 0x70bd26, 0x25dfdbfc, {0xa, 0x1f, 0x1, 0xff}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @empty}}, @IFA_ADDRESS={0x14, 0x1, @private0}, @IFA_CACHEINFO={0x14, 0x6, {0x80000000, 0x6b9, 0x1f, 0xa1fe1f0c}}, @IFA_FLAGS={0x8, 0x8, 0x80}, @IFA_FLAGS={0x8, 0x8, 0x4a8}, @IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, [], 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x26}, @IFA_FLAGS={0x8, 0x8, 0x51}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004820}, 0x110) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x50}}, 0x0) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008044}, 0x20000800) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8940, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) sendto$inet6(r4, &(0x7f0000000400)="f10a9d31b09b50c271ec7c900d9890f84b94132293a225edddbae0ed24d3869c632995a68b4b1a278c44c36314286673793f8d4839bde1d22be1463145fe7b489f35c1971cafcbdd03ff8688", 0x4c, 0x0, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1, 0x6}, 0x1c) 18:42:59 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000f5000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000100)=0x5, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r2 = open(0x0, 0x0, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000001400), 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000840)={'filter\x00', 0x1002, 0x4, 0x3d0, 0x5202, 0x0, 0x3d0, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty=0xe4010000, 0x0, 0x0, 0x0, 0x0, {@empty=[0x0, 0x2, 0x0, 0x0, 0xa]}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'tunl0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2e8}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @local, @loopback}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x420) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000180)={{0x0, 0x2, 0x7fc, 0x0, 0x40}, 0xe45}) 18:42:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x2000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:42:59 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:42:59 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf97, 0x0, 0x0) 18:42:59 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xedd, 0x0, 0x0) 18:42:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x2a02, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 951.111366][ T4812] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 951.361063][ T4812] usb 6-1: Using ep0 maxpacket: 8 [ 951.481260][ T4812] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 951.491988][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.503160][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.513008][ T4812] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 951.526052][ T4812] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 951.535126][ T4812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.545185][ T4812] usb 6-1: config 0 descriptor?? [ 952.081018][ T4812] usbhid 6-1:0.0: can't add hid device: -71 [ 952.086969][ T4812] usbhid: probe of 6-1:0.0 failed with error -71 [ 952.094297][ T4812] usb 6-1: USB disconnect, device number 78 18:43:01 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:43:01 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:43:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xfa7, 0x0, 0x0) 18:43:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x3a01, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:01 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xef0, 0x0, 0x0) 18:43:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"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"}) 18:43:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x4788, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:01 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:43:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xfb3, 0x0, 0x0) 18:43:01 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf21, 0x0, 0x0) 18:43:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x2008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r1 = getpid() ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000500)={0x4, 0x9, 0x0, [{0x3f, 0xd5bc, 0x8000, 0x0, 0x6, 0x0, 0x6}, {0x400, 0x9, 0x100000001, 0x7, 0x4, 0x6, 0x39}, {0x7ff, 0x1, 0x5, 0xde, 0x4, 0x3e, 0x4}, {0x10000, 0x1, 0x1000, 0x81, 0x1, 0x8, 0x23}, {0x4, 0x20, 0x1, 0x1, 0x8, 0xc0, 0x7}, {0x4b, 0x9, 0xfff, 0xfc, 0x80, 0xb2, 0x7f}, {0x6, 0x5, 0x8, 0xbe, 0x1a, 0x70, 0x9}, {0x6d81c8e4, 0x9b, 0x430, 0x3, 0x65, 0x8}, {0x3a, 0x0, 0x1, 0xff, 0x2, 0xd3, 0x40}]}) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000100)) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r1, &(0x7f0000000200)={0x38, 0x3, 0x10, 0x0, 0x0, 0x0, 0x8, 0x800}, 0x0) io_setup(0x4, &(0x7f00000004c0)) 18:43:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x4888, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 952.871023][ T3589] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 953.130970][ T3589] usb 6-1: Using ep0 maxpacket: 8 [ 953.272909][ T3589] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 953.283679][ T3589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.294803][ T3589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.304581][ T3589] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 953.317525][ T3589] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 953.326648][ T3589] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.335377][ T3589] usb 6-1: config 0 descriptor?? [ 953.870942][ T3589] usbhid 6-1:0.0: can't add hid device: -71 [ 953.876950][ T3589] usbhid: probe of 6-1:0.0 failed with error -71 [ 953.884481][ T3589] usb 6-1: USB disconnect, device number 79 18:43:03 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1d, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}]}}, 0x0}, 0x0) 18:43:03 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf26, 0x0, 0x0) 18:43:03 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:43:03 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xfba, 0x0, 0x0) 18:43:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x5600, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:03 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/connector\x00') ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x53, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 18:43:03 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:43:03 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xfc6, 0x0, 0x0) 18:43:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x5603, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:03 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf32, 0x0, 0x0) 18:43:03 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:43:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x12a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) prlimit64(r1, 0x7, &(0x7f0000000040)={0x7, 0x1}, &(0x7f0000000080)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0xffffffffffffffff, 0x7fffffff, 0xfffffffffffffd0f) ptrace$cont(0x7, r0, 0x0, 0x0) [ 954.670885][ T7] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 954.930951][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 955.060860][ T7] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 955.071603][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.083050][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.093108][ T7] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 955.106352][ T7] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 955.115612][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.125237][ T7] usb 6-1: config 0 descriptor?? [ 955.870824][ T7] usbhid 6-1:0.0: can't add hid device: -71 [ 955.876759][ T7] usbhid: probe of 6-1:0.0 failed with error -71 [ 955.883991][ T7] usb 6-1: USB disconnect, device number 80 18:43:05 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1d, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}]}}, 0x0}, 0x0) 18:43:05 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xfe0, 0x0, 0x0) 18:43:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x5865, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:05 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf38, 0x0, 0x0) 18:43:05 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:43:05 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) bind$netrom(r0, &(0x7f0000000080)={{0x3, @bcast, 0x6}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}, 0x48) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0xe, &(0x7f0000000000), 0x20a154cc) 18:43:05 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf45, 0x0, 0x0) 18:43:05 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x6400, 0x0, 0x0) 18:43:05 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200000, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000001480)=0x7ff, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000014c0)=""/250, &(0x7f00000015c0)=0xfa) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r0, r1}) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000000)=""/191, 0xbf}, {&(0x7f0000000140)=""/196, 0xc4}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/41, 0x29}, {&(0x7f0000001280)=""/114, 0x72}, {&(0x7f0000001300)=""/157, 0x9d}, {&(0x7f00000013c0)=""/4, 0x4}], 0x7, 0x7f, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000001600)) 18:43:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x5a15, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:05 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:43:05 executing program 4: shmat(0x0, &(0x7f0000ff9000/0x3000)=nil, 0x10f00e33209c98f1) mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000008) [ 956.700764][ T3589] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 956.960719][ T3589] usb 6-1: Using ep0 maxpacket: 8 [ 957.080900][ T3589] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 957.092881][ T3589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.104021][ T3589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.114000][ T3589] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 957.127041][ T3589] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 957.136150][ T3589] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.145979][ T3589] usb 6-1: config 0 descriptor?? [ 957.880692][ T3589] usbhid 6-1:0.0: can't add hid device: -71 [ 957.888302][ T3589] usbhid: probe of 6-1:0.0 failed with error -71 [ 957.897832][ T3589] usb 6-1: USB disconnect, device number 81 18:43:07 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1d, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}]}}, 0x0}, 0x0) 18:43:07 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x0) 18:43:07 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf4b, 0x0, 0x0) 18:43:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) open(&(0x7f0000000040)='./file0\x00', 0x280b00, 0x0) 18:43:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:07 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:43:07 executing program 4: add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', 0x0, 0x2}) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$clear(0x7, r0) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000000)='trusted\x00', &(0x7f00000000c0)='syz') 18:43:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x6558, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:07 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf57, 0x0, 0x0) 18:43:07 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x2, 0x0) 18:43:07 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:43:07 executing program 4: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb8e, 0x100}, 0x0, 0x0, 0x0, 0x0, 0xcb2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="c7ff0000", @ANYRES16=0x0, @ANYBLOB="20002dbd7000ffdbdf250200000014000700fe8000000000000000000000000000bb050003002f00000014000900fc000000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x24004891}, 0x24040841) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x260100, 0x111) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x2c094, &(0x7f0000000680)=ANY=[@ANYRESHEX=r0]) openat$cgroup_ro(r0, &(0x7f0000000280)='cgroup.events\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) keyctl$assume_authority(0x10, 0x0) r3 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000640)='\f', 0x1, r3) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0xd0ec}, 0x1090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xc37) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000780)={0x5, 0x70, 0x1, 0x2, 0xff, 0x3f, 0x0, 0x1000, 0x183, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x1, @perf_config_ext={0x7, 0x3ff}, 0x42b08, 0x94ab, 0x18, 0x3, 0x3, 0x8b, 0x5}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) clone(0x1000000, &(0x7f0000000300)="5a881c81a55a3d88efc45a7585febecc22a675d3dc4944fc87eeef81becf55a8f78f5d5ef3ac32431cde442198d1e688c8f349fec20b21f4d1230705011cf9e6f2acdfbfb1ada5750e0d09ea383165aa90fb56b64e5134fbbcef56b92e86bb856f59fff19854cb06184f5e379e747d861010d3bacee535f90ac2d96cc698b1670ba9303042e9345fa40c", &(0x7f0000000440), &(0x7f00000005c0), &(0x7f0000000600)) [ 958.643935][T27442] IPVS: ftp: loaded support on port[0] = 21 [ 958.660626][ T9690] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 958.869729][T27463] IPVS: ftp: loaded support on port[0] = 21 [ 958.900610][ T9690] usb 6-1: Using ep0 maxpacket: 8 [ 959.020629][ T9690] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 959.032700][ T9690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.044183][ T9690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.054345][ T9690] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 959.067526][ T9690] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 959.076766][ T9690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.087153][ T9690] usb 6-1: config 0 descriptor?? [ 959.830566][ T9690] usbhid 6-1:0.0: can't add hid device: -71 [ 959.836485][ T9690] usbhid: probe of 6-1:0.0 failed with error -71 [ 959.845553][ T9690] usb 6-1: USB disconnect, device number 82 18:43:09 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0x0, "fff8fac6"}]}}, 0x0}, 0x0) 18:43:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x7002, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:09 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:43:09 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x3, 0x0) 18:43:09 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf5d, 0x0, 0x0) 18:43:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}}}, &(0x7f0000000080)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0xf}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="f919b51e74256038b245a6ee0a7bf6e781255707ed6048", 0x17}], 0x1, 0x0, 0x0, 0x4040000}, {0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000004cc0)="cad02732ef2fa6594a54f18e9d955ea833ad886bc12d0e4fe53d3d7c05c62d57311194a973cb8169559a803cefae1b177ec35069de91477fc17687206f201ad38a09fd5ffc47500fce162749a1ad53df49c9c44472b2c680a7a491ab0beed81bffd081b2bd5a02d06d3766cbc34b650d8d4bb2d84d19b57a4169df26d1fe5cc1ddd371d3b4703992517ef7f2ab5b4065e527a7746cbc30844320926029fabc515a83473421bef49c016b83222e7214e10a2c4c3c2df734950eb6c369572d7c36223974c2ffb064cbbfae55d8e2c253b2cf248a9bbf2e63afc929b6724f0c77e1", 0xe0}, {&(0x7f0000000480)="5613915d4e6b21921b9eb726cfcfe65133bbfb8ad38dd133d7f2cda5e0a6744c19c7caa8192754848aed632e7c87cdb30bfaa3dca9831e794eea15c847a3121e2f6f78b6ba869af253490d78c619602db1087aeaf3dcb0139db0bfb61b675cd98b0da25ee23c27daea9f66150378b6054ae7117a25f36d318da0c8daf86b3d5d882aa343cedc050366783c34528ba2351e0c73", 0x93}, {&(0x7f0000000680)="9718ee24f0720163911740d81ade3fb8aee776adb965df2b7db6e69f9026f77f329ac1987ae733865cf4fed75d658179877feb55997a674425d8d0559a6a17c2b4f927e39983d646dda66c53a63f9a950077", 0x52}, {&(0x7f0000000780)="8df26904005a319526338e95302017e6f4f770d6a0396b9cef41d0deb3b03d628ab35fa0ba8e2dbd44a50b399a6b552a87de59ca2cbafbd8503d6c7a4bf17ac943ae2740673dc412a3b1ea1c4c0d6a05471aea76586a09efc08fae7b5ce3e4010bc4d2ba00206e2c86b57a77cdead2f08dc8fe7c4ece8a32501ea58dc239accf2972ae2d1d6661856b1c87b9636b6768e217b9ba05239fb2de67c6b4c67153b2ee58fab30b01cfd2a7659391e850eea4d19d578ac2753b75d9ef85c04004923d2bdd5716ebfa152ea6b1fe1b0715041d31a096a3c2a401016c", 0xd9}], 0x4, &(0x7f00000051c0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x80, 0x117, 0x2, 0x66, "777136b60937bb723264c8b6aaaa80148c409cbe42c120045f36cd6d2c8a402f5a4a18883b8fa5761857aa1309fab54c7e5a977238d17fb4a872bd33d8ffcba6d4a012f5e0da5ed56ba49d1ffe685a514f3a248a87136aebe1cd5146dfd39fe9f47a8d6bc479"}, @op={0x18}, @iv={0xc0, 0x117, 0x2, 0xa5, "f3a81fb538f3290b1a81082da6946664204ba8ea8ddd0ed7d3d3079d4008f1c5b3faf6d220999fb540cf5796c88cefe928ddb22df09ff50da77b3c6eeb5a30fc4ba166b09ddd0d260a338ad92db47a38c5d7952b586bd84f287fbd7348a71122f8b5f38608218103752649c017ec6ac5db9858cb6b03b0b18587db7b574bd91f174a0cf59c60323d9c3fddabf9b3e436a6d5dc4c22594610b82e630dd7fd6e86cc52936ea6"}, @assoc={0x18, 0x117, 0x4, 0x42d}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18}], 0x1b8, 0x890}, {0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a40)="88aec752654617c525ce8b3d528e0b5f0fb7e5de5a639a535f988d02bf50fe62cf2ae583b20e36c838497dc672b4731819e23db1db97f4d844fccdceac87abe4985636efe3f333e6e4eb461320c32318976cf379c4fe6eca15a56dadc692d25323d481babeeb7083c7535b6f4d9f3e08993103d6c6902a6ebeabcb04a5ef73c5c4a81592623e351b0449e4c56e5ad3cb0af46bb9132971acc70d80401c6de4e409e395be6f6717a4ade64a0aa33a398e0e6447d92febebd40225f717e87cc138e8f16282e24c472056638bd2361416226a5b1ddababc8794762561f70a0e772b77b7391bfa0ae011fc91ae434b2c", 0xee}, {&(0x7f0000000b40)="ae4161c537bce0f4edd3689e887974859ad8f713213710cd1681f114f14e47ca77cbd23118f65527af82eadd0c1c391d545d1ae98fff5e6ec3f2", 0x3a}], 0x2, 0x0, 0x0, 0x1d005525cff1ee18}, {0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="f00f3f5aad66759b7985b06a3dcd6d07071faedeb2b413dd2d9eadc1c74e610a6ea52ccfec71524e3e99b3a50dc567152bf2433bf0da5b29300c4dc097aaef46169ba196d95ed83b7b5270b4b7baf701cb59363768663eed491b7e4edfc9d5ccc830afbddf97feb0f3944115bc4caa5f16bc673100c7104e10bc18a9949857c72af284dc480782c6e007", 0x8a}, {&(0x7f0000001c80)="02c3fd9a1be6eebd21a81513323164007323c6b195ae89c92dff50e6f1a5531b6f0dabd7", 0x24}, {&(0x7f0000001cc0)="b37e31183e6dd782274c0c8b96c595eff986adfbcecf1254c9d35842253e11728a171511cfb131569896807c1bf09b404b3f93a274f5e31e9f4ea936dbaafee5fe902a", 0x43}, {&(0x7f0000001d40)="d5f48739ff2066a8b54e9454b41efaa7ba59a4bf3c28ecd06e9b639062a4315afdcd48e663d9db010b516966741fb1581b6dddf1ea179f6a2bf898de1a6d0de2e3335b08e13cbbad9ad9f29863", 0x4d}, {&(0x7f0000001dc0)="2c3c2011bd668a905c6c3f6a4233bd561f264e19662e13a032043d89f028777f5b03cda3399c43f6d28b51fe7446a8e4383659f269565dc0e146cd27559ae846374ae7b516cf0b54343a234c4b017c14d4354bad5326057e02fbf5f8598f094e65e4ee67212ae9569abde4c52edb98f082be32c45ee0cebe6d49c9f05250bfd1c8a20c6ff3856dac164821777f0c7c4d45b1e5bae197a1baac6da2e1d396c19810657147d1a784916cd22372b45b3e04445fcdb1f4afa2532b8cd7aa390c380336ec976cdcb568fdbd582db54d3ed3fc477fc23565989f07849044bc7a20c26f197162", 0xe3}, {&(0x7f0000001ec0)="c0647b3e2b5003c565535ff9191b6316d301a80f525bc4767c98a69adb70351f0802b1f50567fc3c7aa8e8c3eadb9bad76c9eb09d3b506bbb86dc05cf3bc216d4dc27ee4b850671dc6244123522eaea8426fc5befda34cb3e05c8a46fcc0089549a0fbd220295085a63506cef5d6fb2d6badea0e98fc87c754ecc88cef43af1e7f3bb66a6234e6a2ab879d44aec333ea5b99147a55e2752170da053e0bdd24759c36f06d10da3f630dd87b5c3a63361e77f2885e50a33e60142a3d69b4a9b87cb288a8698f4bf7e7c8f3fd11d9950e833c321b350023c29a4de3585fcfda5ccb132396de0a09c3777910855e", 0xec}, {&(0x7f0000001fc0)="737afdecb6dedbb01b0ee55010521b788bd7b07a0fa85ace4ad2f3c6b208e2a682dd5ca5c77ebff378ba4872fe48c3513ec0d2e6a7a07cf8b7c4528c2dd3db909cc7be51464ab986f6e335018c832603887ee4654e9a355a3816b53b09435795fc6f5914e74b2d701876e2921f143c454e126d685e9d18105a95c38fe54edefdc443e47aed6a84779d69d27227dfb23d85bec7192a78da2f451e731317a55671c3beb23ff3f4535c5e22078b6ae8e85f76e02d256578c9281d06a8115f31743382357e7cbe95657427a94522621251334272ac2cacab9ca5ba75e960891708cfbefbb5849e62e8db01352dd8eb78fabff8d9d7f0fffa2efe", 0xf8}, {&(0x7f00000020c0)="a18a242eba2b89816d60cf5c5a824941b292cd2d28651f91460d2e5ee82c68539736cb34b31a46831d1df07bf090e2e35937f9d9892b144a2ec839331b317cffa83fb03c72f492eb5ebe52d98831bbfa3e249aaf90f89984167efb98f859f22bb4c4c2e9bfa2900275aa0b14561ca72f269d34a9445660eb9840384ff3d56cd5dbab3b7752194fbb7dbbba618e8df33c5d6a5583fd06c6f4d97f5566c1f24651965c027b5fb34fa9d1ecdf7f96e8b3dfd006d3c6c4be853d97f8435b702382632add999690a2e6a6ec2208c57c0879", 0xcf}, {&(0x7f00000021c0)="1f390a7d2231509de8e5eb1b5d", 0xd}], 0xa, &(0x7f00000022c0)=[@iv={0x98, 0x117, 0x2, 0x7e, "9eef5cbac4a83364faa73e7550ccc6274ff9b120e6d3488a8788d27187afabe51a91ed5145e170506f35900eac6849a457617aef7d3a0ec0675ac49eedf5044ba057a8f097b16cbffd56a5bd4cdf83b065a2efedad68e862b983dff432cc085dc55e2f7f2febfbcd6814d55f78190c07861828c969c715510142415878c8"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}], 0xe0, 0x40000}, {0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000004fc0)="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", 0x12d}, {&(0x7f0000002440)="08753dec1cfd4d619d1fba21608355eecfd7f3ca76923c660886339fd879826dba551aa63d89e60139a5143930a6ac8e143d59700f22c648b752c90f098d561847ef3f219ccbd9d6dd3884e2af3669ac7d26b03e2946bd4d84549c33572634e6b72ed455af41ac1b268d4f9544e998e65ccb6d2d8c00369d4e2e7a5eea565837b66084a6d4389107858999c621979a43f4d326a5f1f7429d3c93695442d71c59d779073a9254ba1a7128029af56a410c69a5db080806406ce1ceeb4a1b5c44aec61d8460e18048fe4af5b5", 0xcb}, {&(0x7f0000002540)="d44d1ea404e0d6ddb94ada9635bc313550d0db0ca10242a895e00d5f038078565fdcc48c1cbda2bf231fb0d95d311a89dfbbe1c1beb66cf8345f8d0bbfeac8a6134f2873cac1ea22c4413b1c7521e352c9a6842bda6f2a29e2e637f566b235c02c613dc128e16afc0e239832e86faa532910b8f2d6f000b1096c34d95b8f8c1207e707550f792c19ee0b267b2169cdca9419c0955fbdbdc8361a0848fdcf9751cd725c07fa9a7cfe3b5d3b0d61981fcb726b58e37a1913a69224ee940febae598ce94563c8cd4a2c990bf702c4a78689f25ee1e2c92af1914fea8dd345d5133f2ec21724", 0xe4}, {&(0x7f0000002640)="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", 0x1000}, {&(0x7f0000003640)="3d024ea09d22fbc21b2843bd1defa4eae0dd4ae9072c5f2fe074c4c11626", 0x1e}, {&(0x7f0000003680)="b9955a4c82281e9c676f1bbd5a4f19f3b26aaf7ebbcfa37237f46c52bbd8b33e6e971e887848f4448cb32c9473dc867a1eef415effaa6ae5af15fbc9bb0c0ae4cb86c141262524af9c0bac2a522a1b0310e615b3400937da37297e8510423036b0d92157dfb222eb27ecb6276b9f16dcb065301750c173dc1b53ae3134c635ac00eb5f5b73933f4f8500beea9c81706d6a89a3f24223633e11b6b9698ef1131081769a7ada08b75a81a5311bf04aa05a3b69e4a6f6e17e212106207c772fa06282fc9c89d622da484a9d88b0e6f087e38eb7b9da59d83fcdb4ed71b07e1d9fb300175a21268e997c3363c0d73a528c00f991afb42e0f7d29f6abade12618", 0xfe}], 0x6, &(0x7f0000005100)=[@assoc={0x18, 0x117, 0x4, 0x85}, @assoc={0x18, 0x117, 0x4, 0x6}, @iv={0x30, 0x117, 0x2, 0x15, "5cabb7f298f759e8ad150952f22a606e3845b76afa"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x20, 0x117, 0x2, 0x5, "a5f6f8ebe2"}], 0x98, 0x8000}, {0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f00000038c0)="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", 0x1000}, {&(0x7f00000048c0)="3a180790cd105067593bc06a4751feb8361c035d58a36b3a6a9da058d0f40575cf976b64a8fb7fd65088e586cc7376d2ce5609fc8b41e1cfa52cc7624c61cb2f629cf76d1e9b96b67b30e6d69eabd06b8f2998b84962ef8956e13d686d81586033d1dc55dc47fbb06145edbdc00f1ccfbf87989b4488ed2f2c8c50308e0e085f040091d1b170ff11a91ea532700b71238852c0a6ab789647993c3b9e3f1fc7b5c207b9", 0xa3}, {&(0x7f0000004980)="863edc69f7897aed", 0x8}], 0x3, &(0x7f0000004a00)=[@iv={0x48, 0x117, 0x2, 0x2d, "3f707c35a0ed4215be0543682ed4912f8b04117c81833c2736ebd707312eae8299b0382c720b2d4c7abf6ee86c"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x6}, @iv={0x70, 0x117, 0x2, 0x55, "56a471494b24a994087cc1f78595a5ec0a0452658dfffcad69680c505a9fbfed7cf39112a51782c327c28e7bfa4a97179cfedf7cbffbde111fa9b026a24a141edd75e2c400a5969926e8c94f5d3da123d627691f4c"}], 0xe8, 0x8000}, {0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000004b00)="7975587d20eed858bd174c3212beb401c57cfb2d80a99d503afcf586c67e6e4cb60317f9bb94365baadc4a5e364762087d05aa3a7d316ede3266def34782cbb0baaf6fe41085abc67e77564cb0cc1f128f473773a9103bc18b95083ae9798ea41f80f9790e29117a98efd4cff7028c0162dd1af7e80a7eacdf4c9b3047ecc2a8e4d8bb7315d9861458ff18e1ce83ed31c63ddaedbc6e82dc4940ac5887de3f0b275485e0f57642a75ac2a59c", 0xac}, {&(0x7f0000004bc0)="0f89f79a06020931e139cca0fa407b776c466683ee314046f65f237b60713d6fdd22197438b5e3de3d20680aa21fca3badb95f0efb90a4493d39b7d10b36f820703f546fbf0777c3786365c78e2619a85a479c87485b81b0808cb3df1b32ae98454fb48d600eedff29bf17530d9d5910b3b9fb99ff8b", 0x76}, {&(0x7f0000004c40)="8ba59995de977274c1", 0x9}], 0x3, &(0x7f0000004cc0), 0x0, 0x4011}], 0x7, 0x4008080) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x10000000, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8], 0x20}}, 0x0) 18:43:09 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf73, 0x0, 0x0) 18:43:09 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x4, 0x0) [ 960.323712][T27509] __nla_validate_parse: 1 callbacks suppressed [ 960.323725][T27509] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 18:43:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x8100, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:09 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:43:09 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf7d, 0x0, 0x0) 18:43:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x8847, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 960.494299][T27509] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 960.640524][T10789] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 960.890569][T10789] usb 6-1: Using ep0 maxpacket: 8 [ 961.011780][T10789] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 961.022482][T10789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.033930][T10789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 961.044096][T10789] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 961.057186][T10789] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 961.066424][T10789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.076746][T10789] usb 6-1: config 0 descriptor?? [ 961.561155][T10789] hid-generic 0003:2505:0220.0017: unknown main item tag 0x0 [ 961.568591][T10789] hid-generic 0003:2505:0220.0017: unknown main item tag 0x0 [ 961.576567][T10789] hid-generic 0003:2505:0220.0017: hidraw0: USB HID v0.00 Device [HID 2505:0220] on usb-dummy_hcd.5-1/input0 [ 961.764048][T10789] usb 6-1: USB disconnect, device number 83 18:43:11 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0x0, "fff8fac6"}]}}, 0x0}, 0x0) 18:43:11 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x5, 0x0) 18:43:11 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf7f, 0x0, 0x0) 18:43:11 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:43:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x8848, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8940, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_DELCHAIN={0x5c, 0x5, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x48, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x77e1287d}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7391b22a}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_0\x00'}]}]}, @NFT_MSG_NEWSETELEM={0x6ce4, 0xc, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6ca8, 0x3, 0x0, 0x1, [{0x2428, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY_END={0x102c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "578ecefdda4ae1524a195358a2ca70c36ef41cc2dfe6ecfcbbb33b3b63a3931547b94508edd034920c8c149b0db937130f1494a21963769aaf3f6c86eb7ad8381d83b4a0a52ba02c8eee38b7e86f83e643dbe401af7d35d13a4e680cb4f49da9f8c04919f850a4acb01de1ffeb37be4e301657d18654c5bc9edcb57d8b496acd7b9d644e7a8ccb7df67d35ad5594aea44a8486d19f645a784fc1af4621354164f003c402781c85c222989e11e7186041c2276a20a80d5a05c151f1c721d0d40a20ead1b1e8a0eb582da6433706ef52ca8e91ebba6f4e6998b2c4f4e51cedb10ea7e77e6eb4b26384c26605ef6b24e4f2d6d48b6e51e0c2d069e1626367671a11fd1c7510ca1503770100538814caefd464e50247dd6645d5f9e6a97ca345df96edb64234aaa32855a9d2fe2e88c1bdb4707305cd2709af3d5756bc6b3a885577ffbf91205c89356c7bf1b1477d5ba8905e5b671c90e6af8fd3445fa1851717a77d521d84199014affb275dac1792abd22adcf65d58b559162708bc44ddb98f082f31f1dc28a1db4ebd4f19553bd0aee86af0cad329479329ff2f113cd30031191b6a80d7be254ce44a8abf8b36d93fb5794d18f5e017caebb7129216307fd735c2c1ce9d0d08d282e40d98b44ebcf50792edec99384b9f8050fd3438fbe50bdae75d28b529ab36c0566c2fb5e1423ac33ae6586c6a45f877eb809e315bffc48f6dbad0f0cb004b482c3cd3b7cd754e50f6cd13d05492625732efa1b2897bc88530ac783e45da60bf2e3330118d47c1df424ffcd389e7db140d9be2fddc7326f0c1d6cf92a5f222f667ccd1b60b6c400de139a927d0c456d119bc91f4e962e9001f2c5941667238faa9279d016cf5da859b9a14fc6b058dd0623763c150aba7f38c6fe5e42e8d4866a23ba4c9fe15cd9f1dc4d40a409f3b8b8d2ad604cf1309cc6c1e9070ffc974221838e6faab57e774f5ff6c2f54f4f78733b396747fd3823775c367114585c37a0999117e4defcd084b199255f1d2c4705e998a23feb98971a4f63b672603c996fd86aa89ccaa8a555e6d2fc81a8323868205b351ea23a72ac6fee8d189ef081b108a918649bc4087b7d7db79fd26050d9a1d04f487a27f6f3bc77ffc7140ea8ffe7627a7a2dc4556161c66e88daf72128423194dff3e5669c6c0bdb185ec6b9e7a128a4e22c066fcc54d45207267c38bd8ca2f391d267e3d2a574a733dd33c58d26c45a6bed9364ee5217437a8ac4732e052a340474b8bc83bdecebf9f935b37a26065ec830e5f1766923d0deedeca9fbc5ea7de52538dcc5eaee43194750cb67d3e71536078a46827d33b2156ae59476678da6b11c3ff65c6128485c069a3f2af905fae062ba6ad146c20bfc79e9beb82c5ddef38ddf8fd3a3cf6bbf6cd2082bf77efc5f3aca2f4616fca64afb92dc9c50fc27e8afdc4a5c0de44eeed67686d114291ea2a29d82178def4c9e853dbbf2da2a0c20521f102488675e881cfa8ea1a32d253b17da9125c2860b84711c03b8c32af228cadb62cb43fd28f93c470c97fb4d9fa903a02904f1f2d28f77d63571e1944e64de750d3b7963d1121beb0efc8ac81fcae6c77740b3d289e059f2b6f48731fcf21865e67fa5e5fba11086c766611643087092acd1738b157a67ba768d2855e415fa9ff21ee3524e2ff10d5326b8d15b34a92616e0608d5b4f5eb4625730e325bb54a78c3958115a1938fa9036e037a4661ec489bffdb0fef8b4d3906291252b059ae1e321cf9514f4d0f043e27268edb04057c15c10f47365a3159aeac957cbfd9fd780e12f2dfc92e23db4601ac096ed67172b9a52c0e98e3e4ee9b20a7b611bead614ee4dff0394faccde4583f20eeb2d3293c1bdbdb67bb46400684a555d10c3aee4e09989086bc11a7bec137bc7bcd17021599e307ed12b64bf2cf3305c31e3765c88f38f0b617ff9974e1b09f8ea38d6e08aa920f3b3727cb4a0dcca1099e2edbb23c8b3999dfef2e29e56f1ac2ac67dd75846046ed69841bf0997f5f646edd72f18ed4ea36431219227a5dd38002c6a5c46e3456974ac29cadfc9bc732d9c8d08bc6507b128832431992b8b5f134ec985de409b8bd4ddbc189551143c192ecb58479ce9aaf83e685dc678fffd5beb9c685c55a063f2d18aec19dce04e02f91d1dbc3a640dbac67e8d6ec1ee8dc377e65a0e24d133678886b42bfdc171b31d5d739cc2ab1ce0187d79d2c8055bd3c645a75bb059fb7d7ea9750a9362e59cbaad163791297d135dcc9ff7d736a497eae2e4fbdd3fc3f40eadb6cce84b6467991bcc2f3ddd1f5547b245c34601d2fedf759dda78302d809f3bfc6168272a4b09490b68e1f7b910bdf11e57ce01f5286484037db9d4481aa9f2bbb5c9492a76f639491b456efd9b1d94d9ba4737aef9e706ec210bbfce1b4a769383bbf44216752995c5aab457855fab264597d97759e503ddcc9eeef80b1b3a18c8cb288d778935492bb44c3cac6b951279bb942cbcabcbaccbd2a25412b2b4e5761c5d15f7ebedab4bbe93d064f024a1a4eb2824f729100d7e3985b35c7f38c5be41f799e26af41fa21f7efa7c6218bda45392278087a70d615dc193c1c3b8d01b07e31ae6b5b97776e0c54edc6dc29bf773712325e48bf9273c148f2038e8a7695f9334446f6bd41429d9d2b631c30dd18d7f28db8eb4b62ee0276b5da43164503eb71dbdd4e463dbc97bc5184d7d7180537702478d9d1ac926a8636d84be6968ad2b12c8d74964ad06b240093525eecf218105fbe71782e75bc440290fccb1ccfaa3698270339fdfa007114e14d1b4ae8db4ee7aed65b43ef6ae77c9f2144bf31fa8636a47a037a670388ce70e0dc87fca674343e5508d8f302312c4ee2aaeba6fa1db1a83dae49a1a7616953454dc9b53546d325238248e8118187c8ebb047b615e55b17431dc7285fabe3680a0c1f149a11ae8abf0d2603dab43d8287abe0eb89fbb565bdffe9a4b08c9d22a117f590af53f06831e05cd1754b8205759dc68e7b1842c42f248239b39df559eb6477947dd66bc2ab979f8f55d415b3cf5ef0b930f324628f25178c9fd0783cb1e142c658a8ae4037c401435c4f943c1c27814f34903ccf493d4bbe293bbc13a14b6309f51b2fdbbcc4531dccab65eb6ebe2c71a95f89f17b346c0b47b2997db558007dedda248f80e0e181fdd97b08a11432cc5b7ffe7c3f8de9636bfcf35cb107c1a0504d0d7ee4b2de17ab85336e9b9b391c8e4de497d3e7bd2fe3dbe3069b7d4f5e20eabc2216ffbe049e891611bc7d8989f956ae26be80ddf42d89d7827a5009c44e8b84ac551fe6b517df5d96099698d19c718941de52c96bc6a47af6d3af479a2e54c6712089bc14caf1b7c871f979bb610ed1ae42e69b460e7b9b845090ec7910cb8bd3c507071b94e964e8e64749970d1bfd1b04a6b9967efc9a363fa9a429dca9fb9fd3663af4a6dcedb3cab391c0f7071409d7ae320e9849157165db9eb86166ee858edcb00c071c3f4a9e17e05d3d3a622698fd06f1baf80e811c4bd704633618753cdd236e82fc8ddc94fa5cebeec8b773d5be9d793e4e5e52dfb91a6a3d80f8d74deb1f53eaa1d43e42479293527cda82142f82493cac1885cd888e512cee0b560f015c7a73e66cdfd1b84df995b911bf5b14fabf76b26a632c076664d7e1058481017048dcaa28f8c73a81044b842ffeb0cf87ea3de6503d7390923f46d1b0df49b745cb9df3f25ca1bf5642b7dffd031f692b64763444fc153aaeae013433f5308bcfadc7964487349746025e6ce2cef08c2f66c777516ef4055be3a8bba6bc282ba9934bbc7e22e220952d24910fb89ebd0bea8043fe8ecbbf434114e76f46e93380a8591a4f8b0f2b691ad1a32b1ea9111564a9fc752aae15ab5e33a8fd0ebe388d5cc5d0acdedf0c0408f78899a89b5469c23ffa383fbdd6c0b5949c08ee37d701fac8d28a7b7a60094efa794f411598a9498fa6b5768aa65088af82589647684c4ef4a1988744f9f937b1b6df878a7c0da32d0c632138d2353ad3b94992a03d95f799f1ba0c785fd4c1e4d55d44126b65db44cf07daff88dbd251590314b08ee7336f7054ecd9acac218c2b6983c607e628a780f98edaf01d772c74011402de6ec9ee8c46017a9ec3a805b05bf1760e80fc379e18bed73e5c958de21838eed7414646240e5a058dd7f85432fc850ef1967037c5b252d129bac382eb022f425bd2d6dc380b7088447aa44fe595b22c85798f23f59f9f1bfba47ae55c77f025b02da94d0de45b71f7adb97a30c301b477ce0c595f07eb878435e0b1f2276c0ed548109f2cae03f24f97b8bca8a6e09d6ae59a44dd44f05719196bb5e9fede1dc6a5b065cef1538d6a038ec212a9f0944e5907470322b4d31bfe5d6ec92b1c64adea8f9fbae9f81b94bd24028a2c1f503eb6d346f7449ac693c91142dcadab2f31bf507d190e4a21921c2d4e2bdb184332d823e088f6217567fed9109881788422815a0f1360cb4627e9b3303e335d28fd9ee47c59f07209e1039b890a35dcf3e6565ca75f97dff95843a819bce1c80875c17f2c976282eb98cc1eca0511463c53bd34632a225411286b72a27fee22996dc0480a213421aa36f37cd983dbc63efc334125677cd43762fd03e6c82a677c5517f4219e7cd961cddb567520eceb2c5e0b1ac8d781e90b1cb15a71c0abc62a1ac0c9539dbb7ac33590ac9f2cef90131e123fb49369531cc133eb0ee008a7ef322a4eaddbf99f6839c83736bf20672821aa1fd8f3e102c0d823f5e60772c670ce70298ad8f9a7cfdc4a51c10b7964f652387ea6d172bffbcfe1c48b911dc244d97b4ff6328f98f0711accafa7c222819081cdc578103a1b6f9fb08fef200cf591c6ae667234999d7c61bc6c79d0d49abdf437d6376569d2dda2e770e74f474759c19a2cae399668d42a94011dd19157efa930f081833b2f97ba59493388d84d227c64b45db8fc442f9f98e6a494f1010737aed55022afc06edff82d347551d4bef86adf3e26531294f78be6ff00193ebe9c5e1930f9826738c52f8872a5fbddc3ce43df7b2a5313c5df344574f0ed22fcf09c015f0d43bf3edae09235df1c158dad36345433844ec03b194785d12e581cdc785c92376b9716f34367fac1d5dff72e037edfdf6886f6b8d5e80d74819cb9de0f5539dcebf6669407fa67eb17cedcec7c5ceac1c9d8153a97ae8a703a89e98ae11de7851d03f400ddde58975671da97c8d1e82de35619cc0d7aba0b84badf216668506b502e5ba064479999211250913b2e1bd22bfc9befe5c31d937f7907a93eb33af85b29840279c0dc3614c32f1389b9e6a3f9a32d71caf2caac0dfbcf7c8b781528ff242de2d0d61901bcee9fecb307c5c32b90c3096903621169382b1ba0ca761d20ac563c1148c7c7088eff3ec9f57bb2e41b345690349ab8e24f9bf7326d02cf3c7c7e3882b43497895be245fbbd3681b87ab2bab3636dfc1d1848ced39eb1286ae74cc421e171ed4e837011fe17d96c9838726c686354e5ee33ea11f6db00c8ea8538512a9593d49f9b5c8232ad11b39f2187123433eaf7ff35e01ba110c53ddd8a0b004977b6325f6db33837bc1787ee56cc2c369dffc0c0781cf96fbcb2ebedbb7a0fb315ec817c532a09ab3f62f73a2d78ad6270c0fe8f734bcf370ca1dacdfadd5f7a77e1dfd758f556a07143d2e9cd4350b22083ffb7a545fdd902c920be6842de00ba12d7a19ec17ee3feadaec67b85ea4f4aa6ee9c7ae3d6c3eb6d2e960933ab7a5153aa58c2f9c5"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x174, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xa6, 0x1, "f4da094fc3b1012ef1720654dcb0646d979f8681f69c8cf98491bb5472ddfb67a46a13060d8ce31750f5434a8c9ec62447cf49e48b7c4a2b95caf3821e04490f93305ed49fb8a71f784f9b1b72e4744ff7c08a6e1d35323a5fe41b4eeea0c17fa7c95bd8cc6c5fc82c21cd6bb2e335740d05e71c68c1e3d67488f660d5decd212f0bb8da70923c0ecec12fac76d8355058bac6979180c028e73469fedc211cea31e9"}, @NFTA_DATA_VALUE={0x22, 0x1, "05debd982b31f8186e97e4d223606c387981475e360af850ab1a652e1c4f"}, @NFTA_DATA_VALUE={0x76, 0x1, "5a0feda0816b6fca6dd6815778c1b72623414eeded38280414387e4699e0100c760531c3af4bf942f7fcf7b17d242fe5b1913bef2071e8eb192b4be8c3a5e1f57808278ed78f93eb9e5ea9339cf44142d05ae8e721cb3710ddd9e187b7bb1374ce2598afcb1266311e565ab7b5021dae31d8"}]}, @NFTA_SET_ELEM_KEY_END={0x4c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x46, 0x1, "6f368cbb9170b272e8164c078ac99dfb791886a1aa369ee58a952a097ab864e87098bb6f75b3f6b392c15b0ead8701d9f15fabf6bee47fecc43747891cfa1b938b0f"}]}, @NFTA_SET_ELEM_USERDATA={0x7c, 0x6, 0x1, 0x0, "538c8bacca81ac1d67f1e7e866443c42ebbc896b67492ca42b54ce7e5af2e7733b4cbc422aa6b88b930891738f4f77bb2b18b60ca9bc54312b7a5baa712f1a1cd3624ce5c4b335acda9dedee5b934210692f546556266f7ea1a92b9e379426c47ef70f4132060fa615a9b0ab1402f55204f0c13f008131b4"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY_END={0x1188, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc7, 0x1, "724e96c85194019af06a5f55c3c2f354aeed71070e69f1d0a2706afcd497a1549c28d08097a4d1370d300908c87a0758ad0fb00d08e844e8a487c9b87853cb0a5db933658d7c37dafe09b8bb1002cdf4370617cd3e6b0c8bc696743df6a4c40a986add5860c698cfe7f1c4d8f61c3beb49bce32b4e36a9c2c4d4488fe5870e2eea00b19e341c026b30faac04fb669d1e01dc40dea9f1b35a771df6e85083971a45edd37648b6cbb4df9b15e864f8126b6ec97d9f78776be07d0eef2a94a01c290ff99b"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "244c9fbe945d871b5b27b18a161420ef9f3ad80ec21e43f8d419b270293bc048df68bfd3d928938468e757ef13468e21aeb7d360ef1733c15f6f7072c2d8177be81796fdda5e3f366e060920b704dde4a41759cdeb7fcb91e6c83305e2862cf760b8eae9ffd07ff0d35e13ef708c5e5a49441285480bf42067d639a83c54af51459e4f20ed3999767ce964a71e2bf80918922f311aa86ac7f8b72541a87ada13cb6dc4aca4e9e50bcd11bd521d8bff1b13c9c05ab323864b690af5fa98a87d14ec3ec9377a26693e1bbcd53082df58e83e0790f8e387080911d961679ceedac3a3082952486a63b0bef5fd772a82b6a386d3cb19fd5ab981a25c173abd3a9c5310c89d6bf8548be563168f1a95bf85c66450a06d3cee506f8f97746dcc41bbd87a33436981526ebbb40032697dd3f8147a0be31a7d4b57ada03b49a4d5d8f9c4cd8954c14e4aab75d1c89fc5d819fe87f98ac1c29b12f266fbecfd1962e90aec8bb9c10979ff81c1e3ebb9f545e3075eac3b4166621e0a49f8b7b06f69a4c9bb1dbb92a94d9a9ff6ba584098fe0017a3a6f48cc027fca28a461e59cfa3f2c3995eb4ba00b2b14c3cfe05e72f4a71f5e16c797c74baacd229f37299870a96dfcb257082f3c0409fbe266813aeb6a8ab4b082344e105b99175cae153496d78831df3d7716d51444da0d8f8cb2640920b16afedc50c7e96a00d7382ca45070f0ac4d270d47cb73276bcecd357c43eb9a0397212a4de4aa1463e3fdb348603e6421de1a93d74e484a51b236f3289563139cd44e9fcc109f9c9da9b310f21931173143e89057fa5337560384e4cb9bf7bcb5a7052994307f76bd74962f2f70172d923d39848551f232e4e8eac77142e82d8aa2763c78328bdf856da955ce230052ce7c66b0f1a8ef5a2723150a7c4b5f7c57773f11c81c1805bff662bca0370157b00ba3cf1661f67321190503e10d381d768b1b782a57f7e423204320bcab67669559a56627c45399da68807610a1369f0280f38f6cbffb56007945f10500365faf0ea5744321a9e2f0e5f2f89717565829baf23088c15bc0b4558fe3a74a01ba6d683739a69f664a26e1e31d5e8d0062a1d8d92cb87a03e7de0c7e1ceef6dbccd8d783b4a1f04b4e061fb150cb6655ccf812472a221fbec8eb6f485d7ce7730f5ddd66d3c452c6daa88d098a939a449b5f9e80aa302d95fb418bd508909f35bcfdc220ebd929892dccfeed87d88b687393e73740685447092bee6021a4355e95b53dd6acd49d59778ac560dffd9b5281aa6f3aa868c66e5a243ae7af47c9cafbc9301c8b26acb6df62cc805f0a21c6f9c748b7bff8d7912cd2dfe8e69a1f9de6d622172c1fca5013f261dbe2750adbed41691dbbdc49b4f83965e3877cbaedc240de3a2e143659fab1b5fd5f80e501b09a0e477186b2ebd29762cb8fe2d6439ffe0506a23ba3e62f80a4b402e84e595fc134fffe85416c88d95e0b7b8e07eafd2508e10868bc740fca448da9084981808d5b0bc1d4fd8962aaa434e5e792fe979c25896e0f465498d66afbfab17618246a4cb9b7abadccd7a1d0b9adeb048ae0e886abc875b34501ba0eb1415c8c2949541efc6ec0833ded11caa225f806ef9a51ae8b0e8ea0ae98bb62d188b70758fb79f3cda2cd6439e7114de662f92eb293d592ff9292cc0db46db92fa33b3f868092ce59b0bb96137443f8fbafdf215f6926f0cd3d11eb0a7615bda75a39723d28994c6e9f5e9b99d581abc79a15856d9a69b82a0f64bba3dc2b4e605fc2cc2745497fe0023a3c4c09e124629d86923cb1bc3ddd6dd38d361cfbac76bc9d2ae3ba1b098d310a3398094fd3c570ae4fb4feb9769b27c2e8eb36f169d42c1cb496ed8e18884db854028489104592b93e99208f32df4ef38ed08a489d9ccbfd4dfb18429e66122f5b0718fe565ea334b320759c9186505701e7e3b984ee083afb773cc9b1a35442799b230e282ba0482858f210e7d39e5f0bc1440cc32b7d8c4dd3d7ac98d8bd2e4d798a0803b04e703a06a6c8d0d791f5844ed2642ad879fd4dca0232663d3fb028b74f3042b1b03270fc7442c3ba32da34c3e0632170c43b47a4e3406e41359158f4365475ef4b9f8817e2567ff9432ca81324aaf27bb535681717f9a45082d5c315d81702edb8298dc7e07565fb16aef10baec661737ccf5d8c040a63fdc63574ba18ecd49310cc3b11b9ec3225acfb5a578a7b2bc63a8b7a2cf657c722777177d114acd4e140d70a86e7cbc836ac84024ec44a766fc677baef332ed6a46601df6177fd042d8f9240edf92d5930a1c6057a97bda25936f19e12f1ba9c900ba1b39ac141c5006c0015f89c35baba1c00c68955679bd123e9c9b8e65d2cb9b88be86e6be831a913007ad5600d2606d7f372e64ff5040e61c4886e70e38298733fb25be0a32dd8b37e782ea298de3eb2e3052a615df1940e3c6bba50933f227ab61811d5bb155768cb1ad1f691db6cdfd63ff1bf99360ea642e87381d62412b6b7569f3462915574e3e80becbaf936e34ed387838136b628f7a01e6abedf16b6bcc2755f97b21152ae2eb6b304c7a10fb14feacfd6842ecc82f953ab065ad18448853fd93632b5dbbff91496be71d6972315540c631d24b41d0e4fd057bbca70d8c00c3fe8bd13f668b47cab60fc3487e337ec5d1473c0baba860af8f2ba8a4ad55e1eca7b83230776a68ccc6855b462e49cfa9c2b15f12d20970376a4be086270135b0275bd2e8a6282ea48193c7bad376c72b709750da6510b9327fe734836330a9bd4a643b74324e50dfb0279e2ef8527a61575912603aee5a4f8643c22712c7e2838997991ec36956ddb3866cd8186875c2e98d682d3b69ee28e9f6a889b1d4fc9f9b349747ed0599f4c62adb6183af639035f3b0b42b2adfa3e42e828e70bf622c7d642f6f899e424512e6901f0eb70b2d88118864c9a4301f71145fd4268a5764f45b5cfbe44aadbba1aff9e0e3c5bb9eacbb1e7eb43d7010e3b0f04ac6a48ed6b1f40c54e41e4fec53652c26961d47ed2916c29e343e4c8771f6ec279fc9d40d921a7848ce5cc3fe73b285775953cd889e631bdae81a3ace4839acd35dac5a197611c56c827b77ecf3eeb6a8c74bed79588d583a64541b6191ecd928d8c98d47fcb2704afe73ef4c0813f150e4bbd9259870f7aa8d137e6c897a27584932ff8e7ea760d36299771daa31e583347b5d39fc47aad8ba5ef7bbaf7e22f5979f4f3445041e9934e9c0effa496427c1e039fbf0dc1bb39074eca72cefb20f5ca96d6ec2127ee89cae150831c819b0bec366770c96a5133545444b79050e3c818fd567dfdd88151577c39a3c28e25d3725a651f75445c12a6c83cb1ee3db64564cb801c7c2126cbc34fb3cc0761f2438fe1cc7ea1c579bcfe504fad945d097f3be7341694b2bed801faa7cd4eb07e73b9e76d276d50741776497746420cac900ad5061eccac0d7da7963a5b565a21e04b3ed214a495c073c66787d67af95c335c80fec0429cdbec6ab1fd2715434575b568f5f8e38be1bf25e237f77b0b79fa5c6a780ddcaa06f15f6df44f1e5c056a218dbc23fddb933dcd2d1e2698ab80c84692b8495cf2f5000e903784e7739f56b5fcabfcb96de84a9ed1c40d62ecdc7576a9d83602b504d02e1539dceca1eab62d60bc5c7d573b9d6f6fd9b4cf3ef2c78a146f00ea6b5687c8b23f8d2e6de26a4f752bff4470ac47f049fac91e5b1943133c541868f9b33c6c36149f6f9445e13b9ddedf477763d979bd8e06b42048fe49a2b992b198ce13a112b17e16964df4ffeebfb53f1aff591b13f1b9134bf2d7292036a2dd3d1eb8b251f39245d00ae8ebb4cfd1c0a4875144b8a4755a5b069c393899e15569e41258c53cbe394d62ce17db53802c7c801fd123390c85d7bd4213064227a07808d77b65d9731fd2811f2734f45e4f9a5888a4fc4287e9db81e02fc3252d305493cae54bec4d01f337f5872e38412ed0994a51b4b9465279f11bff9a6c6723ce0ddf899392454c77fb182318f36f358d6de61804ddd17f62368de6165896d27a8d5534e14a7cd317724a8d6db4337b97e70c77347d277f4db76c5f42b97c313e13fae3ff49af6f50d72746b2fb51ea1432ca7b26b8d39a909a1088127a000736012ebada409a884f3c3534b113730d02cc1267e5da41cefa5e56e2465cbd8dc07c56c554b7c437391f75318e3fabe7294fb580ef13d1cffc257fa47bd13bf2e7705a910874abd74cae867df5a73bb6df26e2629872c10b42bc9ea54be1f832eb44820a78f077bd045b7729702daf78148f8f10f2ac1b7fcc729bf43d43b0fa5d08002eef47a8d21bcbcd1ef1d7c9c300d86a326d2267465e36847675ee7aedfabcf40c4edbce9997ffb674e5835fe3057d23b1c18b1d50c6724772ab26c0194c7ebd440c53ec2d84cc581ba23a566265a85a724307e32853dfb8ed45a701267097e59cbec9649b0ea47d590b3f72ea2988b2dca80cac8c3bd64dc12ee8fe16eef450dfb4f3a5858546b771347ee75742d3609e948f0fd98b16c649a3c20dee539a84d4a76308afb164adcc1e45a12e3a086ca0b02dd61f507c32b185a6a8a5aa55abfb958e737615ed610d835b18b356c0ea182f1f28dc204ae829379868d474e2c7f5140689575937bc8d6501211332346fa60c3203b3bfdb849760130adc86dd31e11484e1fb8aa56e50b40f046581ae5cb8c354a1f3d8a7f505b8e33d33a723212f6f2b5ba4b92c5e5fda061af76e0a8e17355b61a656ea02bcc71d23c7fbdcf8999b34aaefe1d5997c76f9665a71d523a996843dc7af64fc2b30cf7abb06309d966e9019e6504966e71586c5d1cfbaf9aa55f51bee9c1a9417c5625330e7f902467efd492477540966c48e2e7b74d50c65bd867307cc033ccdd9cb4161e4980851e91152274bd5a4240dd74d95c55011c951ced246671db3f0858a76ef4224ec5bea5f8d36e677b2e5ace780bcd864d0d2a4791914102665738793525eb4858bb458c9977818558fa93cbaa57ba0975abddf65d583b5b02a02ea128ee18f9909c46dc0694cd3251d02d70c0a242c4c5e20f4f654de20fa59da21fff1ebd5dc4f652d7f3bfe926f25faacf4aa1c6a8985c99220269e6157c1aa41d248f63be0150707bd086601ce1372ea668548477afdfb35b6b467528dd9c6c027f3c36271f412f13f6649837c73fe030a928b8360630ac8d5e6682ce4cfdcc58064c08ec3b73886149eb3de429f89ab255568ae1bbac3c18c5e0f96ced6a48d84977afa221918b999a3f7d4241edf08203da71a3f1a4b69cc39b5f704b2e9cb0f0dbe3dbafcc082b669e0fae466cf2ff864a067f4f1945896ebb90d3448d1deab0e7fb1394485d649fe9e6ac7a7a9f27efaa5222524104368a3229edeaf236b4a990906257bf210d80586e8638c38488b40c8e9ec39b9e233dfc9c905e6a2a97fb1a489d837f3af787c6abb8207ed254ab358bccff47e74565b5c498a885d9315c91eff228ea9d02b877fc62dd526ab62e57b3aab9611391b70c84186657395f5431c15895c027017a24f1cb0de9dc5c48d8561cf2ac777a3334ee188723cd1404e39aea49fd226148a9f947b4499d2d077c2cb1ceafc83f7cae59de10f5696deed4135a6a556087c7c4fe5304b4d9df3ef09402ddbbfacf751536cd04f4fae72db33e7b7d578eb73b29a0f6debc86090d0dd79275542c5aea4f5fb8f0c3c3183295ca97a3b7091a1cb630d069b0d6ffd267344cd9ef20c4951baa19795716533d0df3d2a770d21a58ffef"}, @NFTA_DATA_VALUE={0x91, 0x1, "05e6927fecdc0f32e7c94ac5401b2cf7a82edd64824196f6ac6317beb939a3a3c8a195aaadc6cc88c8c8121058f70879967ee38745d381bce63a1c933c508388169b649d05e0fb5af4d3fe020bf393a447504346ff3d1a26843fd6e894c8f90296f5863ba50f8d4f5c349669af08dc7b06361b1245836a391c5ae17732f217b5ca8c3247e31f25ca2ebe756158"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x4}]}]}, {0x29ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x74, 0x6, 0x1, 0x0, "b7591b7518b4440ccef0340e4cfe0ce525a30fe5ea45ab29e5ec1ebdf8ecf3ab158d5516f91306feb67545273388b18a75186fbd778544e0cfcefb16231d3ab2891f77820956dd6589bb04135deb066ad9192eafb0e5775e0c96b5b86f3ab1ccdac18670e1955e881843ad419610b6b8"}, @NFTA_SET_ELEM_KEY={0x308, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xae, 0x1, "0bb052877fa7a5dba3e98b9fdc35de081265b66e75428caf7fe6b2ccb9d0248c7b5db4e5d3250fc9f0fa141879f324bf136153c87a0bc18694a79f33e614dfe4227b16c2149d40132cc3134a337905759c9754fb1554143b03b41206d23562fa8ae81ffeb5026651634ea9a4bdb51de4e6d89cc7909bc8cb0f95197016f48f16d0e1a64af432914f9ef00482cce283611f2befbf09f9c5cdcc003172910a60bb8601252326d321d9f929"}, @NFTA_DATA_VALUE={0xd1, 0x1, "8a2d951704ac3591d91d0982c8c7c2ce3d32249e06447e1bf763ed8318e1daa4679792f96927d21491c8100c84e611d734ffd03be062e0015106cd6c2a2e3d051547c055ae4ef738d6e8ce5d0357ea8be202920dfa86d379d172384094cb35ffc428668358e9587cdb7550c0ebb525ffcda8816087ef9aa302bdf3a59e6140f7a6d35da368034fdf747efffaabf8e000cf45481d12404bddb28c50cd114b96217b19277ad9d35679b7d08cb5e0de27cc42255f1d0d25ad0c437d4b90e95a7a367c47cf5a1b483fb7d5eb644509"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x6b, 0x1, "8da450e425c01e7f049e0513f1aef414dd181762f2555b538c65059c52968945b1ca06ed68030fefd91c831aeeb9d7394651ff8b7036d47fd65997896ead3d28c0c8f3e0c8690d1c39ec4705a461ecb7b1d55722f23304b842a1f90cc52bffc7710955a100272a"}, @NFTA_DATA_VALUE={0x96, 0x1, "4030afc6d8ac05cec03e89a1939ce19b52f85a16c91baebbd1bcdf4b8e5973bd306da48b16bf4d8d5c8cccde1ad02aa1faeee0900980f8437c86df2ec9f98a802889784c07f5a2d1cda1a7227faffa63426f68eabfe63932f893d5609ad42df2f54904600ee7f694302ca37f2a122fb1e904de382e1ace5e3309477b87193c63fee7c37d9341164947b87a8361f0f31d5deb"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_DATA={0x11c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa8, 0x1, "1cc9b21fb660f5de789c266489a01fcf3321847ae1ed8c34f05bc6412e2c0bbdebf3a2e24f874b09647832d22acfaec78f33d893d424c6310a14c708ac80c34891a17d149c61baa8b173a82da9ab5e7c4128a150ad8b0d9c422b90aa7a8a9c97d2c81cd4944eb23a1bd552a6136f58f1387a9463fbd68980650142cafdb8691e438107baca3850f9917afb8a70b4025b1e0fbeb3e2b3581bc4fa3dd7eae59be765a0068e"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x10b4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x58, 0x1, "c7e05d0b85f7dc3f07ffe37f971190c80ed5bbfb2e0e11cd35f56fe1e8c4b5c192ec45aba35da18f3e844b50216ad0ac8f08ac748306aa3aff6d90d2f66fb8ef2240e8d503569538abdbd76f69148569b3155f92"}, @NFTA_DATA_VALUE={0x17, 0x1, "a04d8e2eb5c184b90999912ced4a71e0900248"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x12, 0x1, "089906f4dc14e218d21237c9fb8d"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_KEY={0x1a0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x92, 0x1, "5a2171a59f9451321f3f4bbef654e95cc00a6528e3127261a7ddb60f958294fbaac040062af68c009916bf88008d375fe6fbfeb479c56475caefd604d1c67fe3737151f2845cd5165398bbf3f928c3db1706da75aae68f52fec903f74a66224fc3dc8bfbafb49f46f40fa06a1fbe57d0a72317ed04cf8d7592738229a822e8d7a0a4b7ba888612b83def4149d7ef"}, @NFTA_DATA_VALUE={0x80, 0x1, "4de96b5ffd6b74577950b7fe3fb87c3d6ee78f29ea1002a15191731a0bd66a27791760257a0d2e3a54e377166e63a542ff087556de98b63c66e53aa84229cbc65f906d3e674bdf0edfaba2e8ce6ca81748a6c8360db1d17571df8e85473fc4ff413c9c58b48a8d66ba4222af19f1ddb833f9b448b4a5b0583fd381cd"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x12fc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x9d, 0x1, "9d53e1a9e07c557565cb69a7922c162a02e72f90e31277589a7e5f4ce03df21da8698837a7f78dc55d8782304c6f5c511a7351b40cf03efb218b354fabe8c5f596c54f656853b41cdd8d0cbef727044fde2b50e19dda211e67d6457f15dbb17883b1c79961314455aa7c1d6535e0ebb962fe0bfb1a1c7d68e88af73f56d99f18485ddc48346633d701283318e2a266a7a6028cfa62ff8c7d88"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x70, 0x1, "b9454f390698bf318737fa5aa6ff8ebc9d62156017451f16ff493b92ce516407139b39f44656e4109cd510e6e157418f7b347e8a8151c124b3a57098c1a6bd130a4cdeea26a87f9b5909deed6596b45967ad2431bc75e1312be09b0b85da12cdbbd32195bba6f6005e314c07"}, @NFTA_DATA_VALUE={0x52, 0x1, "c2ea593becc3b0e993c3a228fc7eb5049f222532dab894fe0fb36a7179c01a4982915f5126e420a3c12b02abb7be233bb4e705cd7d547da9b8798d7b40d14f6cc746c810ee02c47b7e4087e632fe"}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xee, 0x1, "7666a0f310c20215ed4381fbe1e264e1486d457fe0b57a35d2b930df080bcbb61296dd639d3d98b938deefc74f09ec0512a02af3e135646d56efb0eac1f0a52591e038e3ced3f5c95bc76e2eeb2fc340c3384a7d1a380d16daf2a25c9e01d0d751a721b082398364a3feef1fab6c65346d796b29399293b7a34eefd61373f209641808132ac1bc818919cb2579f99af384498740b9d4f80f7e441cd7d8b70b5ac9558c619ea0912a4cd13725e7a9bfe37c74aad1b562e41fe1466f3ae3016e9be8f06e69a55415f6b0f3869046edb84789393e17c108a60cf65e4973dbb7b06b4f090901adee59539663"}]}]}, {0x1950, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x254, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xae, 0x1, "1770def6e6abef13f747f9233ea9f561e1fd1a87323c6f4c74719b0e2c406afd783bc051ba827c2aa54a8db347e95236fbec48c1ab71735c1523d8c69dca15419dd175dddbf02f5e7734126c2fd92cec0ef9da6303ad991d8e4df2281e0dfb621bf9f666e689694051f5e8df2f99255cf909a1a6da939e28b5af354cbb2ec9ba870f8bf5bb53478cae09e65db71d15096572a27c840cb4b0212c125f09ace22909b4242e58e6ff8a38a2"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "955633b11ca14a76fe1f784d3d5acd0a202476c511c4e56e246e44773b298aac1b8f55a123b902f95960449a055d1d4369179ce3b31606c82d3d62d55e2013b71906c3f81a94d90acb84d032c6aa981a3559752633d646f5a482549116fac1db7b777da1015caf2a8a031f01127e21a80aabc773c637c6ebe433eb00bfe1d60e43d18c667e9f938135b541df0b409f7edc6f546b36aebe3941770de63d0da25f4b2b1aed23ffbd825db42a33fb3fe316dad8cac7d2d785d0d69d5a656bdf8cd812ac7190a63506184c73e47566a8a94f5e"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_KEY_END={0x88, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x77, 0x6, 0x1, 0x0, "7aa468955b47f1782113841d87ad9c66cbd59abe1de5edbc58dedfe93df9b604791f2c3a85101fdd1cc90e1af4ee1181fd94b43840bac62ce2da2d19f4503522a38e9d87dd5bd9fc2dbc95ecc12151d9b1c862eedc2774c9e78dd961b081de605a4b57385403f4cd9ff2d067aec83957feec1f"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x348, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1d, 0x1, "de7dfb29d45d0e303092340dd879bfc1ad8fe3b22d882cec9c"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xe5, 0x1, "183bf674fcd9d5f492681ee071d373cdb69ce0780a527f2d35f527302eaf8815b431ac20a50f49c9986e05fba8eb5faadb973addb9793bd9c0e6305a557a86223de7d7eae94e1ac6239a3ab01137fe09fa8734642069e6e9c3fb5caf8b0713531c844f2f08217eb8630646701e468e72750fa627249b84803d8e9320c9483a5682558f81a6bbbede165e411c0032fbb4e149bfce2664b984af408f574cef8f18387e66684eaf325fcd045af0512c00ddb2c374d47e835d7be23400bdd6172988afb8e039f9baebab6f8a0d928c21ccf4a7337f404b3e60185051c6ad7599b68742"}, @NFTA_DATA_VALUE={0x66, 0x1, "a913cb582c8713b5ff36d40a36dbf8eb8415d26e544bdb651cc87eee4c3b937a5431b6cf7e686d32958436ce0df42603a2ed2b4e48a57228687cdbb10ac230bfc070e923808547f9010acf52cf175119ec31ff3cd488cb1bb7e37a5a01832e097b84"}, @NFTA_DATA_VERDICT={0x74, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x84, 0x1, "9ea2ca895c6bc0fb126b43f27e6abafeaabb5a15df314a2cf0a29066a9b7194dd9ed66c799c2e75e4fc2d211ee331ed52a3cc06820b642502f611946021e7d46a2c43082a3d86fd923725a8246cde055957d33815b59ac33968ecdf1a17b578d5dc1b9c3b85f368244da45d8ce273fefe5311da4734dcfe5cbec0fb94fb9913f"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x10, 0x1, "4ed124f09b1e524c8da52ce8"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x1294, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc6, 0x1, "40282c5f09db5973a62e3eec7c44ede2e786f1e39ef9375d992208f7ad66b69ba5357c528314492a9124b5961a8482d5b7a98ec3f4d87c4880fa5f506f94c09908464eb79f293c6d416abbcaa50712ab0a36ffb3eb79495ab0fd3bdad1a45494ab9f13966c6402e424ad3a3cc3ab48f443790c1dbfdeee2c7053963fa29949cd036b435df78dcdef3a2e6dc9ef174722731b5502fa9c93bf88635f201ec589ce22ff722cced6aaf8a3427c74db2f16de4478cfd89ed3ce46572b7569e8c39b586504"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xc6, 0x1, "c0a6accbf503651a5094264e38dfc581678d2c5cdbb0655a78dccad56b02dc21ee81c60927ca39e192e5540d506aac3c1aa92e8e255192b0947b53f73cd6f0e450cdad9740c2f5e4d027b15d5eb27741aacf1c564b9556926cf988f2828fa861642637ec4d5d625160c7ac46d755197ddb39fb8774af8d50f3c4ea622cb21a077a9051763a2bd6ebc9e418c53c99d74234acf70e7f6d938ff60c19e4d9361ec7d8786c6c48e302aff320f9762d87e711a2a28d671fc2c87db4e3ac1b89fbd7ff5227"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xac, 0x1, "ba7c0f428c18986be510d0f679debd9f67e34abce06cc2e19d8c60b2333d4c632e569db73d8028213aa0b122b232cbb228e7f8d40a210360535fa67ff98c53e85ab1c734bdaba4fd4afa19acbe2fcf3fa7aa1cc4e98731a9ed83c2e3514beee1ec6aae002aa27ee3d003d1d105f3443161a163ce3693c7cbdb65eaba8c24d06f4c7136bb9fc1965bbe055b86c7111d3b5e5459dbc917bd052333e7d541ec06ca78744c9c026f5fdd"}]}]}, {0x308, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x9a, 0x6, 0x1, 0x0, "4f7bbde04df3d917c7bf7fc16ed3fc356ce160d859bc3740cb57acb3cf4b5f6daf3d8c5c1f4040b45543e49fc4b7da150058488692b8e1514a101e50db7bdc298b13517f300b4280708bd2b3bc82354833189425daf1f64dce7f633bebe4ce1e6f87a23b814c66f28c54e1a94cebffb770a97de8ff11bc8f12050886ac18e7a502c7d2fd382399427f09ba7e61e0bb9e89976d48f45a"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x1a4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x99, 0x1, "e98f3bd16afdc84cb2117aaf1fbf01b1495ac835846c2d7f9fd251c9dbf9cf2c25c447f5701ea14003e6849379e0deb68104c8c52df775b17bab8cb3f3c68906020b8605b6397c8efeb0f2503e21d743983772fc3f1f9118c1423853dcb5665002b03c1d55c2eb68f9991a487b4ec755107386583529e786e9db69ab32726ba1437597e7119b06877fc008174ec022e8d2daabdd9b"}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0xa8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6b, 0x1, "0713d985c131215b6b40856f5472e7fcd53b21c2fa775a939d09a1a5e472a3845af68edd036bc841ca4a02d8fcc2d3e09e707439a6846c4459e38d6fd96ddf7837311106a86c3eccd81c875df9efa6d2d64af95fbe0a5e44499e09964ddf169ae50318edf928fe"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x1c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1b0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "89d104decd758798580230ed1da9db32b87f59e97e9247b8891d37f7329195a33b5913f8386ade55603c47398eef0327fc1f5cf9998329f6298d9dc9f1fdb5b4569f3b6b47d7396da83beed1a12ab5fc4b92b1869d85ac2eb657bc9d03e6ff317e5f23d34466677123d56b6990ed1c6e63db35fe4f771d57a97e096ebb624a9c90313581d090bd85908a804d1dd6f7c598d2539a53d9dcd1d2829805da21a0c059"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4b, 0x1, "3d8a4206665a0eb65968bcb12eb4ee1ff2ae4b5fc6ea51eef437a918be7abed63d6b3b93b44c33e130690662735ca92414eea0091bf80a78aa6f73a3197dcaad0afec8aa512c18"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x40, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x39, 0x1, "dd7c353fe3335c67acba8f3b9b41130dce33eba04073177bf23f033a74ad705bf9e41f3918825555da7e7a40e91105a5328d94221f"}]}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x401}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6d68}, 0x1, 0x0, 0x0, 0x4000800}, 0x24008010) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x86) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_buf(r3, 0x84, 0xd, &(0x7f0000dcffe8)=""/11, &(0x7f0000000080)=0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x2, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x38}}, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x0, 0x62, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:43:11 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x6, 0x0) 18:43:11 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf81, 0x0, 0x0) 18:43:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x8a00, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:11 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:43:11 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf83, 0x0, 0x0) [ 962.353278][T27597] sctp: [Deprecated]: syz-executor.4 (pid 27597) Use of int in maxseg socket option. [ 962.353278][T27597] Use struct sctp_assoc_value instead 18:43:11 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x7, 0x0) [ 962.650465][ T3589] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 962.940373][ T3589] usb 6-1: Using ep0 maxpacket: 8 [ 963.070382][ T3589] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 963.082196][ T3589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.093552][ T3589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 963.103562][ T3589] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 963.116691][ T3589] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 963.125892][ T3589] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.134593][ T3589] usb 6-1: config 0 descriptor?? [ 963.611055][ T3589] hid-generic 0003:2505:0220.0018: unknown main item tag 0x0 [ 963.618479][ T3589] hid-generic 0003:2505:0220.0018: unknown main item tag 0x0 [ 963.626490][ T3589] hid-generic 0003:2505:0220.0018: hidraw0: USB HID v0.00 Device [HID 2505:0220] on usb-dummy_hcd.5-1/input0 [ 963.811926][ T4812] usb 6-1: USB disconnect, device number 84 18:43:13 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0x0, "fff8fac6"}]}}, 0x0}, 0x0) 18:43:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x9a01, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:13 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:43:13 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x8, 0x0) 18:43:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8800000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000b651d64454832c1033cf19fab6dc09cf629694f0e644af6c959106540c"], 0x138}, 0x1, 0x1400000000000000}, 0x0) 18:43:13 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf8a, 0x0, 0x0) 18:43:13 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x1, 0x7, 0xfc, 0x0, 0x0, 0xfc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xb}, 0x5104, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = gettid() syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="687567653d616c7761797381153a60910314a1a1c7cfc99586640e7a5f9b97ee4be49416befc203c2d5e67a01c720337a348841c913670765cf2a740b46e09f6deb15904f1fe4991241c81caaec8013cb08bd17ffc1e10"]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) chdir(&(0x7f0000000380)='./bus\x00') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r3, 0x0, 0x4}, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) ptrace$setopts(0x4206, r4, 0x0, 0x100045) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x6f528000) truncate(&(0x7f0000000040)='./bus\x00', 0x2) ioctl$TIOCGPTPEER(r3, 0x5441, 0x3) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x8, 0x5, 0x2, 0x2, 0x0, 0xfff, 0x48, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x9200, 0x3, 0x3, 0x8, 0x1000, 0x10001, 0x1f}, r0, 0x1, 0xffffffffffffffff, 0x18) 18:43:13 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:43:13 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf8c, 0x0, 0x0) 18:43:13 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x9, 0x0) 18:43:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xaa00, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 964.450789][T27671] tmpfs: Bad value for 'huge' 18:43:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xba00, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 964.701392][ T4812] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 964.940280][ T4812] usb 6-1: Using ep0 maxpacket: 8 [ 965.060627][ T4812] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 965.072344][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.083327][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.094448][ T4812] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 965.107342][ T4812] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 965.117583][ T4812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.126214][ T4812] usb 6-1: config 0 descriptor?? [ 965.601142][ T4812] hid-generic 0003:2505:0220.0019: unknown main item tag 0x0 [ 965.608541][ T4812] hid-generic 0003:2505:0220.0019: unknown main item tag 0x0 [ 965.616421][ T4812] hid-generic 0003:2505:0220.0019: hidraw0: USB HID v0.00 Device [HID 2505:0220] on usb-dummy_hcd.5-1/input0 [ 965.801581][T10789] usb 6-1: USB disconnect, device number 85 18:43:15 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1d, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:43:15 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xa, 0x0) 18:43:15 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:43:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x7, 0x4e23, 0x8001, 0xa, 0xa0, 0x100, 0x16, 0x0, 0xee00}, {0x1, 0xfb8, 0x6243, 0x7c, 0x1, 0x2, 0x3afc4c65, 0x7}, {0x7, 0x6, 0x4}, 0x8, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x32}, 0xa, @in=@private=0xa010101, 0x3501, 0x1, 0x2, 0x0, 0x8, 0x6, 0x6}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) r4 = signalfd(r3, &(0x7f0000000100)={[0x1]}, 0x8) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000005c0002000000000016000000000000000000000000000000000000001400060003000000000000a7"], 0x8c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=@delchain={0x90, 0x65, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xffff, 0x6}, {}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x7fffffff}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x6}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x3, 0x84d, 0x5}, {0x2, 0x9f0, 0xc3d}, 0x67, 0x9, 0xb8}}]}}, @filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x8, 0xb}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x48050}, 0x4040001) 18:43:15 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf8e, 0x0, 0x0) 18:43:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xc103, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:15 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf90, 0x0, 0x0) 18:43:15 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 966.353635][T27722] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 18:43:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xc602, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x7, 0x4e23, 0x8001, 0xa, 0xa0, 0x100, 0x16, 0x0, 0xee00}, {0x1, 0xfb8, 0x6243, 0x7c, 0x1, 0x2, 0x3afc4c65, 0x7}, {0x7, 0x6, 0x4}, 0x8, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x32}, 0xa, @in=@private=0xa010101, 0x3501, 0x1, 0x2, 0x0, 0x8, 0x6, 0x6}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) r4 = signalfd(r3, &(0x7f0000000100)={[0x1]}, 0x8) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000005c0002000000000016000000000000000000000000000000000000001400060003000000000000a7"], 0x8c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=@delchain={0x90, 0x65, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xffff, 0x6}, {}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x7fffffff}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x6}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x3, 0x84d, 0x5}, {0x2, 0x9f0, 0xc3d}, 0x67, 0x9, 0xb8}}]}}, @filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x8, 0xb}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x48050}, 0x4040001) 18:43:15 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xb, 0x0) 18:43:15 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xf97, 0x0, 0x0) [ 966.489639][T27743] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 966.600154][ T3589] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 966.840162][ T3589] usb 6-1: Using ep0 maxpacket: 8 [ 966.960215][ T3589] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 966.971056][ T3589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.982170][ T3589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.991977][ T3589] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 967.004919][ T3589] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 967.014094][ T3589] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.023763][ T3589] usb 6-1: config 0 descriptor?? [ 967.760107][ T3589] usbhid 6-1:0.0: can't add hid device: -71 [ 967.766036][ T3589] usbhid: probe of 6-1:0.0 failed with error -71 [ 967.775148][ T3589] usb 6-1: USB disconnect, device number 86 18:43:17 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1d, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:43:17 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:43:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xd003, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:17 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xc, 0x0) 18:43:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xfa7, 0x0, 0x0) 18:43:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x7, 0x4e23, 0x8001, 0xa, 0xa0, 0x100, 0x16, 0x0, 0xee00}, {0x1, 0xfb8, 0x6243, 0x7c, 0x1, 0x2, 0x3afc4c65, 0x7}, {0x7, 0x6, 0x4}, 0x8, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x32}, 0xa, @in=@private=0xa010101, 0x3501, 0x1, 0x2, 0x0, 0x8, 0x6, 0x6}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) r4 = signalfd(r3, &(0x7f0000000100)={[0x1]}, 0x8) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000005c0002000000000016000000000000000000000000000000000000001400060003000000000000a7"], 0x8c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=@delchain={0x90, 0x65, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xffff, 0x6}, {}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x7fffffff}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x6}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x3, 0x84d, 0x5}, {0x2, 0x9f0, 0xc3d}, 0x67, 0x9, 0xb8}}]}}, @filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x8, 0xb}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x48050}, 0x4040001) 18:43:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xdc01, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xfb3, 0x0, 0x0) [ 968.251905][T27768] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 18:43:17 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:43:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xfa00, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:17 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xd, 0x0) 18:43:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x7, 0x4e23, 0x8001, 0xa, 0xa0, 0x100, 0x16, 0x0, 0xee00}, {0x1, 0xfb8, 0x6243, 0x7c, 0x1, 0x2, 0x3afc4c65, 0x7}, {0x7, 0x6, 0x4}, 0x8, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x32}, 0xa, @in=@private=0xa010101, 0x3501, 0x1, 0x2, 0x0, 0x8, 0x6, 0x6}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) r4 = signalfd(r3, &(0x7f0000000100)={[0x1]}, 0x8) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000005c0002000000000016000000000000000000000000000000000000001400060003000000000000a7"], 0x8c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=@delchain={0x90, 0x65, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xffff, 0x6}, {}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x7fffffff}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x6}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x3, 0x84d, 0x5}, {0x2, 0x9f0, 0xc3d}, 0x67, 0x9, 0xb8}}]}}, @filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x8, 0xb}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x48050}, 0x4040001) [ 968.428844][T27796] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 968.550040][T10789] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 968.790781][T10789] usb 6-1: Using ep0 maxpacket: 8 [ 968.930052][T10789] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 968.940813][T10789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.951694][T10789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 968.961592][T10789] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 968.974545][T10789] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 968.983617][T10789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.992338][T10789] usb 6-1: config 0 descriptor?? [ 969.729988][T10789] usbhid 6-1:0.0: can't add hid device: -71 [ 969.735920][T10789] usbhid: probe of 6-1:0.0 failed with error -71 [ 969.743251][T10789] usb 6-1: USB disconnect, device number 87 18:43:18 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1d, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:43:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x34000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:19 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xfba, 0x0, 0x0) 18:43:19 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:43:19 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xe, 0x0) 18:43:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x7, 0x4e23, 0x8001, 0xa, 0xa0, 0x100, 0x16, 0x0, 0xee00}, {0x1, 0xfb8, 0x6243, 0x7c, 0x1, 0x2, 0x3afc4c65, 0x7}, {0x7, 0x6, 0x4}, 0x8, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x32}, 0xa, @in=@private=0xa010101, 0x3501, 0x1, 0x2, 0x0, 0x8, 0x6, 0x6}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) signalfd(r3, &(0x7f0000000100)={[0x1]}, 0x8) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000024000b0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000005c0002000000000016000000000000000000000000000000000000001400060003000000000000a7"], 0x8c}}, 0x0) 18:43:19 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) gettid() rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000040)) 18:43:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x200000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:19 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xfc6, 0x0, 0x0) 18:43:19 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x10, 0x0) [ 970.270922][T27823] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 18:43:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x7, 0x4e23, 0x8001, 0xa, 0xa0, 0x100, 0x16, 0x0, 0xee00}, {0x1, 0xfb8, 0x6243, 0x7c, 0x1, 0x2, 0x3afc4c65, 0x7}, {0x7, 0x6, 0x4}, 0x8, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x32}, 0xa, @in=@private=0xa010101, 0x3501, 0x1, 0x2, 0x0, 0x8, 0x6, 0x6}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) signalfd(r3, &(0x7f0000000100)={[0x1]}, 0x8) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) 18:43:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x400300, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 970.519921][T10789] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 970.769897][T10789] usb 6-1: Using ep0 maxpacket: 8 [ 970.890702][T10789] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 970.901456][T10789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.912982][T10789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.922987][T10789] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 970.936181][T10789] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 970.945486][T10789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.955949][T10789] usb 6-1: config 0 descriptor?? [ 971.699886][T10789] usbhid 6-1:0.0: can't add hid device: -71 [ 971.705915][T10789] usbhid: probe of 6-1:0.0 failed with error -71 [ 971.714991][T10789] usb 6-1: USB disconnect, device number 88 18:43:20 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1d, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:43:20 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0xfe0, 0x0, 0x0) 18:43:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x800000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:20 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x11, 0x0) 18:43:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x7, 0x4e23, 0x8001, 0xa, 0xa0, 0x100, 0x16, 0x0, 0xee00}, {0x1, 0xfb8, 0x6243, 0x7c, 0x1, 0x2, 0x3afc4c65, 0x7}, {0x7, 0x6, 0x4}, 0x8, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x32}, 0xa, @in=@private=0xa010101, 0x3501, 0x1, 0x2, 0x0, 0x8, 0x6, 0x6}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) signalfd(r3, &(0x7f0000000100)={[0x1]}, 0x8) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) 18:43:21 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x6400, 0x0, 0x0) [ 972.459812][ T4541] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 972.699914][ T4541] usb 6-1: Using ep0 maxpacket: 8 [ 972.819893][ T4541] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 972.830749][ T4541] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.842151][ T4541] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 972.852213][ T4541] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 972.865413][ T4541] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 972.874683][ T4541] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.884350][ T4541] usb 6-1: config 0 descriptor?? 18:43:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x1000000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:22 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) gettid() rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000040)) 18:43:22 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x12, 0x0) 18:43:22 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x0) 18:43:22 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x7, 0x4e23, 0x8001, 0xa, 0xa0, 0x100, 0x16, 0x0, 0xee00}, {0x1, 0xfb8, 0x6243, 0x7c, 0x1, 0x2, 0x3afc4c65, 0x7}, {0x7, 0x6, 0x4}, 0x8, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x32}, 0xa, @in=@private=0xa010101, 0x3501, 0x1, 0x2, 0x0, 0x8, 0x6, 0x6}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) signalfd(r3, &(0x7f0000000100)={[0x1]}, 0x8) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 18:43:22 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x2, 0x0) [ 973.619751][ T4541] usbhid 6-1:0.0: can't add hid device: -71 [ 973.625733][ T4541] usbhid: probe of 6-1:0.0 failed with error -71 [ 973.636804][ T4541] usb 6-1: USB disconnect, device number 89 18:43:22 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1d, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:43:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x2000000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:22 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x25, 0x0) 18:43:22 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x7, 0x4e23, 0x8001, 0xa, 0xa0, 0x100, 0x16, 0x0, 0xee00}, {0x1, 0xfb8, 0x6243, 0x7c, 0x1, 0x2, 0x3afc4c65, 0x7}, {0x7, 0x6, 0x4}, 0x8, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x32}, 0xa, @in=@private=0xa010101, 0x3501, 0x1, 0x2, 0x0, 0x8, 0x6, 0x6}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) signalfd(r3, &(0x7f0000000100)={[0x1]}, 0x8) socket(0x11, 0x800000003, 0x0) 18:43:22 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x3, 0x0) 18:43:22 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x4, 0x0) 18:43:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x3000000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 974.399683][ T4812] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 974.640178][ T4812] usb 6-1: Using ep0 maxpacket: 8 [ 974.759816][ T4812] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 974.771778][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.783376][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.794284][ T4812] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 974.807495][ T4812] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 974.817841][ T4812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.826894][ T4812] usb 6-1: config 0 descriptor?? [ 975.569630][ T4812] usbhid 6-1:0.0: can't add hid device: -71 [ 975.575642][ T4812] usbhid: probe of 6-1:0.0 failed with error -71 [ 975.583132][ T4812] usb 6-1: USB disconnect, device number 90 18:43:25 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) gettid() rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000040)) 18:43:25 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x48, 0x0) 18:43:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x7, 0x4e23, 0x8001, 0xa, 0xa0, 0x100, 0x16, 0x0, 0xee00}, {0x1, 0xfb8, 0x6243, 0x7c, 0x1, 0x2, 0x3afc4c65, 0x7}, {0x7, 0x6, 0x4}, 0x8, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x32}, 0xa, @in=@private=0xa010101, 0x3501, 0x1, 0x2, 0x0, 0x8, 0x6, 0x6}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) signalfd(r3, &(0x7f0000000100)={[0x1]}, 0x8) 18:43:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x4000000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:25 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x5, 0x0) 18:43:25 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1d, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:43:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x5000000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:25 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x4c, 0x0) 18:43:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x6000000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:25 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x6, 0x0) 18:43:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x7, 0x4e23, 0x8001, 0xa, 0xa0, 0x100, 0x16, 0x0, 0xee00}, {0x1, 0xfb8, 0x6243, 0x7c, 0x1, 0x2, 0x3afc4c65, 0x7}, {0x7, 0x6, 0x4}, 0x8, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x32}, 0xa, @in=@private=0xa010101, 0x3501, 0x1, 0x2, 0x0, 0x8, 0x6, 0x6}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:25 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x7, 0x0) [ 976.639560][ T7] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 976.909540][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 977.039731][ T7] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 977.050563][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.061532][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 977.071294][ T7] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 977.084161][ T7] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 977.093294][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.104100][ T7] usb 6-1: config 0 descriptor?? [ 977.829481][ T7] usbhid 6-1:0.0: can't add hid device: -71 [ 977.835469][ T7] usbhid: probe of 6-1:0.0 failed with error -71 [ 977.846828][ T7] usb 6-1: USB disconnect, device number 91 18:43:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x7000000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:28 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000040)) 18:43:28 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x68, 0x0) 18:43:28 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x8, 0x0) 18:43:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$kcm(0x2b, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x7, 0x4e23, 0x8001, 0xa, 0xa0, 0x100, 0x16, 0x0, 0xee00}, {0x1, 0xfb8, 0x6243, 0x7c, 0x1, 0x2, 0x3afc4c65, 0x7}, {0x7, 0x6, 0x4}, 0x8, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x32}, 0xa, @in=@private=0xa010101, 0x3501, 0x1, 0x2, 0x0, 0x8, 0x6, 0x6}}, 0xe8) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:28 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1d, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:43:28 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x9, 0x0) 18:43:28 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x6c, 0x0) 18:43:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$kcm(0x2b, 0x1, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x8000000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:28 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x74, 0x0) 18:43:28 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xa, 0x0) 18:43:28 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x7a, 0x0) [ 979.670093][ T3589] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 979.929376][ T3589] usb 6-1: Using ep0 maxpacket: 8 [ 980.049397][ T3589] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 980.060231][ T3589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.071592][ T3589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.081655][ T3589] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 980.094835][ T3589] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 980.104137][ T3589] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.113623][ T3589] usb 6-1: config 0 descriptor?? [ 980.849311][ T3589] usbhid 6-1:0.0: can't add hid device: -71 [ 980.855247][ T3589] usbhid: probe of 6-1:0.0 failed with error -71 [ 980.864543][ T3589] usb 6-1: USB disconnect, device number 92 18:43:31 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000040)) 18:43:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x9000000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:31 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xb, 0x0) 18:43:31 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x204, 0x0) 18:43:31 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1d, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:43:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xa000000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:31 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x300, 0x0) 18:43:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r2}, 0x10) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:31 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xc, 0x0) 18:43:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xb000000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) [ 982.709210][ T4812] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 982.959191][ T4812] usb 6-1: Using ep0 maxpacket: 8 [ 983.079369][ T4812] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 983.090089][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.101656][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.111685][ T4812] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 983.124997][ T4812] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 983.134398][ T4812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.143069][ T4812] usb 6-1: config 0 descriptor?? [ 983.879150][ T4812] usbhid 6-1:0.0: can't add hid device: -71 [ 983.885193][ T4812] usbhid: probe of 6-1:0.0 failed with error -71 [ 983.892466][ T4812] usb 6-1: USB disconnect, device number 93 18:43:34 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000040)) 18:43:34 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x402, 0x0) 18:43:34 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xd, 0x0) 18:43:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xc000000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:34 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1d, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:43:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xf000000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:34 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xe, 0x0) 18:43:34 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x500, 0x0) 18:43:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x10000000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:34 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x10, 0x0) [ 985.769035][ T4541] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 986.029005][ T4541] usb 6-1: Using ep0 maxpacket: 8 [ 986.149008][ T4541] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 986.159751][ T4541] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.171203][ T4541] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.181325][ T4541] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 986.194500][ T4541] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 986.203772][ T4541] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.213451][ T4541] usb 6-1: config 0 descriptor?? [ 986.249305][ T3236] ieee802154 phy0 wpan0: encryption failed: -22 [ 986.255558][ T3236] ieee802154 phy1 wpan1: encryption failed: -22 [ 986.948959][ T4541] usbhid 6-1:0.0: can't add hid device: -71 [ 986.955008][ T4541] usbhid: probe of 6-1:0.0 failed with error -71 [ 986.965599][ T4541] usb 6-1: USB disconnect, device number 94 18:43:37 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x600, 0x0) 18:43:37 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, 0x0) 18:43:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x10030000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:37 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:37 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x11, 0x0) 18:43:37 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1d, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:43:37 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x12, 0x0) 18:43:37 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x700, 0x0) 18:43:37 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00'}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x11000000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:37 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x25, 0x0) 18:43:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x2a020000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:37 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x900, 0x0) [ 988.780568][T10789] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 989.029000][T10789] usb 6-1: Using ep0 maxpacket: 8 [ 989.168959][T10789] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 989.179773][T10789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.191175][T10789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.201208][T10789] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 989.214431][T10789] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 989.223725][T10789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.233085][T10789] usb 6-1: config 0 descriptor?? [ 989.938785][T10789] usbhid 6-1:0.0: can't add hid device: -71 [ 989.944762][T10789] usbhid: probe of 6-1:0.0 failed with error -71 [ 989.955965][T10789] usb 6-1: USB disconnect, device number 95 18:43:40 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, 0x0) 18:43:40 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00'}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x3a010000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:40 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x48, 0x0) 18:43:40 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xa00, 0x0) 18:43:40 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1d, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:43:40 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xb00, 0x0) 18:43:40 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x4c, 0x0) 18:43:40 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00'}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x56000000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:40 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xc00, 0x0) 18:43:40 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x68, 0x0) [ 991.818627][ T7] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 992.068618][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 992.208880][ T7] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 992.219651][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.231074][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.241224][ T7] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 992.254468][ T7] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 992.263805][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.274120][ T7] usb 6-1: config 0 descriptor?? [ 993.008582][ T7] usbhid 6-1:0.0: can't add hid device: -71 [ 993.014632][ T7] usbhid: probe of 6-1:0.0 failed with error -71 [ 993.025559][ T7] usb 6-1: USB disconnect, device number 96 18:43:43 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, 0x0) 18:43:43 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r0}, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:43 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xd00, 0x0) 18:43:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x56030000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:43 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1d, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:43:43 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x6c, 0x0) 18:43:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x5a150000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:43 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xe00, 0x0) 18:43:43 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r0}, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:43 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1100, 0x0) 18:43:43 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x74, 0x0) 18:43:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x60000000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:43 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r0}, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x248800) [ 994.918571][ T4812] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 995.159862][ T4812] usb 6-1: Using ep0 maxpacket: 8 [ 995.278578][ T4812] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 995.290290][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.301384][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 995.312126][ T4812] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 995.325140][ T4812] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 995.335466][ T4812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.344392][ T4812] usb 6-1: config 0 descriptor?? [ 996.078411][ T4812] usbhid 6-1:0.0: can't add hid device: -71 [ 996.084349][ T4812] usbhid: probe of 6-1:0.0 failed with error -71 [ 996.091554][ T4812] usb 6-1: USB disconnect, device number 97 18:43:46 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1d, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:43:46 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x7a, 0x0) 18:43:46 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x300, 0x0) 18:43:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x65580000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:46 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1200, 0x0) 18:43:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x70020000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:46 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x204, 0x0) 18:43:46 executing program 0 (fault-call:13 fault-nth:0): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:43:46 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1f00, 0x0) 18:43:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x81000000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 997.779886][T28358] FAULT_INJECTION: forcing a failure. [ 997.779886][T28358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 997.814274][T28358] CPU: 1 PID: 28358 Comm: syz-executor.0 Not tainted 5.12.0-rc4-syzkaller #0 [ 997.823122][T28358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 997.833194][T28358] Call Trace: [ 997.836462][T28358] dump_stack+0x137/0x19d [ 997.840853][T28358] should_fail+0x23c/0x250 [ 997.845262][T28358] should_fail_usercopy+0x16/0x20 [ 997.850278][T28358] _copy_from_user+0x1c/0xd0 [ 997.854852][T28358] __se_sys_rt_sigqueueinfo+0x49/0x360 [ 997.860300][T28358] ? __fget_light+0xd0/0x260 [ 997.864931][T28358] ? ksys_write+0x148/0x180 [ 997.869427][T28358] __x64_sys_rt_sigqueueinfo+0x3f/0x50 [ 997.874875][T28358] do_syscall_64+0x39/0x80 [ 997.879284][T28358] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 997.885204][T28358] RIP: 0033:0x466459 [ 997.889080][T28358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 997.908688][T28358] RSP: 002b:00007f0113ebd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000081 [ 997.917090][T28358] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 997.925051][T28358] RDX: 0000000020000040 RSI: 000000000000003c RDI: 0000000000001165 [ 997.933012][T28358] RBP: 00007f0113ebd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 997.940967][T28358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 997.948972][T28358] R13: 00007fff4030298f R14: 00007f0113ebd300 R15: 0000000000022000 [ 998.028288][ T9690] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 998.278261][ T9690] usb 6-1: Using ep0 maxpacket: 8 [ 998.398355][ T9690] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 998.409087][ T9690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.420536][ T9690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.430650][ T9690] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 998.443854][ T9690] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 998.453060][ T9690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.462085][ T9690] usb 6-1: config 0 descriptor?? [ 999.198240][ T9690] usbhid 6-1:0.0: can't add hid device: -71 [ 999.204187][ T9690] usbhid: probe of 6-1:0.0 failed with error -71 [ 999.215625][ T9690] usb 6-1: USB disconnect, device number 98 18:43:48 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1d, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:43:48 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x300, 0x0) 18:43:48 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x2500, 0x0) 18:43:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x81ffffff, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x88470000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:48 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x4000, 0x0) 18:43:48 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) [ 1000.018160][T19340] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1000.298946][T19340] usb 6-1: Using ep0 maxpacket: 8 [ 1000.428151][T19340] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 1000.440094][T19340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.451521][T19340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.461625][T19340] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 1000.474812][T19340] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 1000.484073][T19340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.494488][T19340] usb 6-1: config 0 descriptor?? 18:43:49 executing program 0 (fault-call:13 fault-nth:1): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:43:49 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x402, 0x0) 18:43:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x88480000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:49 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) [ 1000.812481][T28417] FAULT_INJECTION: forcing a failure. [ 1000.812481][T28417] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.825078][T28417] CPU: 0 PID: 28417 Comm: syz-executor.0 Not tainted 5.12.0-rc4-syzkaller #0 [ 1000.833822][T28417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1000.843921][T28417] Call Trace: [ 1000.847294][T28417] dump_stack+0x137/0x19d [ 1000.851611][T28417] should_fail+0x23c/0x250 [ 1000.856091][T28417] ? __sigqueue_alloc+0x12c/0x280 [ 1000.861139][T28417] __should_failslab+0x81/0x90 [ 1000.865893][T28417] should_failslab+0x5/0x20 [ 1000.870391][T28417] kmem_cache_alloc+0x46/0x320 [ 1000.875272][T28417] ? __rcu_read_unlock+0x45/0x250 [ 1000.880296][T28417] __sigqueue_alloc+0x12c/0x280 [ 1000.885276][T28417] __send_signal+0x1aa/0x780 [ 1000.890007][T28417] send_signal+0x398/0x3e0 [ 1000.894421][T28417] do_send_sig_info+0x9b/0xe0 [ 1000.899099][T28417] kill_pid_info+0x7f/0x100 [ 1000.903594][T28417] __se_sys_rt_sigqueueinfo+0xf9/0x360 [ 1000.909062][T28417] ? ksys_write+0x148/0x180 [ 1000.913562][T28417] __x64_sys_rt_sigqueueinfo+0x3f/0x50 [ 1000.919021][T28417] do_syscall_64+0x39/0x80 [ 1000.923428][T28417] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1000.929306][T28417] RIP: 0033:0x466459 [ 1000.933194][T28417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1000.952826][T28417] RSP: 002b:00007f0113ebd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000081 [ 1000.961250][T28417] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1000.969196][T28417] RDX: 0000000020000040 RSI: 000000000000003c RDI: 0000000000001168 [ 1000.977162][T28417] RBP: 00007f0113ebd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1000.985109][T28417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1000.993160][T28417] R13: 00007fff4030298f R14: 00007f0113ebd300 R15: 0000000000022000 [ 1001.268092][T19340] usbhid 6-1:0.0: can't add hid device: -71 [ 1001.274066][T19340] usbhid: probe of 6-1:0.0 failed with error -71 [ 1001.285138][T19340] usb 6-1: USB disconnect, device number 99 18:43:50 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1d, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:43:50 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x4800, 0x0) 18:43:50 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:50 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x500, 0x0) 18:43:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x88a8ffff, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:50 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:43:50 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:50 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x4c00, 0x0) 18:43:50 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x600, 0x0) 18:43:50 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:43:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x8a000000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:50 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) [ 1002.058054][ T4812] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1002.298032][ T4812] usb 6-1: Using ep0 maxpacket: 8 [ 1002.418731][ T4812] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 1002.429594][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.441061][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.451078][ T4812] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 1002.464204][ T4812] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 1002.473558][ T4812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.483401][ T4812] usb 6-1: config 0 descriptor?? [ 1003.217988][ T4812] usbhid 6-1:0.0: can't add hid device: -71 [ 1003.224012][ T4812] usbhid: probe of 6-1:0.0 failed with error -71 [ 1003.231859][ T4812] usb 6-1: USB disconnect, device number 100 18:43:52 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x20, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:43:52 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x2}) 18:43:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x9a010000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:52 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x700, 0x0) 18:43:52 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x6800, 0x0) 18:43:52 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:52 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x9effffff, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:52 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x3}) 18:43:52 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x900, 0x0) 18:43:52 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x6c00, 0x0) 18:43:52 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x4}) [ 1004.010693][ T7] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1004.277903][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 1004.428597][ T7] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 1004.439307][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.450654][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.460789][ T7] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 1004.474026][ T7] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 1004.483501][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.492506][ T7] usb 6-1: config 0 descriptor?? [ 1005.227882][ T7] usbhid 6-1:0.0: can't add hid device: -71 [ 1005.233945][ T7] usbhid: probe of 6-1:0.0 failed with error -71 [ 1005.244999][ T7] usb 6-1: USB disconnect, device number 101 18:43:54 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x20, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:43:54 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xaa000000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:54 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x6}) 18:43:54 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xa00, 0x0) 18:43:54 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x7400, 0x0) 18:43:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xba000000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:54 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x7a00, 0x0) 18:43:54 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0xe}) 18:43:54 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:54 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xb00, 0x0) 18:43:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xc1030000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1006.007827][ T4812] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1006.247809][ T4812] usb 6-1: Using ep0 maxpacket: 8 [ 1006.367877][ T4812] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 1006.378591][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.389549][ T4812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.399441][ T4812] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 1006.412342][ T4812] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 1006.421486][ T4812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.431836][ T4812] usb 6-1: config 0 descriptor?? [ 1007.167758][ T4812] usbhid 6-1:0.0: can't add hid device: -71 [ 1007.173678][ T4812] usbhid: probe of 6-1:0.0 failed with error -71 [ 1007.184649][ T4812] usb 6-1: USB disconnect, device number 102 18:43:56 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x20, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:43:56 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:56 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xc00, 0x0) 18:43:56 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x10}) 18:43:56 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1000000, 0x0) 18:43:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xc6020000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:56 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x19}) 18:43:56 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xd00, 0x0) 18:43:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xd0030000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:56 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x2000000, 0x0) 18:43:56 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:56 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x204}) [ 1008.007680][ T9690] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1008.247770][ T9690] usb 6-1: Using ep0 maxpacket: 8 [ 1008.367783][ T9690] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 1008.379734][ T9690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.391039][ T9690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1008.400953][ T9690] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 1008.414019][ T9690] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 1008.423261][ T9690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.434317][ T9690] usb 6-1: config 0 descriptor?? [ 1009.177624][ T9690] usbhid 6-1:0.0: can't add hid device: -71 [ 1009.183581][ T9690] usbhid: probe of 6-1:0.0 failed with error -71 [ 1009.195170][ T9690] usb 6-1: USB disconnect, device number 103 18:43:58 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x21, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:43:58 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xe00, 0x0) 18:43:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xdc010000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:58 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:58 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x2040000, 0x0) 18:43:58 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x300}) 18:43:58 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x402}) 18:43:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xefffffff, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:43:58 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x3000000, 0x0) 18:43:58 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1100, 0x0) 18:43:58 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:43:58 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x406}) [ 1009.957577][T19340] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1010.217547][T19340] usb 6-1: Using ep0 maxpacket: 8 [ 1010.358990][T19340] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 1010.369701][T19340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.381911][T19340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.391785][T19340] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 1010.404723][T19340] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 1010.413807][T19340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.423831][T19340] usb 6-1: config 0 descriptor?? [ 1011.167506][T19340] usbhid 6-1:0.0: can't add hid device: -71 [ 1011.173471][T19340] usbhid: probe of 6-1:0.0 failed with error -71 [ 1011.180423][T19340] usb 6-1: USB disconnect, device number 104 18:44:00 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x21, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:44:00 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xf0ffffff, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:00 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x4000000, 0x0) 18:44:00 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1200, 0x0) 18:44:00 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x600}) 18:44:00 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x604}) 18:44:00 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xfa000000, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:00 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0xe00}) 18:44:00 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1f00, 0x0) 18:44:00 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x5000000, 0x0) [ 1011.987447][ T4541] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1012.237418][ T4541] usb 6-1: Using ep0 maxpacket: 8 [ 1012.357440][ T4541] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 1012.368280][ T4541] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.379732][ T4541] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.389712][ T4541] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 1012.402860][ T4541] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 1012.412171][ T4541] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.422475][ T4541] usb 6-1: config 0 descriptor?? [ 1013.167389][ T4541] usbhid 6-1:0.0: can't add hid device: -71 [ 1013.174269][ T4541] usbhid: probe of 6-1:0.0 failed with error -71 [ 1013.182560][ T4541] usb 6-1: USB disconnect, device number 105 18:44:02 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xffffa888, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:02 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x2500, 0x0) 18:44:02 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x1900}) 18:44:02 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x21, {[@global=@item_012={0x1, 0x1, 0x0, ']'}, @global, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:44:02 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x6000000, 0x0) 18:44:02 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x4000}) 18:44:02 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x7000000, 0x0) 18:44:02 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:02 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x5400}) 18:44:02 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x4000, 0x0) 18:44:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xffffff7f, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:02 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:02 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x60ff}) 18:44:02 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x8000000, 0x0) 18:44:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xffffff81, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1013.967307][ T9564] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1014.207330][ T9564] usb 6-1: Using ep0 maxpacket: 8 [ 1014.327305][ T9564] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 1014.338032][ T9564] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.348922][ T9564] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.358713][ T9564] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 1014.371570][ T9564] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 1014.380619][ T9564] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.393437][ T9564] usb 6-1: config 0 descriptor?? [ 1015.137264][ T9564] usbhid 6-1:0.0: can't add hid device: -71 [ 1015.143191][ T9564] usbhid: probe of 6-1:0.0 failed with error -71 [ 1015.151776][ T9564] usb 6-1: USB disconnect, device number 106 18:44:04 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x7f00}) 18:44:04 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x4800, 0x0) 18:44:04 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:04 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x9000000, 0x0) 18:44:04 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x20, {[@global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:44:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xffffff9e, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:04 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:04 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xa000000, 0x0) 18:44:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xffffffef, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:04 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:04 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x4c00, 0x0) 18:44:04 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x9700}) 18:44:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0xfffffff0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:04 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x6800, 0x0) 18:44:04 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:04 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xb000000, 0x0) [ 1015.937204][T19340] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1016.207179][T19340] usb 6-1: Using ep0 maxpacket: 8 [ 1016.327222][T19340] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 1016.338017][T19340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.349505][T19340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.359756][T19340] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 1016.372971][T19340] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 1016.382221][T19340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.391435][T19340] usb 6-1: config 0 descriptor?? [ 1017.127177][T19340] usbhid 6-1:0.0: can't add hid device: -71 [ 1017.133097][T19340] usbhid: probe of 6-1:0.0 failed with error -71 [ 1017.140409][T19340] usb 6-1: USB disconnect, device number 107 18:44:06 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x20, {[@global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:44:06 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:06 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xc000000, 0x0) 18:44:06 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x6c00, 0x0) 18:44:06 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x104000}) 18:44:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x10, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:06 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xd000000, 0x0) 18:44:06 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x7400, 0x0) 18:44:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x14, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:06 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x400000}) 18:44:06 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x7a00, 0x0) 18:44:06 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) [ 1017.907162][ T7] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1018.147974][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 1018.267232][ T7] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 1018.278004][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.289420][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.299506][ T7] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 1018.312595][ T7] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 1018.321848][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.330874][ T7] usb 6-1: config 0 descriptor?? [ 1019.067031][ T7] usbhid 6-1:0.0: can't add hid device: -71 [ 1019.072974][ T7] usbhid: probe of 6-1:0.0 failed with error -71 [ 1019.084001][ T7] usb 6-1: USB disconnect, device number 108 18:44:08 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x20, {[@global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:44:08 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x401000}) 18:44:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0xc0, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:08 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xe000000, 0x0) 18:44:08 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:08 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1000000, 0x0) 18:44:08 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x4af000}) 18:44:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0xec0, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:08 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x10000000, 0x0) 18:44:08 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x2000000, 0x0) 18:44:08 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x33fe0, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1019.888066][ T9690] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1020.126960][ T9690] usb 6-1: Using ep0 maxpacket: 8 [ 1020.248239][ T9690] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 1020.259152][ T9690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.270659][ T9690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.280762][ T9690] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 1020.293970][ T9690] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 1020.303264][ T9690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.313776][ T9690] usb 6-1: config 0 descriptor?? [ 1021.056902][ T9690] usbhid 6-1:0.0: can't add hid device: -71 [ 1021.062888][ T9690] usbhid: probe of 6-1:0.0 failed with error -71 [ 1021.074196][ T9690] usb 6-1: USB disconnect, device number 109 18:44:10 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x21, {[@global, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:44:10 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x4fc000}) 18:44:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x20000728, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:10 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:10 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x11000000, 0x0) 18:44:10 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x2040000, 0x0) 18:44:10 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x540000}) 18:44:10 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x3000000, 0x0) 18:44:10 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:10 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x970000}) 18:44:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x7ffff000, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:10 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x12000000, 0x0) [ 1021.886861][ T9690] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1022.146881][ T9690] usb 6-1: Using ep0 maxpacket: 8 [ 1022.276967][ T9690] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 1022.287813][ T9690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.299216][ T9690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.309159][ T9690] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 1022.322494][ T9690] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 1022.331731][ T9690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.342418][ T9690] usb 6-1: config 0 descriptor?? [ 1023.066805][ T9690] usbhid 6-1:0.0: can't add hid device: -71 [ 1023.072735][ T9690] usbhid: probe of 6-1:0.0 failed with error -71 [ 1023.080353][ T9690] usb 6-1: USB disconnect, device number 110 18:44:12 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x21, {[@global, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:44:12 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0xc04a01}) 18:44:12 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x4000000, 0x0) 18:44:12 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0xfffffdef, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:12 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1f000000, 0x0) 18:44:12 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0xc04f00}) 18:44:12 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x10, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:12 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x5000000, 0x0) 18:44:12 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0xf04a00}) 18:44:12 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x25000000, 0x0) [ 1023.653193][T29113] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1023.866818][T19340] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1024.116710][T19340] usb 6-1: Using ep0 maxpacket: 8 [ 1024.236924][T19340] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 1024.247793][T19340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.259226][T19340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.269178][T19340] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 1024.282335][T19340] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 1024.291536][T19340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.301411][T19340] usb 6-1: config 0 descriptor?? [ 1025.036681][T19340] usbhid 6-1:0.0: can't add hid device: -71 [ 1025.042660][T19340] usbhid: probe of 6-1:0.0 failed with error -71 [ 1025.054044][T19340] usb 6-1: USB disconnect, device number 111 18:44:14 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x220, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x21, {[@global, @global=@item_012={0x1, 0x1, 0x0, "b6"}, @main=@item_4={0x3, 0x0, 0x0, "619f649d"}, @local=@item_4={0x3, 0x2, 0x0, "c687f418"}, @main=@item_4={0x3, 0x0, 0x0, "f861d2e3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "f15426e3"}, @local=@item_4={0x3, 0x2, 0xa, "fff8fac6"}]}}, 0x0}, 0x0) 18:44:14 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:14 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x1000000}) 18:44:14 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x40000000, 0x0) 18:44:14 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x6000000, 0x0) 18:44:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x31, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x32, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:14 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x14ac000}) 18:44:14 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x48000000, 0x0) 18:44:14 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x7000000, 0x0) 18:44:14 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:14 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x2000000}) [ 1025.846622][T19340] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1026.086598][T19340] usb 6-1: Using ep0 maxpacket: 8 [ 1026.206607][T19340] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 1026.217415][T19340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.229063][T19340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1026.239155][T19340] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 1026.252335][T19340] usb 6-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 1026.261575][T19340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.270413][T19340] usb 6-1: config 0 descriptor?? [ 1027.006602][T19340] usbhid 6-1:0.0: can't add hid device: -71 [ 1027.012534][T19340] usbhid: probe of 6-1:0.0 failed with error -71 [ 1027.019824][T19340] usb 6-1: USB disconnect, device number 112 18:44:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x8000000, 0x0) 18:44:16 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x4c000000, 0x0) 18:44:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x73, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:16 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x2040000}) 18:44:16 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:16 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3}, 0x40) 18:44:16 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x9000000, 0x0) 18:44:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x300, 0x0) r1 = dup(r0) read(r1, 0x0, 0x0) 18:44:16 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x68000000, 0x0) 18:44:16 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x3000000}) 18:44:16 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x4000000}) 18:44:16 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x2, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:16 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x6c000000, 0x0) 18:44:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xa000000, 0x0) 18:44:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000180)="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", 0xfe}, {&(0x7f0000000280)="bacecaf3e9a3f02ef14a6586b070a943d1e3b61dc77ac5a3cb4c620e6eb1fd36ccc15e86c7f5254321c86298759d1ce06e3a8f62c9", 0x35}, {&(0x7f00000002c0)="a5672b324e1188b7744ba95fcb9c8ce9804d60f274505ef0ce95b682b003e1d384a4416aa72e9847020d3616e7e1f42f30667180f435d994f667616d5d67e3df6dd210813bcd72535e50281432ae649aa37390dde46bf7f0fd0d2a4ad43fdf7b761bcff4c456aecb6f36b889f7383e0db397a4663cb907c049699c40eb4520aeeacdf7925b593b42e08febfd4d33b660a9f95d09835c50002cc0353398e6d743b1fb50ebb80ddb9dbb30a7a307f7b312a4585c8693fcf5fb952166ca056fee9a0259af3d39b0", 0xc6}, {&(0x7f00000003c0)="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", 0xe08}], 0x4}, 0x0) 18:44:16 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x6000000}) 18:44:16 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:16 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x6040000}) 18:44:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x3, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:16 executing program 5: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff}) 18:44:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xb000000, 0x0) 18:44:16 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x74000000, 0x0) 18:44:16 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0xe000000}) 18:44:16 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x4, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xc000000, 0x0) 18:44:16 executing program 5: mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:44:16 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x10000000}) 18:44:16 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x7a000000, 0x0) 18:44:16 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(r0) fchdir(r0) 18:44:16 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x19000000}) 18:44:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xd000000, 0x0) 18:44:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x5, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:16 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:16 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x20000000}) 18:44:16 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xfeffffff, 0x0) 18:44:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x6, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xe000000, 0x0) 18:44:16 executing program 5: r0 = socket$inet6(0x18, 0x3, 0x0) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000000)=@in6={0x18, 0x1}, 0xc, 0x0}, 0x0) 18:44:16 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:16 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x7f000000}) 18:44:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x7, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x300, 0x0) fcntl$getown(r0, 0x5) 18:44:16 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xfffffffe, 0x0) 18:44:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x10000000, 0x0) 18:44:16 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0xfeffffff}) 18:44:17 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x8, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:17 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) flock(r0, 0xc6) close(r0) 18:44:17 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:17 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xffffffff, 0x0) 18:44:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x11000000, 0x0) 18:44:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x9, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:17 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0xff600000}) 18:44:17 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x90, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x10, 0x0) 18:44:17 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0xfffffffe}) 18:44:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0xa, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:17 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:17 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x0) 18:44:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x12000000, 0x0) 18:44:17 executing program 5: r0 = socket$inet6(0x18, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0xa) 18:44:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0xb, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:17 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0xffffffff}) 18:44:17 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x2) 18:44:17 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00'}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x1f000000, 0x0) 18:44:17 executing program 5: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000001540)={{}, {0x0, 0xfffffffffffff001}}, 0x0) 18:44:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0xc, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:17 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x3) 18:44:17 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00'}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:17 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:44:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0xf, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:17 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 18:44:17 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x4) 18:44:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x25000000, 0x0) 18:44:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x10, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:17 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00'}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:17 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x2}) 18:44:17 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x5) 18:44:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x11, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:17 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r0}, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:17 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x3}) 18:44:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x40000000, 0x0) 18:44:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x300, 0x0) listen(r0, 0x0) 18:44:17 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x4}) 18:44:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x48000000, 0x0) 18:44:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x56, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:17 executing program 5: read(0xffffffffffffff9c, 0x0, 0x0) 18:44:17 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x6) 18:44:17 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r0}, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:17 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x6}) 18:44:17 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 18:44:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x60, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x4c000000, 0x0) 18:44:17 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x7) 18:44:17 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0xe}) 18:44:17 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r0}, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x8a, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:17 executing program 5: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x70fe95337d708c39) 18:44:17 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x10}) 18:44:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x68000000, 0x0) 18:44:17 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x8) 18:44:17 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, 0x0, 0x0) 18:44:17 executing program 5: mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x6010, 0xffffffffffffff9c, 0x0) 18:44:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0xaa, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:17 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x19}) 18:44:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x6c000000, 0x0) 18:44:18 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x9) 18:44:18 executing program 5: r0 = socket$inet6(0x18, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x7001, 0x0, &(0x7f0000000000)={0x18, 0x3}, 0xc) 18:44:18 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, 0x0, 0x0) 18:44:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0xba, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:18 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x204}) 18:44:18 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xa) 18:44:18 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x74000000, 0x0) 18:44:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x1001, 0x0, 0x0) 18:44:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0xfa, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:18 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x300}) 18:44:18 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001040)='block_bio_remap\x00', r1}, 0x10) write$cgroup_type(r0, 0x0, 0x0) 18:44:18 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xb) 18:44:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x13a, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:18 executing program 5: syz_emit_ethernet(0x3a, &(0x7f0000000080)={@broadcast, @random="63b38e8d6aa7", @val, {@ipv4}}, 0x0) 18:44:18 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x7a000000, 0x0) 18:44:18 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x402}) 18:44:18 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x406}) 18:44:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1004, 0x0, 0x0) 18:44:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x19a, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write(r0, 0x0, 0x0) 18:44:18 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xc) 18:44:18 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xfeffffff, 0x0) 18:44:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040), 0xaa04e145d84d8b0a) 18:44:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x1dc, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:18 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x600}) 18:44:18 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000011c0)=[{&(0x7f0000001100)=""/55}, {&(0x7f0000001200)=""/94}], 0x100000000000027c, 0x0, 0x0) 18:44:18 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xd) 18:44:18 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x604}) 18:44:18 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xfffffffe, 0x0) 18:44:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x22a, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:18 executing program 5: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 18:44:18 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0xe00}) 18:44:18 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xe) 18:44:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000140)=""/178, 0xb2}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000ac0)=[{&(0x7f00000009c0)=""/251, 0xfb}, {0x0}], 0x2) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100004) write(r5, &(0x7f0000000d80)="827cdd78c443b24d44c586d37951c430bbbd631fe2719ca007eb084b3af7d021402a5b37356394be4f27df09410322143e8288b5820d044a7ee2fdda201404678a5ec1a2e52dc00ee8ad4bb1946ea0be61189f752845eeb89cb982bf7491277d7d0a3a93b9964da0e3dc8c3f9876b81b1ed3042d2de02305a4346a8e0ab245748277cdf2e0127c4412b319fe0007ac841303a862159e0998d4ca6d9cee94751f1a7885b4f59c948ea786cb90139c3acfc204671d18ca81d2a86fccc8f4141cdfeb61f399c2d5047f11a7f7ffd07d7315cc5599882fe80b58ce2835794e2fa744917b9104114b33fcffff7fc48d60841c64703ccb4ef8b5945308d39679661dc7742bc4fc855aec385f48c22e370cc3375c0149e4a70f2440a07c05e9d87fb12c865b2a64a811bfedbf86666c58f71ee8fcfc6b629b75fd890b93f5cd67d19c67d32e60a5cdf01fe1c8ed71960e780d385e59f5454e15fd4bfc000000c7c85e605adef08c9df5ebb66239e79b71b8d7d027a01e48d0a4c0f8a48e5ab6789254312772", 0x2c63) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e005b1) shutdown(r3, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r6, &(0x7f0000000d80)="827cdd78c443b24d44c586d37951c430bbbd631fe2719ca007eb084b3af7d021402a5b37356394be4f27df09410322143e8288b5820d044a7ee2fdda201404678a5ec1a2e52dc00ee8ad4bb1946ea0be61189f752845eeb89cb982bf7491277d7d0a3a93b9964da0e3dc8c3f9876b81b1ed3042d2de02305a4346a8e0ab245748277cdf2e0127c4412b319fe0007ac841303a862159e0998d4ca6d9cee94751f1a7885b4f59c948ea786cb90139c3acfc204671d18ca81d2a86fccc8f4141cdfeb61f399c2d5047f11a7f7ffd07d7315cc5599882fe80b58ce2835794e2fa744917b9104114b33fcffff7fc48d60841c64703ccb4ef8b5945308d39679661dc7742bc4fc855aec385f48c22e370cc3375c0149e4a70f2440a07c05e9d87fb12c865b2a64a811bfedbf86666c58f71ee8fcfc6b629b75fd890b93f5cd67d19c67d32e60a5cdf01fe1c8ed71960e780d385e59f5454e15fd4bfc000000c7c85e605adef08c9df5ebb66239e79b71b8d7d027a01e48d0a4c0f8a48e5ab6789254312772", 0x2c63) shutdown(r4, 0x0) execve(0x0, 0x0, 0x0) 18:44:18 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0xffffffff, 0x0) 18:44:18 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x1900}) 18:44:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000008c0)=""/115, 0x73}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/139, 0x8b}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f00000004c0)=[{&(0x7f0000000640)=""/176, 0xb0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3806cfcb4148b6ae, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x52, 0x0) r6 = dup(r5) shutdown(r6, 0x0) shutdown(r3, 0x0) 18:44:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x270, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:18 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x10) 18:44:18 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x0) 18:44:18 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x4000}) 18:44:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x2c6, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x300, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:18 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x11) 18:44:18 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x2) 18:44:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0xfffffffffffffeac, 0x2}, 0x10) listen(r0, 0xe9) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x13, &(0x7f0000000180)=ANY=[], 0x9) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="10024e21ac1400aa"], 0x8c) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="10024e21ac1400aa"], 0x8c) 18:44:19 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x5400}) 18:44:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x310, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/112, 0x70}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000000), 0x0) poll(0x0, 0x0, 0x8000000000049) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0054f) r3 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffff9c}, {}, {}, {r4}, {}, {r3}], 0x6, 0x8000000000049) shutdown(r2, 0x0) 18:44:19 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x3) 18:44:19 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x12) 18:44:19 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x60ff}) 18:44:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x356, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)=""/102, 0x66}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r2, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0), 0x8) shutdown(r3, 0x0) 18:44:19 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x7f00}) 18:44:19 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x9700}) 18:44:19 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x4) 18:44:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x3c1, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:19 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x25) 18:44:19 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x104000}) 18:44:20 executing program 5: syz_emit_ethernet(0x70, &(0x7f0000000600)={@random="a19e1eb700", @random="47b8d38781c9", @val, {@ipv6}}, 0x0) 18:44:20 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x5) 18:44:20 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x48) 18:44:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x3d0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:20 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x400000}) 18:44:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x11, &(0x7f0000000000)=0xfffffffc, 0x4) 18:44:20 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x401000}) 18:44:20 executing program 5: truncate(0x0, 0xfffffffeffffffff) 18:44:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x4b, &(0x7f0000000580)='\x00\x00\x00\x00', 0x4) sendto$inet(r0, &(0x7f0000000140)="586e142fb7c02d72f2eabc61aa9ac86047831aa491157dffc36924089ac43a46bfe5ddf9469ee7e2422f76ce622dbac5343aadf8a3e070a6cbec8c17a15c8fcabe7db1f1da4c9883e9925d95a3c94c67da840b5364cf7eaa06a89e053b", 0x5d, 0x0, &(0x7f0000000240)={0x10, 0x2}, 0x10) 18:44:20 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x4c) 18:44:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x500, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:20 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x6) 18:44:20 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x4af000}) 18:44:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/237, 0xed}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xd051, 0x0, 0x0, 0x800e0053d) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/220, 0xdc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27be, 0x0, 0x0, 0x800e00539) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r3, 0x0) 18:44:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x600, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:20 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x68) 18:44:20 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x4fc000}) 18:44:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/126, 0x7e}], 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000740)=[{&(0x7f0000000540)=""/120, 0x78}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00508) shutdown(r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001580)="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", 0x170}, {&(0x7f0000001440)="067fa1c039e53ad246161dfeedd1934627983ad82c6ca8a94310fce5cefce7568d3f00d813c12917eca6a9ca791c8294da4a362afc5f3e66d4bfba077e8b6b9e8b329138d4fc988dea7efeed8d2e", 0x4e}, {&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000000200)="e62c", 0x2}, {&(0x7f0000000240)="1fec7246f8bc56c72dcda64e8a26f0169ad629e96398427c421748b8eb82c55ae27af92db0324f6f28b59aae2408b6adb6cc818ecc72f3891082510a6517e621dbe0740db6a3e7a6e5823548c87ce1313e474f41b7c8481561137558a67789", 0x5f}, {&(0x7f00000002c0)="047aa2f036b15312adc1427cfbccb964c518", 0x12}, {&(0x7f0000004400)="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", 0xdd0}], 0x7}, 0x0) shutdown(r4, 0x0) 18:44:20 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x6c) 18:44:20 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x7) 18:44:20 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x540000}) 18:44:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x700, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:20 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x74) 18:44:20 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x970000}) 18:44:20 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x8) 18:44:21 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, @in, 0x0, 0x0, 0x182}, 0x98) 18:44:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x900, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:21 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0xc04a01}) 18:44:21 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x9) 18:44:21 executing program 4: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f0000000000)="15", 0x1) 18:44:21 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x7a) 18:44:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0xa00, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:21 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0xc04f00}) 18:44:21 executing program 5: r0 = socket$inet6(0x1c, 0x3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000000), 0x4) sendto$inet6(r0, &(0x7f0000000180)="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", 0x4d9, 0x0, &(0x7f0000001180)={0x1c, 0x1c, 0x2}, 0x1c) 18:44:21 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xa) 18:44:21 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xb) 18:44:21 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0xf04a00}) 18:44:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0xb00, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:21 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x204) 18:44:21 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xc) 18:44:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000001c0)=""/84, 0x54}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000080)=""/45, 0x2d}, {0x0}, {0x0}], 0x3) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xcf1c, 0x0, 0x0, 0x800e00551) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000240)=""/210, 0xd2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x40002) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) shutdown(r4, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r6, &(0x7f0000003480)="dc11e430022fdc779f9b4d24bdd8fd586c6875b53dfa7d488f7f576b76d6631752d1dc6d62858c480074266f6c7ce209a81eeda7ced9e2a609d67edbdb33807baa39862cefecd836f1c56da1366b394b2b34d223344b07c7dcbf0ffacf3e9b52a5c868685a4657dbc694485e7c6bf6bfd719a78ab7475459ab4d48f65f700df04272ef99bc5c0d17ab6d9b158510ea84e436b3dea76caf9cffb0b6ff741e7df23989486491fe6ae2a187449f3e2007d939893806c20f2d24cbc9d1c54e9cba6110f23e2d6827889b4e827cf48558ac6d77d46c4c94a0e201249eb462258e9950d571044ee6", 0x5c96) shutdown(r5, 0x0) shutdown(r3, 0x0) 18:44:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000a00)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/216, 0xd8}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f0000000900)=[{&(0x7f0000000240)=""/152, 0x98}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xcf1c, 0x0, 0x0, 0x800e00551) shutdown(r4, 0x0) r6 = socket$inet_sctp(0x2, 0x800000000001, 0x84) listen(r6, 0x0) accept4$inet(r6, 0x0, 0x0, 0x0) shutdown(r5, 0x0) shutdown(r3, 0x0) 18:44:21 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x1000000}) 18:44:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0xc00, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:21 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x300) 18:44:21 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xd) 18:44:21 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x14ac000}) 18:44:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0xf00, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:21 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x402) 18:44:21 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xe) 18:44:21 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x2000000}) 18:44:21 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x2040000}) 18:44:22 executing program 4: symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0\x00') open$dir(&(0x7f00000002c0)='./file0\x00', 0x200, 0x0) 18:44:22 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x3c) 18:44:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x1003, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:22 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x10) 18:44:22 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x500) 18:44:22 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x3000000}) 18:44:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7, &(0x7f0000001ac0), &(0x7f0000001b80)=0x8c) 18:44:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x1100, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:22 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x600) 18:44:22 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x4000000}) 18:44:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xcab9, 0x0, 0x0, 0x800e00545) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xb2, 0x0, 0x0, 0x800e0053f) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)=""/146, 0x92}, {0x0}], 0x2}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xbfa8, 0x0, 0x0, 0x800e0053e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)=""/197, 0xc5}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xb}, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000001240)='./file0\x00', 0x0, 0x0) shutdown(r5, 0x0) shutdown(r3, 0x0) 18:44:22 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x11) 18:44:22 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000), 0x10) 18:44:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x155a, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:22 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x700) 18:44:22 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x6000000}) 18:44:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x2000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:22 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x900) 18:44:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/138, 0x8a}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0x4f}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0x2769, 0x0, 0x0, 0x800e00506) shutdown(r5, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) write(r7, &(0x7f0000003480)="dc11e430022fdc779f9b4d24bdd8fd586c6875b53dfa7d488f7f576b76d6631752d1dc6d62858c480074266f6c7ce209a81eeda7ced9e2a609d67edbdb33807baa39862cefecd836f1c56da1366b394b2b34d223344b07c7dcbf0ffacf3e9b52a5c868685a4657dbc694485e7c6bf6bfd719a78ab7475459ab4d48f65f700df04272ef99bc5c0d17ab6d9b158510ea84e436b3dea76caf9cffb0b6ff741e7df23989486491fe6ae2a187449f3e2007d939893806c20f2d24cbc9d1c54e9cba6110f23e2d6827889b4e827cf48558ac6d77d46c4c94a0e201249eb462258e9950d571044ee6", 0xff8b) shutdown(r6, 0x0) shutdown(r3, 0x0) 18:44:22 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x6040000}) 18:44:23 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x12) 18:44:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x2a02, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:23 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x14, &(0x7f0000000040)={0x1, [0x0]}, 0x6) 18:44:23 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xa00) 18:44:23 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0xe000000}) 18:44:23 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x25) 18:44:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x3a01, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x4788, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:23 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x10000000}) 18:44:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) read(r0, &(0x7f0000000040)=""/51, 0x33) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) poll(0x0, 0x0, 0x8000000000047) r3 = dup2(r1, r2) recvfrom$inet(r3, 0x0, 0xffffff51, 0x0, 0x0, 0x800e00511) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001440)="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", 0x166}, {&(0x7f00000001c0)="f6b4d690f90c889ffc32474d4811144c90c24846934999644803000000702907e229120c1f7c5d3bd21511486fc7caed049b9eab907d7443b7c23cdb854bed9af17da88b7965573f506529bf9bce17c9fcab4cb699e6edfde5fd060356fadef29c68b2df0b56f5f90449811583ce462f36b7488b0875a9c9ef7477cee7f6b0f3a67e329d631a224f10e70d8d758c5cb50c0f18f28ce0a62a47ae5d8a9bf06bcbeb435ca3f1dc92cc5223cb5cb13022aea43e82d086dbd104ac34563387c18cb04a848b3147cb049e948d8d9aa965810c4fef5680", 0xd4}, {&(0x7f00000002c0)="83af2abe9b83858383d4677ad2ba174ba3df8f5d730510391536be133c5a9456a39ba2b45df98ed71f8c370bff314611424b264627fc79be5f5307bd17c393fe87930276", 0x44}, {&(0x7f0000004500)="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", 0x10ab}, {&(0x7f0000001340)="1b0a64e3bc6aac003906ccf6e00354889ee77ad07a5d4de9e060cd8968cd9ad30d3d", 0x22}, {&(0x7f00000006c0)="295b63087aef99e4b734e91e4150b22f63e754f4ad961c82903a14a7e8e1028e78b3346ce2e00a304540bd3af2d028b04df323108e11f72929889466f634b85666b239e843a1617d9b1e51d675387b41eb2df506f0460c91f8d9703692405dcb32b76e6937f584f2637bb0c48499d3460ff53027cbd7acaa2fb04861b71a7b65366ba32def1d6ba329c6136e2969172745d25c36d780d02413a49c95f1ad259b8d918c70ad8ac35b028728e194e47c9956595ffcce6ca81a", 0xb8}, {&(0x7f0000001740)="26d92a83d528c3d4f1f27c9af046936d53a0d6a57ed05c098644f755d723e3b8d6d5a7d397afbbd1e4877cd88cadc8f149ad21c9c2f9849a484e97331890b3eb2e2692c3cac4c6f8b88c5dded7d154acbbaab92879de524071cc8a771c0b2e50b3fd5872aeb4e942df4293188c71a747ba0fdc20f934b935da607b74fe00b4835202650f1708d8f8748dcb61ff1880e4ca96141aef61523a6f7d2a50579a4eb2514a01f8cd9bd456c1e5a9c5e4c52b6b3fc71c7796726bb4933f854ee409ea44de8f5b78d59842dedf7b39c8cffd0747dde4c9118aebd8", 0xd7}, {&(0x7f0000002400)="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", 0xb27}], 0x8}, 0x0) shutdown(r2, 0x0) execve(0x0, 0x0, 0x0) 18:44:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000004c0)=[{&(0x7f00000016c0)=""/4096, 0x1000}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) poll(0x0, 0x0, 0x0) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x4b) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2ec, 0x0, 0x0, 0x800e00549) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {0x0}], 0x3}, 0x0) shutdown(r2, 0x0) 18:44:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x4888, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:23 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xb00) 18:44:23 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x48) 18:44:23 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x19000000}) 18:44:23 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xc00) 18:44:23 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x20000000}) 18:44:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x5600, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:24 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x4c) 18:44:24 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x7f000000}) 18:44:24 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xd00) 18:44:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) sendmsg(r0, &(0x7f0000000840)={&(0x7f0000000100)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[{0xfffffffffffffdc2}], 0x10}, 0x104) 18:44:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x5603, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:24 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x68) 18:44:24 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0xfeffffff}) 18:44:24 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xe00) 18:44:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/138, 0x8a}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)=""/79, 0x4f}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x2769, 0x0, 0x0, 0x800e00506) shutdown(r3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r5, &(0x7f0000003480)="dc11e430022fdc779f9b4d24bdd8fd586c6875b53dfa7d488f7f576b76d6631752d1dc6d62858c480074266f6c7ce209a81eeda7ced9e2a609d67edbdb33807baa39862cefecd836f1c56da1366b394b2b34d223344b07c7dcbf0ffacf3e9b52a5c868685a4657dbc694485e7c6bf6bfd719a78ab7475459ab4d48f65f700df04272ef99bc5c0d17ab6d9b158510ea84e436b3dea76caf9cffb0b6ff741e7df23989486491fe6ae2a187449f3e2007d939893806c20f2d24cbc9d1c54e9cba6110f23e2d6827889b4e827cf48558ac6d77d46c4c94a0e201249eb462258e9950d571044ee6", 0xff8b) shutdown(r4, 0x0) r7 = socket$inet6_sctp(0x1c, 0x1, 0x84) dup2(r7, r6) 18:44:24 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x6c) 18:44:24 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0xff600000}) 18:44:24 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x1100) 18:44:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x5865, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0x8) 18:44:24 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x74) 18:44:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/145, 0x91}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/134, 0x88}], 0x100000000000010c, 0x0, 0xb}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/30, 0x1e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/235, 0xeb}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x42) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r5, 0x0) r7 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r7, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) shutdown(r6, 0x0) shutdown(r3, 0x0) 18:44:24 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0xfffffffe}) 18:44:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x5a15, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:25 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x1200) 18:44:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x6000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:25 executing program 5: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xd335075fe790bb2, 0x0) pwritev(r0, &(0x7f0000001240)=[{&(0x7f0000000240)='m', 0x1}], 0x1, 0x9, 0x0) copy_file_range(r0, &(0x7f0000000100)=0xd3, r0, &(0x7f0000000140)=0x4, 0x7, 0x0) 18:44:25 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x7a) 18:44:25 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0xffffffff}) 18:44:25 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x1f00) 18:44:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x6558, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:25 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x2500) 18:44:25 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:44:25 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000000780)={@local, @empty, @val, {@ipv6}}, 0x0) 18:44:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x7002, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:25 executing program 5: pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r0, 0x4, 0x10044) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) dup2(r1, r0) 18:44:25 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x4000) 18:44:25 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x204) 18:44:25 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0x2}) 18:44:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000880)=""/176, 0xb0}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r2) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/202, 0xca}], 0x1}, 0x0) recvfrom$inet(r3, 0x0, 0x1e51de7a2ef3af5, 0x0, 0x0, 0x800e0072e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf8, 0x0, 0x0, 0x800e00546) ppoll(0x0, 0x0, 0x0, &(0x7f0000000240), 0x8) shutdown(r3, 0x0) 18:44:25 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0x3}) 18:44:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x8100, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:25 executing program 5: mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 18:44:26 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x300) 18:44:26 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x4800) 18:44:26 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0x4}) 18:44:26 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x402) 18:44:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x8847, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:26 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x4c00) 18:44:26 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0x6}) 18:44:26 executing program 5: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000000)=0x1ff, 0x4) socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="0a0000000000000026c912a440ff5ffa8341e8270596f4ed4af5e4b7e38d34d7000000000000"], 0xa, &(0x7f0000000080)=[{&(0x7f0000000040)="fcfc00302b292e987e245ff0c36fb11c00775e1c01800200b5e9630d0000005200d5208d87c4df5f0b20310068000000", 0x30}], 0x1}, 0x0) 18:44:26 executing program 4: setuid(0xffffffffffffffff) mknodat(0xffffffffffffffff, 0x0, 0xe008, 0x0) 18:44:26 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0xe}) 18:44:26 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x500) 18:44:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x8848, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:26 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x6800) 18:44:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/196, 0xc4}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x1fc0, 0x0, 0x0, 0x800e00509) shutdown(r2, 0x0) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r4, r5) shutdown(r5, 0x0) 18:44:26 executing program 4: syz_emit_ethernet(0x6a, &(0x7f0000000040)={@random="89f499ca724e", @local, @val, {@ipv4}}, 0x0) 18:44:26 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x6c00) 18:44:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x8a00, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:26 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x600) 18:44:27 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x7400) 18:44:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) readv(r0, &(0x7f0000000c80)=[{&(0x7f0000000240)=""/177, 0xb1}], 0x69) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000009c0)=""/180, 0xb4}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/34, 0x22}, {0x0}, {0x0}], 0x3}, 0x42) recvfrom$inet(r4, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r3, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) flock(r5, 0x40000003) shutdown(r4, 0x0) shutdown(r2, 0x0) 18:44:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x9a01, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:29 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0x10}) 18:44:29 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x700) 18:44:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0xaa00, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:29 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x7a00) 18:44:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/4083, 0xff3}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000680)=""/168, 0xa8}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r4, &(0x7f00000019c0)=[{&(0x7f0000000000)=""/54, 0x36}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa) shutdown(r3, 0x0) 18:44:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x1014a, 0x0, 0x0, 0x800e00515) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/172, 0xac}], 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000080)={0x0, 0x10000}, 0x10) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000040)=""/62, 0x3e}], 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e005b5) shutdown(r3, 0x0) 18:44:29 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x900) 18:44:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0xba00, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:30 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x1000000) 18:44:30 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xa00) 18:44:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0xc103, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:30 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x2000000) 18:44:32 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0x19}) 18:44:32 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xb00) 18:44:32 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x2040000) 18:44:32 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x8, 0x2d, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:44:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x19, &(0x7f0000000000), 0x4) 18:44:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0xc602, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:33 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x3000000) 18:44:33 executing program 4: r0 = socket(0x1, 0x5, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xa8}}, 0x0) 18:44:33 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xc00) 18:44:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x88, 0x67, &(0x7f0000000000)={@multicast2, @dev}, 0x8) 18:44:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x894b, &(0x7f0000000100)={'vlan0\x00', @ifru_mtu}) 18:44:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0xd003, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:35 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0x204}) 18:44:35 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x4000000) 18:44:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0x40, 0x4, 0x200, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) 18:44:35 executing program 4: pipe(&(0x7f0000000000)) pipe2$9p(&(0x7f00000002c0), 0x80000) 18:44:35 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xd00) 18:44:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0xdc01, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:36 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x100, 0x0) 18:44:36 executing program 4: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0xfffffc69) 18:44:36 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f00000020c0)='/dev/full\x00', 0x2000, 0x0) 18:44:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0xfa00, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:36 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x5000000) 18:44:36 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xe00) [ 1047.685542][ T3236] ieee802154 phy0 wpan0: encryption failed: -22 [ 1047.691810][ T3236] ieee802154 phy1 wpan1: encryption failed: -22 18:44:39 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0x300}) 18:44:39 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000002a00)) 18:44:39 executing program 5: r0 = epoll_create1(0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000020c0)='/dev/full\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 18:44:39 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x1100) 18:44:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x34000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:39 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x6000000) 18:44:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x200000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:39 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x7000000) 18:44:39 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x1200) 18:44:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4, 0x2}]}, 0x18}}, 0x0) 18:44:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x400300, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:39 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x1f00) [ 1050.328340][T30587] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 1050.376698][T30592] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 18:44:42 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0x402}) 18:44:42 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x8000000) 18:44:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x800000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:42 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x2500) 18:44:42 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="10040000150001"], 0x410}}, 0x0) 18:44:42 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', r0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00', r1) 18:44:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x1000000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1403, 0x1}, 0x10}}, 0x0) 18:44:42 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x9000000) 18:44:42 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x4000) 18:44:42 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], r1}, 0x40) 18:44:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x2000000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:45 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0x406}) 18:44:45 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 18:44:45 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xa000000) 18:44:45 executing program 5: bpf$MAP_CREATE(0x12, &(0x7f00000030c0), 0x40) 18:44:45 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x4800) 18:44:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x3000000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x4000000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) 18:44:45 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000bc0)='tmpfs\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00)={[{@nr_inodes={'nr_inodes', 0x3d, [0x0]}}]}) 18:44:45 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x4c00) 18:44:45 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xb000000) 18:44:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x5000000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1056.425295][T30668] tmpfs: Bad value for 'nr_inodes' [ 1056.438597][T30668] tmpfs: Bad value for 'nr_inodes' 18:44:48 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0x600}) 18:44:48 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000000b40)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)=""/180, 0xb4}], 0x1}}], 0x1, 0x10022, &(0x7f0000000bc0)) 18:44:48 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x6800) 18:44:48 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xc000000) 18:44:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x6000000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:48 executing program 4: openat$bsg(0xffffff9c, 0x0, 0x410000, 0x0) 18:44:48 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x302) 18:44:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x7000000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:48 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x6c00) 18:44:48 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xd000000) 18:44:48 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 18:44:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000010dc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}], 0xa}], 0x1, 0x0) 18:44:51 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0x604}) 18:44:51 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x7400) 18:44:51 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xe000000) 18:44:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x8000000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:44:51 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000016c0)=ANY=[@ANYBLOB="4c000000124001"], 0x4c}}, 0x0) 18:44:51 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0) 18:44:51 executing program 4: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0xe000) 18:44:51 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x7a00) 18:44:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x9000000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:51 executing program 5: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x200000, 0x0) 18:44:51 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x10000000) 18:44:54 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0xe00}) 18:44:54 executing program 4: setresuid(0x0, 0xee01, 0xffffffffffffffff) r0 = geteuid() setresuid(r0, r0, 0x0) setresuid(0x0, 0x0, 0x0) 18:44:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0xa000000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:54 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x1000000) 18:44:54 executing program 5: pipe2(&(0x7f0000000140), 0x80000) 18:44:54 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x11000000) 18:44:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0xb000000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:54 executing program 4: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) keyctl$get_keyring_id(0x0, r0, 0x0) 18:44:54 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x12000000) 18:44:54 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x2000000) 18:44:54 executing program 5: setresuid(0x0, 0xee01, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) 18:44:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0xc000000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:57 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCDELRT(r0, 0x40087602, 0x0) 18:44:57 executing program 4: add_key$keyring(&(0x7f0000000280)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000800)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000600)='dns_resolver\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)='cifs.idmap\x00', 0x0) 18:44:57 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0x1900}) 18:44:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x1f000000) 18:44:57 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x2040000) 18:44:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0xf000000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:57 executing program 5: socket$inet(0x2, 0x2, 0x2744000) 18:44:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x10000000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:44:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x25000000) 18:44:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8907, 0x0) 18:44:57 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x3000000) 18:44:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x40000000) 18:44:57 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, 0x0) [ 1071.512740][T30829] ================================================================== [ 1071.520829][T30829] BUG: KCSAN: data-race in __ptrace_unlink / ptrace_stop [ 1071.527831][T30829] [ 1071.530140][T30829] write to 0xffff88810e9b802c of 4 bytes by task 30827 on cpu 0: [ 1071.537861][T30829] ptrace_stop+0x392/0x650 [ 1071.542256][T30829] get_signal+0x80a/0x14e0 [ 1071.546652][T30829] arch_do_signal_or_restart+0x2a/0x270 [ 1071.552177][T30829] exit_to_user_mode_prepare+0x11a/0x1b0 [ 1071.557790][T30829] syscall_exit_to_user_mode+0x20/0x40 [ 1071.563338][T30829] do_syscall_64+0x45/0x80 [ 1071.567734][T30829] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1071.573606][T30829] [ 1071.575908][T30829] read to 0xffff88810e9b802c of 4 bytes by task 30829 on cpu 1: [ 1071.583641][T30829] __ptrace_unlink+0x187/0x300 [ 1071.588393][T30829] __ptrace_detach+0x1b/0x1a0 [ 1071.593047][T30829] exit_ptrace+0x93/0x160 [ 1071.597357][T30829] do_exit+0x11f3/0x15e0 [ 1071.601578][T30829] do_group_exit+0xce/0x180 [ 1071.606062][T30829] get_signal+0xdce/0x14e0 [ 1071.610460][T30829] arch_do_signal_or_restart+0x2a/0x270 [ 1071.615989][T30829] exit_to_user_mode_prepare+0x11a/0x1b0 [ 1071.621662][T30829] syscall_exit_to_user_mode+0x20/0x40 [ 1071.627106][T30829] do_syscall_64+0x45/0x80 [ 1071.631555][T30829] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1071.637432][T30829] [ 1071.639736][T30829] Reported by Kernel Concurrency Sanitizer on: [ 1071.645860][T30829] CPU: 1 PID: 30829 Comm: syz-executor.0 Not tainted 5.12.0-rc4-syzkaller #0 18:45:00 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0x4000}) 18:45:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x10030000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:45:00 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000440)='syzkaller\x00', 0x0, 0xf1, &(0x7f0000000480)=""/241, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:45:00 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x4000000) 18:45:00 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x48000000) 18:45:00 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x6, &(0x7f0000000400)=@framed={{}, [@call, @map={0x18, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000440)='syzkaller\x00', 0x3, 0xf1, &(0x7f0000000480)=""/241, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1071.654595][T30829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1071.664628][T30829] ================================================================== 18:45:00 executing program 4: io_uring_setup(0x1daa, &(0x7f00000003c0)={0x0, 0x3f37}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000008640)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x6912564a, 0x7, 0x10001}, 0x8, [0x0]}) 18:45:00 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x5000000) 18:45:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x11000000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:45:00 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:45:00 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x4c000000) 18:45:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x2a020000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:45:03 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x6000000) 18:45:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x15, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 18:45:03 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0x5400}) 18:45:03 executing program 5: r0 = openat$nullb(0xffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000000c0)) 18:45:03 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x68000000) 18:45:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x3a010000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:45:03 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x7000000) 18:45:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x56000000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:45:03 executing program 5: futex(&(0x7f0000000240), 0x1, 0x0, &(0x7f00000002c0), 0x0, 0x0) 18:45:03 executing program 4: r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000200), 0xffffffffffffffab) 18:45:03 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x8000000) 18:45:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x56030000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:45:03 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x6c000000) 18:45:03 executing program 5: perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:45:06 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0x60ff}) 18:45:06 executing program 4: r0 = syz_open_dev$audion(0x0, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0xfc86) syz_genetlink_get_family_id$l2tp(0x0, r1) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x3, &(0x7f0000001380)=[{0x0}, {&(0x7f0000001180)="7908776e2899ea575f6463e0f5a067a4239429456ce7cb9a4794140cdb758696f75661f728607a971d36fb9bb6529051198e07163347cc73693a1983fb739ee217f67d567ff0c7401993b13c17a930147cc6f861841e50b5b1f570337c86dcf1040bb76d178be7399b4463dee47bc3a178d5185371170c0a0aa2cc1b9aa8f676c91419ceb56614418c6418a203c7086c197b9bbf51192d173a7bf3de7c77fbd88d5064e373d8f76b6fa74dc388229995dc7f1f32995f696bbe49e670dd2722ffdfa28f39f42d81cdf2ce2d8a96a9a25fa768d5d1d2f89a43c1c3316a70869f0aa270339a0dd956e9c1", 0xe9, 0x3}, {&(0x7f0000001280)="2d8cfaee582d0d2074ae2443b039072a54eeb15670e1a582ae98a43de196cbb56964d981e037c03391e206f6e93b5cc74a712a7653d9588f9a6c6f99d7d1dc63706a4b4d0b197a46038a36980e9cb214896ae55a9dcde90cdbafca6306f2dd372d23e98f5a2ae6ba58d4f2cde71a715f58aec91bd950d353323b39ad0bf8c2fc", 0x80, 0x80}], 0x0, &(0x7f0000001440)={[{@utf8='utf8'}, {@disable_sparse_no='disable_sparse=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@case_sensitive_yes='case_sensitive=yes'}], [{@obj_user={'obj_user', 0x3d, '/dev/audio#\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0xc4de}}, {@obj_type={'obj_type', 0x3d, '/dev/audio#\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x61, 0x52, 0x0, 0x0, 0x0, 0x39, 0x34], 0x2d, [0x61, 0x63, 0x33, 0x34], 0x2d, [], 0x2d, [0x35, 0x33, 0x66, 0x3], 0x2d, [0x33, 0x62, 0x36, 0x62, 0x0, 0x0, 0x0, 0x61]}}}]}) 18:45:06 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x9000000) 18:45:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x5a150000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:45:06 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x74000000) 18:45:06 executing program 5: r0 = socket(0x1e, 0x1, 0x0) ioctl$IMCTRLREQ(r0, 0x80044945, 0x0) 18:45:06 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000004c0)={0x5, 0x10, 0xfa00, {0x0, r2}}, 0x18) 18:45:06 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x7a000000) 18:45:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 18:45:06 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xfeffffff) 18:45:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x60000000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:45:06 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xa000000) 18:45:09 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x1a9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0x7f00}) 18:45:09 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xfffffffe) 18:45:09 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xb000000) 18:45:09 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg(r0, &(0x7f0000001700)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20010062) 18:45:09 executing program 5: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004105) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x8], 0x1}) mmap$xdp(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x10, 0xffffffffffffffff, 0x100000000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 18:45:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x65580000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:45:09 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xc000000) 18:45:09 executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000c00)={0x0, 0x0, 0x0, {0xa, @pix_mp}}) 18:45:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x70020000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:45:09 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0xffffffff) 18:45:09 executing program 4: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004105) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x8], 0x1}) mmap$xdp(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x2, 0x10, 0xffffffffffffffff, 0x100000000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 18:45:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x17b, 0x81000000, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)