syzkaller login: [ 264.322721][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 264.364440][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 264.402035][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 264.436959][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:24946' (ECDSA) to the list of known hosts. 1970/01/01 00:04:59 fuzzer started 1970/01/01 00:05:12 dialing manager at localhost:35327 [ 317.465929][ T2026] cgroup: Unknown subsys name 'net' [ 318.498157][ T2026] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:05:18 syscalls: 2827 1970/01/01 00:05:18 code coverage: enabled 1970/01/01 00:05:18 comparison tracing: enabled 1970/01/01 00:05:18 extra coverage: enabled 1970/01/01 00:05:18 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:05:18 setuid sandbox: enabled 1970/01/01 00:05:18 namespace sandbox: enabled 1970/01/01 00:05:18 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:05:18 fault injection: enabled 1970/01/01 00:05:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:05:18 net packet injection: enabled 1970/01/01 00:05:18 net device setup: enabled 1970/01/01 00:05:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:05:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:05:18 USB emulation: enabled 1970/01/01 00:05:18 hci packet injection: /dev/vhci does not exist 1970/01/01 00:05:18 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:05:18 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:05:18 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:05:23 fetching corpus: 48, signal 28531/31937 (executing program) 1970/01/01 00:05:25 fetching corpus: 97, signal 41327/46037 (executing program) 1970/01/01 00:05:30 fetching corpus: 147, signal 53663/59392 (executing program) 1970/01/01 00:05:33 fetching corpus: 196, signal 58385/65307 (executing program) 1970/01/01 00:05:36 fetching corpus: 246, signal 65031/72949 (executing program) 1970/01/01 00:05:38 fetching corpus: 295, signal 70335/79221 (executing program) 1970/01/01 00:05:41 fetching corpus: 344, signal 75404/85138 (executing program) 1970/01/01 00:05:44 fetching corpus: 392, signal 78306/88983 (executing program) 1970/01/01 00:05:47 fetching corpus: 442, signal 82998/94376 (executing program) 1970/01/01 00:05:50 fetching corpus: 491, signal 87548/99570 (executing program) 1970/01/01 00:05:52 fetching corpus: 540, signal 91303/103962 (executing program) 1970/01/01 00:05:56 fetching corpus: 590, signal 94686/107976 (executing program) 1970/01/01 00:05:58 fetching corpus: 639, signal 97752/111579 (executing program) 1970/01/01 00:06:01 fetching corpus: 689, signal 100223/114625 (executing program) 1970/01/01 00:06:03 fetching corpus: 738, signal 102670/117685 (executing program) 1970/01/01 00:06:06 fetching corpus: 788, signal 106412/121739 (executing program) 1970/01/01 00:06:12 fetching corpus: 838, signal 109132/124843 (executing program) 1970/01/01 00:06:15 fetching corpus: 886, signal 110693/126950 (executing program) 1970/01/01 00:06:20 fetching corpus: 935, signal 113982/130423 (executing program) 1970/01/01 00:06:23 fetching corpus: 983, signal 116251/133026 (executing program) 1970/01/01 00:06:25 fetching corpus: 1032, signal 118926/135840 (executing program) 1970/01/01 00:06:28 fetching corpus: 1080, signal 120506/137775 (executing program) 1970/01/01 00:06:31 fetching corpus: 1130, signal 123218/140554 (executing program) 1970/01/01 00:06:33 fetching corpus: 1180, signal 125198/142745 (executing program) 1970/01/01 00:06:36 fetching corpus: 1229, signal 127534/145147 (executing program) 1970/01/01 00:06:39 fetching corpus: 1278, signal 129778/147494 (executing program) 1970/01/01 00:06:41 fetching corpus: 1328, signal 133992/151129 (executing program) 1970/01/01 00:06:43 fetching corpus: 1377, signal 137867/154470 (executing program) 1970/01/01 00:06:46 fetching corpus: 1426, signal 139643/156286 (executing program) 1970/01/01 00:06:48 fetching corpus: 1476, signal 144543/160149 (executing program) 1970/01/01 00:06:51 fetching corpus: 1526, signal 146309/161852 (executing program) 1970/01/01 00:06:54 fetching corpus: 1576, signal 147725/163269 (executing program) 1970/01/01 00:06:56 fetching corpus: 1626, signal 148930/164497 (executing program) 1970/01/01 00:06:59 fetching corpus: 1676, signal 150495/165964 (executing program) 1970/01/01 00:07:02 fetching corpus: 1726, signal 152319/167515 (executing program) 1970/01/01 00:07:04 fetching corpus: 1775, signal 153984/168922 (executing program) 1970/01/01 00:07:07 fetching corpus: 1825, signal 155171/170047 (executing program) 1970/01/01 00:07:10 fetching corpus: 1874, signal 157791/172002 (executing program) 1970/01/01 00:07:11 fetching corpus: 1923, signal 158654/172880 (executing program) 1970/01/01 00:07:14 fetching corpus: 1970, signal 160022/174052 (executing program) 1970/01/01 00:07:16 fetching corpus: 2020, signal 161300/175129 (executing program) 1970/01/01 00:07:18 fetching corpus: 2070, signal 162497/176117 (executing program) 1970/01/01 00:07:21 fetching corpus: 2120, signal 164212/177390 (executing program) 1970/01/01 00:07:23 fetching corpus: 2169, signal 165422/178351 (executing program) 1970/01/01 00:07:25 fetching corpus: 2219, signal 166454/179174 (executing program) 1970/01/01 00:07:27 fetching corpus: 2269, signal 167432/179977 (executing program) 1970/01/01 00:07:30 fetching corpus: 2319, signal 168382/180765 (executing program) 1970/01/01 00:07:32 fetching corpus: 2369, signal 169399/181544 (executing program) 1970/01/01 00:07:35 fetching corpus: 2418, signal 170497/182360 (executing program) 1970/01/01 00:07:38 fetching corpus: 2466, signal 171518/183091 (executing program) 1970/01/01 00:07:40 fetching corpus: 2515, signal 172398/183733 (executing program) 1970/01/01 00:07:43 fetching corpus: 2565, signal 173441/184419 (executing program) 1970/01/01 00:07:45 fetching corpus: 2613, signal 173976/184835 (executing program) 1970/01/01 00:07:47 fetching corpus: 2663, signal 175088/185515 (executing program) 1970/01/01 00:07:50 fetching corpus: 2713, signal 179023/187324 (executing program) 1970/01/01 00:07:55 fetching corpus: 2763, signal 180321/188019 (executing program) 1970/01/01 00:07:58 fetching corpus: 2812, signal 181123/188464 (executing program) 1970/01/01 00:08:01 fetching corpus: 2861, signal 181928/188940 (executing program) 1970/01/01 00:08:04 fetching corpus: 2911, signal 182774/189390 (executing program) 1970/01/01 00:08:06 fetching corpus: 2960, signal 183539/189779 (executing program) 1970/01/01 00:08:08 fetching corpus: 3010, signal 184466/190233 (executing program) 1970/01/01 00:08:11 fetching corpus: 3058, signal 185098/190532 (executing program) 1970/01/01 00:08:13 fetching corpus: 3107, signal 185953/190910 (executing program) 1970/01/01 00:08:15 fetching corpus: 3156, signal 186600/191204 (executing program) 1970/01/01 00:08:18 fetching corpus: 3206, signal 187579/191592 (executing program) 1970/01/01 00:08:21 fetching corpus: 3254, signal 188236/191875 (executing program) 1970/01/01 00:08:24 fetching corpus: 3304, signal 189179/192189 (executing program) 1970/01/01 00:08:27 fetching corpus: 3354, signal 189817/192448 (executing program) 1970/01/01 00:08:29 fetching corpus: 3404, signal 190796/192764 (executing program) 1970/01/01 00:08:30 fetching corpus: 3435, signal 191243/192927 (executing program) 1970/01/01 00:08:31 fetching corpus: 3435, signal 191246/192996 (executing program) 1970/01/01 00:08:31 fetching corpus: 3435, signal 191246/193034 (executing program) 1970/01/01 00:08:31 fetching corpus: 3436, signal 191308/193090 (executing program) 1970/01/01 00:08:31 fetching corpus: 3436, signal 191308/193115 (executing program) 1970/01/01 00:08:31 fetching corpus: 3436, signal 191308/193140 (executing program) 1970/01/01 00:08:31 fetching corpus: 3436, signal 191308/193166 (executing program) 1970/01/01 00:08:32 fetching corpus: 3436, signal 191308/193193 (executing program) 1970/01/01 00:08:32 fetching corpus: 3436, signal 191308/193218 (executing program) 1970/01/01 00:08:32 fetching corpus: 3436, signal 191308/193245 (executing program) 1970/01/01 00:08:32 fetching corpus: 3436, signal 191308/193269 (executing program) 1970/01/01 00:08:32 fetching corpus: 3436, signal 191308/193306 (executing program) 1970/01/01 00:08:32 fetching corpus: 3436, signal 191308/193328 (executing program) 1970/01/01 00:08:32 fetching corpus: 3436, signal 191308/193361 (executing program) 1970/01/01 00:08:33 fetching corpus: 3436, signal 191308/193390 (executing program) 1970/01/01 00:08:33 fetching corpus: 3436, signal 191308/193421 (executing program) 1970/01/01 00:08:33 fetching corpus: 3436, signal 191308/193450 (executing program) 1970/01/01 00:08:33 fetching corpus: 3436, signal 191308/193481 (executing program) 1970/01/01 00:08:33 fetching corpus: 3436, signal 191310/193519 (executing program) 1970/01/01 00:08:34 fetching corpus: 3436, signal 191310/193545 (executing program) 1970/01/01 00:08:34 fetching corpus: 3436, signal 191310/193570 (executing program) 1970/01/01 00:08:34 fetching corpus: 3436, signal 191310/193596 (executing program) 1970/01/01 00:08:34 fetching corpus: 3436, signal 191310/193620 (executing program) 1970/01/01 00:08:34 fetching corpus: 3436, signal 191310/193644 (executing program) 1970/01/01 00:08:34 fetching corpus: 3436, signal 191310/193666 (executing program) 1970/01/01 00:08:35 fetching corpus: 3436, signal 191310/193689 (executing program) 1970/01/01 00:08:35 fetching corpus: 3436, signal 191310/193716 (executing program) 1970/01/01 00:08:35 fetching corpus: 3436, signal 191310/193716 (executing program) 1970/01/01 00:10:17 starting 2 fuzzer processes 00:10:17 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "d7f8000000009a0a"}}, 0x48}}, 0x0) 00:10:17 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) fallocate(r0, 0x0, 0x0, 0x10001) lseek(r0, 0x0, 0x0) [ 643.224977][ T2039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.745374][ T2039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.844934][ T2038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.494808][ T2038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.682533][ T2039] device hsr_slave_0 entered promiscuous mode [ 655.712003][ T2039] device hsr_slave_1 entered promiscuous mode [ 657.483477][ T2038] device hsr_slave_0 entered promiscuous mode [ 657.512300][ T2038] device hsr_slave_1 entered promiscuous mode [ 657.555016][ T2038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 657.562948][ T2038] Cannot create hsr debugfs directory [ 664.620378][ T2039] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 664.737695][ T2039] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 664.814285][ T2039] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 664.893464][ T2039] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 666.246154][ T2038] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 666.376049][ T2038] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 666.526210][ T2038] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 666.726458][ T2038] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 675.501958][ T2039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.267956][ T84] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 676.361949][ T84] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 678.295193][ T2038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.671695][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 678.737094][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 685.061753][ T2334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 685.117217][ T2334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 685.177634][ T2334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 685.221190][ T2334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 685.254604][ T2334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 685.504202][ T2663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 686.895002][ T2039] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 686.896831][ T2039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 687.138598][ T2663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 687.205074][ T2663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 687.236344][ T2663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 687.256149][ T2663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 687.276159][ T2663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 687.308498][ T2663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 687.454475][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 687.503310][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 687.537694][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 687.892195][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 688.298002][ T2373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 688.885875][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 688.916200][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 689.262926][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 689.312078][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 689.642224][ T2663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 689.685239][ T2663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 689.905527][ T2038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 691.272802][ T2334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 691.275781][ T2334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 710.360524][ T84] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 710.434259][ T84] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 712.283467][ T2373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 712.381789][ T2373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 717.361600][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 717.394135][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 717.529910][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 717.555674][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 717.597016][ T2039] device veth0_vlan entered promiscuous mode [ 718.274482][ T2039] device veth1_vlan entered promiscuous mode [ 719.986153][ T2334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 720.043720][ T2334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 720.241788][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 720.304038][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 720.444948][ T2039] device veth0_macvtap entered promiscuous mode [ 720.601399][ T2038] device veth0_vlan entered promiscuous mode [ 720.850748][ T2039] device veth1_macvtap entered promiscuous mode [ 721.074302][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 721.128095][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 721.184125][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 721.644298][ T2038] device veth1_vlan entered promiscuous mode [ 722.367473][ T2373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 722.407617][ T2373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 722.697333][ T84] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 722.755085][ T84] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 723.076353][ T2039] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.082343][ T2039] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.083893][ T2039] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.085351][ T2039] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.369789][ T2038] device veth0_macvtap entered promiscuous mode [ 724.667881][ T2663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 724.772556][ T2663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 724.823885][ T2663] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 724.885428][ T2038] device veth1_macvtap entered promiscuous mode [ 725.907870][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 725.956335][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 726.306783][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 726.363946][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 726.591174][ T2038] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.593154][ T2038] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.594576][ T2038] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.596120][ T2038] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:12:13 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) fallocate(r0, 0x0, 0x0, 0x10001) lseek(r0, 0x0, 0x0) 00:12:14 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "d7f8000000009a0a"}}, 0x48}}, 0x0) 00:12:20 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "d7f8000000009a0a"}}, 0x48}}, 0x0) 00:12:20 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) fallocate(r0, 0x0, 0x0, 0x10001) lseek(r0, 0x0, 0x0) 00:12:27 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "d7f8000000009a0a"}}, 0x48}}, 0x0) 00:12:28 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) fallocate(r0, 0x0, 0x0, 0x10001) lseek(r0, 0x0, 0x0) 00:12:34 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) fallocate(r0, 0x0, 0x0, 0x10001) lseek(r0, 0x0, 0x0) 00:12:38 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) fallocate(r0, 0x0, 0x0, 0x10001) lseek(r0, 0x0, 0x0) 00:12:40 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) fallocate(r0, 0x0, 0x0, 0x10001) lseek(r0, 0x0, 0x0) 00:12:43 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) fallocate(r0, 0x0, 0x0, 0x10001) lseek(r0, 0x0, 0x0) 00:12:45 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) fallocate(r0, 0x0, 0x0, 0x10001) lseek(r0, 0x0, 0x0) 00:12:47 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) fallocate(r0, 0x0, 0x0, 0x10001) lseek(r0, 0x0, 0x0) 00:12:51 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) pwritev(r1, &(0x7f0000003200)=[{&(0x7f0000003280)="95", 0x1}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) 00:12:55 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000003740)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) [ 776.396903][ T26] audit: type=1804 audit(775.360:2): pid=2757 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1964055499/syzkaller.kB2F1d/7/file0" dev="vda" ino=640 res=1 errno=0 00:12:57 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) pwritev(r1, &(0x7f0000003200)=[{&(0x7f0000003280)="95", 0x1}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) 00:12:59 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000003740)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) [ 781.531558][ T26] audit: type=1804 audit(780.510:3): pid=2761 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1964055499/syzkaller.kB2F1d/8/file0" dev="vda" ino=640 res=1 errno=0 00:13:02 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) pwritev(r1, &(0x7f0000003200)=[{&(0x7f0000003280)="95", 0x1}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) 00:13:03 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000003740)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) [ 786.030711][ T26] audit: type=1804 audit(785.020:4): pid=2765 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1964055499/syzkaller.kB2F1d/9/file0" dev="vda" ino=635 res=1 errno=0 00:13:06 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) pwritev(r1, &(0x7f0000003200)=[{&(0x7f0000003280)="95", 0x1}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) 00:13:07 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000003740)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) [ 789.919957][ T26] audit: type=1804 audit(788.920:5): pid=2769 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1964055499/syzkaller.kB2F1d/10/file0" dev="vda" ino=639 res=1 errno=0 00:13:11 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000003740)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 00:13:12 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000003740)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 00:13:14 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000003740)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 00:13:15 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000003740)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 00:13:17 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000003740)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 00:13:19 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000003740)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 00:13:21 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) pwritev(r1, &(0x7f0000003200)=[{&(0x7f0000003280)="95", 0x1}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) [ 804.648365][ T26] audit: type=1804 audit(803.650:6): pid=2785 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1964055499/syzkaller.kB2F1d/14/file0" dev="vda" ino=644 res=1 errno=0 00:13:25 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) pwritev(r1, &(0x7f0000003200)=[{&(0x7f0000003280)="95", 0x1}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) 00:13:25 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) pwritev(r1, &(0x7f0000003200)=[{&(0x7f0000003280)="95", 0x1}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) [ 808.057212][ T26] audit: type=1804 audit(807.060:7): pid=2787 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2953285942/syzkaller.uCQLga/14/file0" dev="vda" ino=637 res=1 errno=0 [ 809.088099][ T26] audit: type=1804 audit(808.090:8): pid=2789 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1964055499/syzkaller.kB2F1d/15/file0" dev="vda" ino=645 res=1 errno=0 00:13:29 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) pwritev(r1, &(0x7f0000003200)=[{&(0x7f0000003280)="95", 0x1}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) 00:13:29 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) pwritev(r1, &(0x7f0000003200)=[{&(0x7f0000003280)="95", 0x1}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) [ 812.192112][ T26] audit: type=1804 audit(811.190:9): pid=2791 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2953285942/syzkaller.uCQLga/15/file0" dev="vda" ino=640 res=1 errno=0 [ 813.417288][ T26] audit: type=1804 audit(812.410:10): pid=2793 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1964055499/syzkaller.kB2F1d/16/file0" dev="vda" ino=645 res=1 errno=0 00:13:32 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) pwritev(r1, &(0x7f0000003200)=[{&(0x7f0000003280)="95", 0x1}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) 00:13:34 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) pwritev(r1, &(0x7f0000003200)=[{&(0x7f0000003280)="95", 0x1}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) [ 816.333743][ T26] audit: type=1804 audit(815.340:11): pid=2795 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2953285942/syzkaller.uCQLga/16/file0" dev="vda" ino=640 res=1 errno=0 [ 817.961243][ T26] audit: type=1804 audit(816.950:12): pid=2797 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1964055499/syzkaller.kB2F1d/17/file0" dev="vda" ino=645 res=1 errno=0 00:13:39 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) pwritev(r1, &(0x7f0000003200)=[{&(0x7f0000003280)="95", 0x1}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) 00:13:39 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) pwritev(r1, &(0x7f0000003200)=[{&(0x7f0000003280)="95", 0x1}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) [ 822.204767][ T26] audit: type=1804 audit(821.180:13): pid=2800 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2953285942/syzkaller.uCQLga/17/file0" dev="vda" ino=644 res=1 errno=0 [ 822.434847][ T26] audit: type=1804 audit(821.430:14): pid=2801 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1964055499/syzkaller.kB2F1d/18/file0" dev="vda" ino=645 res=1 errno=0 00:13:42 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) pwritev(r1, &(0x7f0000003200)=[{&(0x7f0000003280)="95", 0x1}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) 00:13:43 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) pwritev(r1, &(0x7f0000003200)=[{&(0x7f0000003280)="95", 0x1}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) [ 826.070097][ T26] audit: type=1804 audit(825.000:15): pid=2804 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2953285942/syzkaller.uCQLga/18/file0" dev="vda" ino=644 res=1 errno=0 [ 826.976092][ T26] audit: type=1804 audit(825.980:16): pid=2805 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1964055499/syzkaller.kB2F1d/19/file0" dev="vda" ino=645 res=1 errno=0 00:13:46 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) pwritev(r1, &(0x7f0000003200)=[{&(0x7f0000003280)="95", 0x1}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) [ 830.571654][ T26] audit: type=1804 audit(829.570:17): pid=2807 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2953285942/syzkaller.uCQLga/19/file0" dev="vda" ino=640 res=1 errno=0 00:13:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x9, 0x9}, 0x48) 00:13:51 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x104000, 0x0) 00:13:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000056c0)={0x0, 0x0, &(0x7f00000064c0)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x0) 00:13:55 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x104000, 0x0) 00:13:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000056c0)={0x0, 0x0, &(0x7f00000064c0)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x0) 00:13:58 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x104000, 0x0) 00:13:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000056c0)={0x0, 0x0, &(0x7f00000064c0)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x0) 00:14:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000056c0)={0x0, 0x0, &(0x7f00000064c0)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x0) 00:14:02 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x104000, 0x0) 00:14:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) 00:14:07 executing program 1: r0 = userfaultfd(0x1) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) r2 = dup(r1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000005940)={{&(0x7f0000ff8000/0x8000)=nil, 0x8000}, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r3 = dup(r0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000540)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x3}) 00:14:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) 00:14:10 executing program 1: r0 = userfaultfd(0x1) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) r2 = dup(r1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000005940)={{&(0x7f0000ff8000/0x8000)=nil, 0x8000}, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r3 = dup(r0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000540)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x3}) 00:14:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) 00:14:14 executing program 1: r0 = userfaultfd(0x1) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) r2 = dup(r1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000005940)={{&(0x7f0000ff8000/0x8000)=nil, 0x8000}, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r3 = dup(r0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000540)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x3}) 00:14:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) 00:14:22 executing program 1: r0 = userfaultfd(0x1) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) r2 = dup(r1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000005940)={{&(0x7f0000ff8000/0x8000)=nil, 0x8000}, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r3 = dup(r0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000540)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x3}) 00:14:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) syz_io_uring_setup(0x888, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000f75000/0x2000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') 00:14:30 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ftruncate(r1, 0xf714) writev(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)="e2", 0x1}], 0x1) fallocate(r1, 0x3, 0xefff, 0x800) [ 871.831057][ T26] audit: type=1800 audit(870.820:18): pid=2849 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=640 res=0 errno=0 00:14:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) syz_io_uring_setup(0x888, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000f75000/0x2000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') [ 876.053239][ T26] audit: type=1800 audit(875.050:19): pid=2853 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=645 res=0 errno=0 00:14:35 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ftruncate(r1, 0xf714) writev(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)="e2", 0x1}], 0x1) fallocate(r1, 0x3, 0xefff, 0x800) 00:14:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) syz_io_uring_setup(0x888, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000f75000/0x2000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') 00:14:38 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ftruncate(r1, 0xf714) writev(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)="e2", 0x1}], 0x1) fallocate(r1, 0x3, 0xefff, 0x800) [ 880.038384][ T26] audit: type=1800 audit(879.020:20): pid=2857 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=640 res=0 errno=0 00:14:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) syz_io_uring_setup(0x888, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000f75000/0x2000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') 00:14:42 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ftruncate(r1, 0xf714) writev(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)="e2", 0x1}], 0x1) fallocate(r1, 0x3, 0xefff, 0x800) [ 884.199972][ T26] audit: type=1800 audit(883.200:21): pid=2861 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=640 res=0 errno=0 00:14:46 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ftruncate(r1, 0xf714) writev(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)="e2", 0x1}], 0x1) fallocate(r1, 0x3, 0xefff, 0x800) 00:14:47 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) syz_io_uring_setup(0x888, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000f75000/0x2000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') 00:14:49 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ftruncate(r1, 0xf714) writev(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)="e2", 0x1}], 0x1) fallocate(r1, 0x3, 0xefff, 0x800) [ 891.035751][ T26] audit: type=1800 audit(890.040:22): pid=2867 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=636 res=0 errno=0 00:14:51 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) syz_io_uring_setup(0x888, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000f75000/0x2000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') [ 894.385032][ T26] audit: type=1800 audit(893.360:23): pid=2871 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=645 res=0 errno=0 00:14:53 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ftruncate(r1, 0xf714) writev(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)="e2", 0x1}], 0x1) fallocate(r1, 0x3, 0xefff, 0x800) 00:14:54 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) syz_io_uring_setup(0x888, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000f75000/0x2000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') [ 896.570676][ T26] audit: type=1800 audit(895.570:24): pid=2875 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=645 res=0 errno=0 00:14:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:15:01 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000015000100000000000000000002", @ANYRES16=r1], 0x54}}, 0x0) 00:15:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:15:05 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000015000100000000000000000002", @ANYRES16=r1], 0x54}}, 0x0) 00:15:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:15:09 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000015000100000000000000000002", @ANYRES16=r1], 0x54}}, 0x0) 00:15:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:15:13 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000015000100000000000000000002", @ANYRES16=r1], 0x54}}, 0x0) 00:15:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:15:18 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4b, &(0x7f00000006c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0x0, 0x370, 0xffffffff, 0x370, 0x0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @gre_key}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@dev, @ipv6=@dev, @gre_key}}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'team_slave_1\x00', 'bridge_slave_0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev, @ipv6=@remote, @port, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8e6fc44ef8bc575cef1aaacbcde81d6860771e108363089da9e7fc84fe69"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 00:15:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:15:21 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4b, &(0x7f00000006c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0x0, 0x370, 0xffffffff, 0x370, 0x0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @gre_key}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@dev, @ipv6=@dev, @gre_key}}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'team_slave_1\x00', 'bridge_slave_0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev, @ipv6=@remote, @port, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8e6fc44ef8bc575cef1aaacbcde81d6860771e108363089da9e7fc84fe69"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 00:15:25 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4b, &(0x7f00000006c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0x0, 0x370, 0xffffffff, 0x370, 0x0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @gre_key}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@dev, @ipv6=@dev, @gre_key}}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'team_slave_1\x00', 'bridge_slave_0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev, @ipv6=@remote, @port, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8e6fc44ef8bc575cef1aaacbcde81d6860771e108363089da9e7fc84fe69"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 00:15:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:15:29 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4b, &(0x7f00000006c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0x0, 0x370, 0xffffffff, 0x370, 0x0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @gre_key}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@dev, @ipv6=@dev, @gre_key}}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'team_slave_1\x00', 'bridge_slave_0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev, @ipv6=@remote, @port, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8e6fc44ef8bc575cef1aaacbcde81d6860771e108363089da9e7fc84fe69"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 00:15:32 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4b, &(0x7f00000006c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0x0, 0x370, 0xffffffff, 0x370, 0x0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @gre_key}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@dev, @ipv6=@dev, @gre_key}}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'team_slave_1\x00', 'bridge_slave_0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev, @ipv6=@remote, @port, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8e6fc44ef8bc575cef1aaacbcde81d6860771e108363089da9e7fc84fe69"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 00:15:34 executing program 1: r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2a}}, {{{0x9, 0x5, 0x81, 0x3, 0x1ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 00:15:34 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4b, &(0x7f00000006c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0x0, 0x370, 0xffffffff, 0x370, 0x0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @gre_key}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@dev, @ipv6=@dev, @gre_key}}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'team_slave_1\x00', 'bridge_slave_0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev, @ipv6=@remote, @port, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8e6fc44ef8bc575cef1aaacbcde81d6860771e108363089da9e7fc84fe69"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) [ 938.076357][ T2674] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 938.811754][ T2674] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 938.813633][ T2674] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 938.814424][ T2674] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 938.815634][ T2674] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 938.816254][ T2674] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.077459][ T2674] usb 2-1: config 0 descriptor?? [ 939.224497][ T2909] raw-gadget gadget: fail, usb_ep_enable returned -22 00:15:38 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4b, &(0x7f00000006c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0x0, 0x370, 0xffffffff, 0x370, 0x0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @gre_key}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@dev, @ipv6=@dev, @gre_key}}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'team_slave_1\x00', 'bridge_slave_0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev, @ipv6=@remote, @port, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8e6fc44ef8bc575cef1aaacbcde81d6860771e108363089da9e7fc84fe69"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) [ 940.125918][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.133897][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.135312][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.136809][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.140106][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.141426][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.142702][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.143968][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.145193][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.146403][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.147636][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.150189][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.153703][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.155564][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.156808][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.158099][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.162389][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.163646][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.164932][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.166197][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.167454][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.169798][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.173021][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.174986][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.176252][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.177582][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.182228][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.183509][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.185303][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.186557][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.187766][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.201757][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.203569][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.204886][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.206611][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.250564][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.252183][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.253977][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.255216][ T2674] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 940.328418][ T2674] cm6533_jd 0003:0D8C:0022.0001: No inputs registered, leaving [ 940.727515][ T2674] cm6533_jd 0003:0D8C:0022.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 944.164502][ T2307] usb 2-1: reset full-speed USB device number 2 using dummy_hcd 00:15:43 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "db2351", 0x28, 0x0, 0x0, @dev, @private0, {[@dstopts={0x0, 0x3, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x90, [0x0]}}, @calipso={0x7, 0x8}]}]}}}}}, 0x0) [ 945.447474][ T2334] usb 2-1: USB disconnect, device number 2 00:15:47 executing program 1: r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2a}}, {{{0x9, 0x5, 0x81, 0x3, 0x1ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 00:15:47 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "db2351", 0x28, 0x0, 0x0, @dev, @private0, {[@dstopts={0x0, 0x3, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x90, [0x0]}}, @calipso={0x7, 0x8}]}]}}}}}, 0x0) [ 949.922439][ T12] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 950.440142][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 950.442333][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 950.444117][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 950.446332][ T12] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 950.447944][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.726536][ T12] usb 2-1: config 0 descriptor?? [ 950.777903][ T2939] raw-gadget gadget: fail, usb_ep_enable returned -22 00:15:49 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "db2351", 0x28, 0x0, 0x0, @dev, @private0, {[@dstopts={0x0, 0x3, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x90, [0x0]}}, @calipso={0x7, 0x8}]}]}}}}}, 0x0) [ 952.046013][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.047430][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.104310][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.105453][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.106478][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.107656][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.143700][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.145379][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.146936][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.148321][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.185915][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.187364][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.215507][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.217196][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.244827][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.247573][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.280756][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.282495][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.285173][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.286700][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.372771][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.375553][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.376981][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.378389][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.395321][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.396756][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.414044][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.415701][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.417105][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.418473][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.435097][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.437186][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.464154][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.465854][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.467212][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.512263][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.514808][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.515887][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.517291][ T12] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 952.643570][ T12] cm6533_jd 0003:0D8C:0022.0002: No inputs registered, leaving [ 952.962133][ T12] cm6533_jd 0003:0D8C:0022.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 955.145700][ T2674] usb 2-1: reset full-speed USB device number 3 using dummy_hcd 00:15:54 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "db2351", 0x28, 0x0, 0x0, @dev, @private0, {[@dstopts={0x0, 0x3, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x90, [0x0]}}, @calipso={0x7, 0x8}]}]}}}}}, 0x0) [ 956.224921][ T84] usb 2-1: USB disconnect, device number 3 00:15:57 executing program 1: r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2a}}, {{{0x9, 0x5, 0x81, 0x3, 0x1ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 00:15:59 executing program 0: r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2a}}, {{{0x9, 0x5, 0x81, 0x3, 0x1ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) [ 960.772893][ T84] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 961.213638][ T84] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 961.215546][ T84] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 961.217242][ T84] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 961.247494][ T84] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 961.284360][ T84] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.715122][ T84] usb 2-1: config 0 descriptor?? [ 961.774815][ T2967] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 962.574878][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.576566][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.577975][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.580776][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.584681][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.585723][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.587012][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.588291][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.602374][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.603422][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.604279][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.634537][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.635686][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.636651][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.638316][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.670785][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.672044][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.673152][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.674169][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.675507][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.676380][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.677340][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.707578][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.712474][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.714383][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.716604][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.756939][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.760217][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.761757][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.763140][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.764461][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.765887][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.767230][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.773326][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.775374][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.776748][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.778102][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.781445][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.783085][ T84] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 962.827201][ T84] cm6533_jd 0003:0D8C:0022.0003: No inputs registered, leaving [ 963.054400][ T84] cm6533_jd 0003:0D8C:0022.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 963.751823][ T84] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 964.443140][ T84] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 964.445159][ T84] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 964.447004][ T84] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 964.457851][ T84] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 964.461110][ T84] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.652584][ T84] usb 1-1: config 0 descriptor?? [ 964.722756][ T2972] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 965.591541][ T830] usb 2-1: reset full-speed USB device number 4 using dummy_hcd [ 965.877931][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 965.892482][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 965.894146][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 965.912282][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 965.914055][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 965.915398][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 965.916833][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 965.918373][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 965.955325][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 965.956729][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 965.958121][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 965.986196][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 965.987943][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.024057][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.026158][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.032256][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.033747][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.035819][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.037219][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.054489][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.057287][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.060078][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.061515][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.062875][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.064335][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.065772][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.067238][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.074433][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.102559][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.104510][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.105521][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.106496][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.107518][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.135660][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.136874][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.138133][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.153092][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.154681][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.156117][ T84] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 966.246012][ T84] cm6533_jd 0003:0D8C:0022.0004: No inputs registered, leaving [ 966.326662][ T84] cm6533_jd 0003:0D8C:0022.0004: hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 966.958150][ T2334] usb 2-1: USB disconnect, device number 4 00:16:08 executing program 1: r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2a}}, {{{0x9, 0x5, 0x81, 0x3, 0x1ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) [ 972.995071][ T12] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 973.883003][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 973.886762][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 973.896343][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 973.907914][ T12] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 973.922325][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.117372][ T12] usb 2-1: config 0 descriptor?? [ 974.206735][ T3001] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 975.150957][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.152513][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.154237][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.155472][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.156750][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.157667][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.165891][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.175373][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.176665][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.177882][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.192090][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.194277][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.195430][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.196442][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.197523][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.218517][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.223849][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.225403][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.226677][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.227939][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.273295][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.274717][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.276991][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.320644][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.322173][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.323855][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.324894][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.325929][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.327746][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.370630][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.372038][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.373069][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.373951][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.375101][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.376814][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.377694][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.391537][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.393001][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.402282][ T12] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 975.428239][ T12] cm6533_jd 0003:0D8C:0022.0005: No inputs registered, leaving [ 975.620949][ T12] cm6533_jd 0003:0D8C:0022.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 977.372420][ T2334] usb 1-1: USB disconnect, device number 2 00:16:16 executing program 0: r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2a}}, {{{0x9, 0x5, 0x81, 0x3, 0x1ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) [ 980.382241][ T12] usb 2-1: reset full-speed USB device number 5 using dummy_hcd [ 981.384307][ T2334] usb 2-1: USB disconnect, device number 5 [ 983.783850][ T12] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 984.613466][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 984.615583][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 984.617481][ T12] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 984.653080][ T12] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 984.654893][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.073535][ T12] usb 1-1: config 0 descriptor?? [ 985.108218][ T3027] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 986.734076][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 986.735387][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 986.736437][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 986.737609][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 986.793849][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 986.795215][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 986.796356][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 986.798391][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 986.844110][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 986.846412][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 986.881633][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 986.884912][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 986.886569][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 986.888161][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 986.930947][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 986.934392][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 986.971552][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 986.973105][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 986.974429][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 986.975679][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 986.977716][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 987.020749][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 987.022066][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 987.023335][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 987.025247][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 987.026293][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 987.027477][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 987.096798][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 987.098255][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 987.120231][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 987.121539][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 987.122562][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 987.123912][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 987.125039][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 987.126091][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 987.127258][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 987.128474][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 987.181790][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 987.182871][ T12] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 987.502391][ T12] cm6533_jd 0003:0D8C:0022.0006: No inputs registered, leaving [ 987.781849][ T12] Kernel panic - not syncing: corrupted stack end detected inside scheduler [ 987.785747][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 987.787863][ T12] Hardware name: riscv-virtio,qemu (DT) [ 987.789872][ T12] Workqueue: usb_hub_wq hub_event [ 987.791585][ T12] Call Trace: [ 987.792470][ T12] [] dump_backtrace+0x2e/0x3c [ 987.794130][ T12] [] show_stack+0x34/0x40 [ 987.795322][ T12] [] dump_stack_lvl+0xe4/0x150 [ 987.797032][ T12] [] dump_stack+0x1c/0x24 [ 987.798379][ T12] [] panic+0x24a/0x634 [ 987.799755][ T12] [] schedule+0x0/0x14c [ 987.801009][ T12] [] preempt_schedule_common+0x4e/0xde [ 987.802369][ T12] [] preempt_schedule+0x34/0x36 [ 987.803663][ T12] [] _raw_spin_unlock_irqrestore+0x8c/0x98 [ 987.804968][ T12] [] __debug_object_init+0x284/0x7b8 [ 987.806420][ T12] [] debug_object_init+0x1a/0x22 [ 987.808201][ T12] [] hrtimer_init+0x2a/0x4c [ 987.809910][ T12] [] pm_runtime_init+0x17e/0x1c0 [ 987.811201][ T12] [] device_initialize+0x146/0x242 [ 987.812485][ T12] [] device_create_groups_vargs+0x92/0x17e [ 987.814460][ T12] [] device_create+0xae/0xe2 [ 987.816058][ T12] [] hidraw_connect+0x12e/0x26e [ 987.817326][ T12] [] hid_connect+0x50c/0x858 [ 987.818501][ T12] [] hid_hw_start+0x9c/0xda [ 987.820043][ T12] [] cmhid_probe+0xc2/0x13e [ 987.821745][ T12] [] hid_device_probe+0x1b8/0x24c [ 987.823046][ T12] [] really_probe+0x1a6/0x89e [ 987.824258][ T12] [] __driver_probe_device+0x24a/0x2d4 [ 987.825562][ T12] [] driver_probe_device+0x60/0x1a4 [ 987.826793][ T12] [] __device_attach_driver+0x17c/0x224 [ 987.828085][ T12] [] bus_for_each_drv+0x132/0x1a6 [ 987.829952][ T12] [] __device_attach+0x1e0/0x372 [ 987.831352][ T12] [] device_initial_probe+0x1c/0x26 [ 987.832571][ T12] [] bus_probe_device+0x144/0x154 [ 987.835384][ T12] [] device_add+0x91e/0x129e [ 987.838922][ T12] [] hid_add_device+0x268/0x5ca [ 987.842769][ T12] [] usbhid_probe+0x6b6/0x8c0 [ 987.845326][ T12] [] usb_probe_interface+0x21c/0x57a [ 987.846748][ T12] [] really_probe+0x1a6/0x89e [ 987.847983][ T12] [] __driver_probe_device+0x24a/0x2d4 [ 987.849664][ T12] [] driver_probe_device+0x60/0x1a4 [ 987.851443][ T12] [] __device_attach_driver+0x17c/0x224 [ 987.852652][ T12] [] bus_for_each_drv+0x132/0x1a6 [ 987.853990][ T12] [] __device_attach+0x1e0/0x372 [ 987.855154][ T12] [] device_initial_probe+0x1c/0x26 [ 987.856411][ T12] [] bus_probe_device+0x144/0x154 [ 987.857659][ T12] [] device_add+0x91e/0x129e [ 987.859475][ T12] [] usb_set_configuration+0xafe/0xf6a [ 987.861523][ T12] [] usb_generic_driver_probe+0xb2/0x122 [ 987.862990][ T12] [] usb_probe_device+0xa8/0x204 [ 987.864280][ T12] [] really_probe+0x1a6/0x89e [ 987.865614][ T12] [] __driver_probe_device+0x24a/0x2d4 [ 987.867154][ T12] [] driver_probe_device+0x60/0x1a4 [ 987.868922][ T12] [] __device_attach_driver+0x17c/0x224 [ 987.870703][ T12] [] bus_for_each_drv+0x132/0x1a6 [ 987.871853][ T12] [] __device_attach+0x1e0/0x372 [ 987.873010][ T12] [] device_initial_probe+0x1c/0x26 [ 987.874415][ T12] [] bus_probe_device+0x144/0x154 [ 987.875859][ T12] [] device_add+0x91e/0x129e [ 987.877105][ T12] [] usb_new_device+0x5c8/0xd78 [ 987.878291][ T12] [] hub_event+0x1b3e/0x3364 [ 987.879812][ T12] [] process_one_work+0x654/0xffe [ 987.881569][ T12] [] worker_thread+0x360/0x8fa [ 987.882871][ T12] [] kthread+0x19e/0x1fa [ 987.884101][ T12] [] ret_from_exception+0x0/0x10 [ 987.885796][ T12] SMP: stopping secondary CPUs [ 987.888202][ T12] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:39:01 Registers: info registers vcpu 0 pc ffffffff80dc337e mhartid 0000000000000000 mstatus 00000000000000a0 mip 0000000000000080 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000f97e sepc ffffffff831afd22 mcause 0000000000000009 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80dc337e x2/sp ffffaf8007419a20 x3/gp ffffffff85863ac0 x4/tp ffffaf8007409840 x5/t0 ffffffff86bcb657 x6/t1 e6cc79bd49120100 x7/t2 0000000000000000 x8/s0 ffffaf8007419a50 x9/s1 ffffffff86e58900 x10/a0 ffffffff86e58948 x11/a1 ffff8f800066c000 x12/a2 1ffffffff0dcb129 x13/a3 ffffffff80dc337e x14/a4 0000000000000000 x15/a5 ffffffff86e58948 x16/a6 ffffffff86e589f1 x17/a7 ffffffff80dcc2ca x18/s2 ffff8f800066c000 x19/s3 0000000000000044 x20/s4 ffffffff86e58900 x21/s5 ffffffff80dc333e x22/s6 0000000000000000 x23/s7 ffffffff86bcb67d x24/s8 0000000000000010 x25/s9 ffffffff86e58958 x26/s10 0000000000000010 x27/s11 0000000000000000 x28/t3 fffffffff3f3f300 x29/t4 ffffffff80112282 x30/t5 1ffff5f000e832f4 x31/t6 ffffffff86bcb657 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff801165d6 mhartid 0000000000000001 mstatus 00000000000001a0 mip 00000000000000a0 mie 000000000000020a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff801120ce sepc ffffffff831afd22 mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff801165c2 x2/sp ffffaf801f1932c0 x3/gp ffffffff85863ac0 x4/tp ffffaf801f529840 x5/t0 0000000000046000 x6/t1 e6cc79bd49120100 x7/t2 ffffffffc944e7bd x8/s0 ffffaf801f193420 x9/s1 ffffffff8343c840 x10/a0 ffffaf805a9e4840 x11/a1 0000000000000003 x12/a2 1ffff5f00b53c908 x13/a3 ffffffff801165c2 x14/a4 0000000000000000 x15/a5 0000000000000120 x16/a6 0000000000f00000 x17/a7 ffffffff8018e490 x18/s2 ffffffff86c1a620 x19/s3 ffffaf805a9e4840 x20/s4 0000000000000000 x21/s5 ffffffff84b86688 x22/s6 0000000000000000 x23/s7 ffffaf801f529840 x24/s8 ffffffff8018e490 x25/s9 ffffffff85889780 x26/s10 1ffff5f003e32660 x27/s11 0000000000000000 x28/t3 fffffffff3f3f300 x29/t4 ffffffff80112282 x30/t5 1ffff5f003e3263c x31/t6 00000000000000f0 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000