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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) 23:41:56 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000002000000085000000a000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x100000000, 0x0, 0x1, 0x80000000, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_allocate_blocks\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 23:41:56 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000002000000085000000a000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x100000000, 0x0, 0x1, 0x80000000, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_allocate_blocks\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 23:41:57 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_allocate_blocks\x00'}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) getpid() bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) 23:41:57 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff}) writev(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000040)="02", 0x1}, {&(0x7f0000000140)="90", 0x1}], 0x3) 23:41:57 executing program 4: semget(0x0, 0x1, 0x241) 23:41:57 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, 0x0, 0x0) 23:41:57 executing program 5: pipe(&(0x7f0000000080)) r0 = msgget$private(0x0, 0x25) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/74) 23:41:57 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0) 23:41:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x4, 0x9, 0x0, 0x80, 0x0, 0x2, 0x40, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1082, 0x3d, 0x7, 0x2, 0xe1, 0x1, 0x5}, 0x0, 0x7, r0, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup, r2}, 0x10) r3 = perf_event_open(&(0x7f00000015c0)={0x2, 0x70, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) 23:41:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f00000002c0)={0x0, 0x2710}, 0x10) 23:41:57 executing program 1: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000400)) 23:41:57 executing program 0: modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) modify_ldt$write2(0x11, &(0x7f0000001540), 0x10) 23:41:57 executing program 4: semtimedop(0x0, &(0x7f0000000080)=[{}], 0x1, 0x0) 23:41:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) listen(r0, 0xff) 23:41:57 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000000c0)=@hat={'changehat '}, 0x1d) 23:41:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000700)={&(0x7f0000000080)=@abs, 0x8, &(0x7f0000000640)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) 23:41:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x100, 0x0, 0x0) 23:41:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000000c0)='S', 0x1}, {&(0x7f0000000100)="13", 0x1}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="05", 0x1}, {0x0}, {0x0}], 0x9}, 0x0) 23:41:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, 0x0) 23:41:57 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 23:41:57 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @val, {@ipv6}}, 0x0) 23:41:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, 0x0) 23:41:57 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) bind(r0, 0x0, 0x0) 23:41:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x7) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 23:41:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {}, [@NDA_VNI]}, 0x54}}, 0x0) 23:41:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c000}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc}]}]}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x54}}, 0x0) 23:41:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') sendfile(r0, r0, &(0x7f0000000000)=0xd838, 0x8) 23:41:57 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}]}, 0x48}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 23:41:57 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000008b00)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @dev}, 0x80, 0x0}}], 0x1, 0x8084) sendmmsg$sock(r0, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000015c0)="7fe49ffc7dc19805a602b227120387049b67ac74c8f6dc0bea", 0x19}, {&(0x7f0000001d40)="a8d2b1f21dd4c9f232a49a6b38be5f51ab769c5a488bda8fc22de8d79adc93993204534f5e553728dd2728816b7c51b4978a33aaa183347b19c063a9000e7e412bf38dca7b5c9ca1456e980a6fe7116a3df1f2cb85f20aa0bfc2f3b673cc7c94247ed73d30056c368423876877000b4706fac476bddbb2b93d45c3cb2ffc7694e1f0ea127cdfe70ec6ead0739c383adbad93c3ec34ec319fcc4d7cd4883af5af1e0cba90271e6fb98f4b9d98039281c01d6aedc96243ce700978683affab9dc3a6f32d378472b5cd3a4d86bb01b86afa3b33bd02974593dc1da2f9da96915d", 0xdf}, {&(0x7f0000001740)="98658b87b398fb19f10ff1fac5f5df0ed35675", 0x13}, {&(0x7f0000001e40)="24688307ced5026cd78acee29fa6a4adde0642855d1f96b3c8b5be421d3df15e001a506a30c6f6ef1a50a02835a891141d2625cd3a1548bf14acf5edbedc3f6e0a51ee933e1c2cdebc3f813080b061d7", 0x50}, {&(0x7f0000001ec0)="05b8cc3fcbdb6a450dee1e240366438d540f8e064c177545902f90520d7a3c44431318f4f908874c62c121fbcae4638fd3fc1f69910680f3d4ac817894cba1cfcce2a65277104bb9f31cf904765c26eddc86cf562cb9fa82ee1dfd403cea2dd590e771dd0b9003bf8b9df1e007f356b8d0fa3d6cc08764a89482a2b35c5013fc6c520e76dfc50768021b75632923bbc2a46c0c0a6f73cd6c56c21afc681564564f52a459ea850780906984d6cb0801413b3244adb427decd9c222a28c5cda2081974bc685724b6c574d25dd8bd2fa3579595f0", 0xd3}, {&(0x7f0000001fc0)="43431d972d252acea7654abf877cf081ea10b3688ca29445cdc541297799fa6de28e83fc48cbbacfaef56c11277c6ac5be844f29b2c79b2dc37b3e820a80d6560e14e79123993dc4c9ec8d628dcf313fa53fc0edcc32977b1247b42b248231eafb52d154cbc1ba8cd719039f79b48d10ddbd", 0x72}, {&(0x7f00000020c0)="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", 0xfc}, {&(0x7f00000021c0)="0ab5d2638b2c08c9e5c93098ddcea809b604544a26d1d61539500c326f53c6fbd7321436db2b04078a197650cffa28b0e57901b8e85817317407d0e93508e8fdbfa4f069875f8068c341c14d26d096b2c725f4a4f0d16a39b5d48d9318aa2dee53532b8be90ef0ebeab10b47dc2f7f9f04274f7544b1ecaaa0edcb815af5d6c2bd1dc90dfd6d3f76a79bbef26088a39012e3b233b6c5a8d5957489aaf3a86909d9083d35cdcb1ed4634200dd4650dbea8a344c1772c9dacb93e210d7d89f74d42e3096e271d7d68f7a118921ed232209c2b78d998a202ad80def055165bd0a7dd62e264c2ae8e29f160192d0c9", 0xed}, {&(0x7f00000022c0)="09283d79ecbe867b94abbdb4a17975bd778b1d6385ad4179f5df532cb9e45d27f911dd8d03fdf5291770688489d146779a6358c37467dcc602c41c4d273f06b9561ad902e2db2bd8d61e6229219a401297521c8daeaaa82001256b71ee26d160e5f55a8b89de683d08585f04573ea69313bb93f57fc79dfabd839b4cd771ce03b27732ea3ee2232a9d3317035417b1cf7c014c02206a1b8507bcb77da73db9129dc14ed93ac1d796b1ec41fe1f8e79fd7bb592486babcdc83b", 0xb9}, {&(0x7f0000002380)="b5b7d3f767c1e932b0fc4d78bbf458bb8a897b450a5c21696e2c2489b4d0f9e8166d3767cf94c8ba62600280cc83615e5cf093717627a81117e81ca4f3d5542abe26cb58eb5d068558d8cebada35c4938201a689d85d1ec8d1aed292355e6e7697520e6890901067d8865820c2718cb661f6747d398054498cb687b2446d82533a3be6ba110f743d069bc95047f5d0dd64c990313f7d", 0x96}], 0xa}}], 0x1, 0x840) [ 282.801223][T18816] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 282.961375][T18837] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 282.981399][T18838] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:41:57 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = eventfd(0x0) read(r1, &(0x7f0000000080)=""/18, 0x12) sendfile(r1, r0, 0x0, 0x10000000009) 23:41:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)={0x14, 0x24, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 23:41:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_deladdr={0x18, 0x15, 0x193}, 0x18}}, 0x0) 23:41:57 executing program 3: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:41:57 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') sendfile(r0, r0, &(0x7f0000000000)=0xd838, 0x8) 23:41:57 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) fork() munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:41:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0x28}}, 0x0) 23:41:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x48}}, 0x0) 23:41:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_getnetconf={0x14, 0x52, 0x1}, 0x14}}, 0x0) 23:41:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0xd838, 0x3) 23:41:58 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') sendfile(r0, r0, &(0x7f0000000000)=0xd838, 0x8) 23:41:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@getlink={0x20, 0x12, 0x303}, 0x20}}, 0x0) 23:41:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) 23:41:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1e0, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x148, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'team_slave_0\x00', 'bond0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'bond0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) 23:41:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001500)={0x24, 0x25, 0x321, 0x0, 0x0, "", [@generic="5e10724a9e4e4b3b649021c338acb69c65"]}, 0x24}], 0x1}, 0x0) 23:41:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0xd838, 0x3) 23:41:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) 23:41:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x40}}, 0x0) 23:41:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/protocols\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0xd838, 0x3) [ 283.999354][T18903] x_tables: duplicate underflow at hook 3 23:41:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 23:41:58 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x50900, 0x0) getdents(r0, &(0x7f0000000040)=""/136, 0x88) 23:41:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x40}}, 0x0) 23:41:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0xd838, 0x3) 23:41:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00') sendfile(r0, r0, &(0x7f0000000000)=0xd838, 0x8) 23:41:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@ipv4_newroute={0x28, 0x18, 0x6131dfe35c49f543, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x4769}}]}, 0x28}}, 0x0) 23:41:58 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) io_setup(0x0, &(0x7f0000000000)) 23:41:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000030701"], 0x14}}, 0x0) 23:41:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x40}}, 0x0) 23:41:58 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') read$eventfd(r0, &(0x7f0000000040), 0x8) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 23:41:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0xd838, 0x3) 23:41:58 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/softnet_stat\x00') sendfile(r0, r0, &(0x7f0000000000)=0xd838, 0x8) 23:41:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter6\x00') sendfile(r0, r0, &(0x7f0000000000)=0xd838, 0x8) 23:41:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x78}}, 0x18}}, 0x0) 23:41:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_hsr\x00'}]}, 0x34}}, 0x0) 23:41:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x40}}, 0x0) 23:41:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={0x0}}, 0x0) 23:41:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x54}}, 0x0) 23:41:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x78}}, 0x18}}, 0x0) 23:41:59 executing program 3: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 23:41:59 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000008b00)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @dev}, 0x80, 0x0}}], 0x1, 0x8084) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="d09d9153bdb108b09b602714b325681a1379ff7b61a4f9ce5b4cafd540347ee44ced908d11280905756ece5301c37cc7cf541923942b544a86aa2bb0cdeae3efca3b1398b76b4e311ee201621313b4d953aaec14744c45e9a643091274c85401697a5a5847e37bec48f32fbe21dba92e97b9ce8bc2be0171a56b23b7f9d4e388a79f9eb938b39e5617da22bac580cf3b62ddf5328e42473ea56b83a22169cc437f59ec988a6d0b2c6fa1a7c158ac5417fbb880611d9b160ea0c6696999b97be8cdcc0db38eeab725a1bf13b080cbb89e890c16d84ec884c1c65a56dc99fb957ce25ebfed282db9731fbe527bea1b84fce7", 0xf1}, {&(0x7f00000003c0)="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", 0x1000}], 0x2}}], 0x1, 0x0) 23:41:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind(r0, 0x0, 0x0) 23:41:59 executing program 2: sysfs$1(0x1, &(0x7f0000000000)) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 23:41:59 executing program 0: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @xdp, @sco={0x1f, @fixed}, @ethernet={0x0, @random="e998173b7e5a"}}) pipe(&(0x7f00000003c0)) 23:41:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x78}}, 0x18}}, 0x0) 23:41:59 executing program 3: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x101000, 0x0) 23:41:59 executing program 2: socket$bt_rfcomm(0x1f, 0x0, 0x3) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000025c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000002640)) 23:41:59 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000008b00)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @dev}, 0x80, 0x0}}], 0x1, 0x8084) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="d09d9153bdb108b09b602714b325681a1379ff7b61a4f9ce5b4cafd540347ee44ced908d11280905756ece5301c37cc7cf541923942b544a86aa2bb0cdeae3efca3b1398b76b4e311ee201621313b4d953aaec14744c45e9a643091274c85401697a5a5847e37bec48f32fbe21dba92e97b9ce8bc2be0171a56b23b7f9d4e388a79f9eb938b39e5617da22bac580cf3b62ddf5328e42473ea56b83a22169cc437f59ec988a6d0b2c6fa1a7c158ac5417fbb880611d9b160ea0c6696999b97be8cdcc0db38eeab725a1bf13b080cbb89e890c16d84ec884c1c65a56dc99fb957ce25ebfed282db9731fbe527bea1b84fce7", 0xf1}, {&(0x7f00000003c0)="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", 0x1000}], 0x2}}], 0x1, 0x0) 23:41:59 executing program 4: r0 = creat(&(0x7f00000012c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file1\x00') r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x200) getdents(r1, 0x0, 0x0) 23:41:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x78}}, 0x18}}, 0x0) 23:41:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 23:41:59 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f00000025c0)='/dev/rtc0\x00', 0x0, 0x0) 23:41:59 executing program 2: select(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)) 23:41:59 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) 23:41:59 executing program 2: socketpair(0xa, 0x3, 0x87, &(0x7f0000000240)) 23:41:59 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000008b00)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @dev}, 0x80, 0x0}}], 0x1, 0x8084) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="d09d9153bdb108b09b602714b325681a1379ff7b61a4f9ce5b4cafd540347ee44ced908d11280905756ece5301c37cc7cf541923942b544a86aa2bb0cdeae3efca3b1398b76b4e311ee201621313b4d953aaec14744c45e9a643091274c85401697a5a5847e37bec48f32fbe21dba92e97b9ce8bc2be0171a56b23b7f9d4e388a79f9eb938b39e5617da22bac580cf3b62ddf5328e42473ea56b83a22169cc437f59ec988a6d0b2c6fa1a7c158ac5417fbb880611d9b160ea0c6696999b97be8cdcc0db38eeab725a1bf13b080cbb89e890c16d84ec884c1c65a56dc99fb957ce25ebfed282db9731fbe527bea1b84fce7", 0xf1}, {&(0x7f00000003c0)="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", 0x1000}], 0x2}}], 0x1, 0x0) 23:41:59 executing program 3: r0 = socket(0x18, 0x0, 0x1) getpeername$packet(r0, 0x0, 0x0) 23:41:59 executing program 0: r0 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 23:41:59 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) 23:41:59 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 23:41:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x268, 0x1, 0x5, 0x5, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "bc3b2af52720594e3f560b3397bf8d3abc6bc481435885682eda8c52a2fec219", "8a3df6ff00abeb3ef4b295020579d1651646bcc1ecdf42c5b27db9ab618c5329"}}}]}, 0x268}}, 0x0) 23:41:59 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000008b00)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @dev}, 0x80, 0x0}}], 0x1, 0x8084) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="d09d9153bdb108b09b602714b325681a1379ff7b61a4f9ce5b4cafd540347ee44ced908d11280905756ece5301c37cc7cf541923942b544a86aa2bb0cdeae3efca3b1398b76b4e311ee201621313b4d953aaec14744c45e9a643091274c85401697a5a5847e37bec48f32fbe21dba92e97b9ce8bc2be0171a56b23b7f9d4e388a79f9eb938b39e5617da22bac580cf3b62ddf5328e42473ea56b83a22169cc437f59ec988a6d0b2c6fa1a7c158ac5417fbb880611d9b160ea0c6696999b97be8cdcc0db38eeab725a1bf13b080cbb89e890c16d84ec884c1c65a56dc99fb957ce25ebfed282db9731fbe527bea1b84fce7", 0xf1}, {&(0x7f00000003c0)="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", 0x1000}], 0x2}}], 0x1, 0x0) 23:41:59 executing program 3: syz_mount_image$xfs(&(0x7f0000000340)='xfs\x00', &(0x7f0000001380)='./file0\x00', 0x0, 0x0, &(0x7f0000003740), 0x810, &(0x7f0000003800)={[{@gqnoenforce='gqnoenforce'}, {@filestreams='filestreams'}, {@ikeep='ikeep'}, {@prjquota='prjquota'}]}) 23:41:59 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x37cb1133) r3 = socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 23:41:59 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) 23:41:59 executing program 2: socket$alg(0x26, 0x5, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() tkill(0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) 23:41:59 executing program 4: syz_read_part_table(0x0, 0x3, &(0x7f0000002540)=[{0x0}, {0x0, 0x0, 0x7fffffff}, {&(0x7f0000001540)="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", 0x1e1}]) 23:41:59 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) 23:41:59 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) listen(r0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) close(r0) [ 285.117686][T19045] XFS: ikeep mount option is deprecated. [ 285.201335][T19045] XFS (loop3): Invalid superblock magic number [ 285.214132][T19078] loop4: detected capacity change from 0 to 264192 23:41:59 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x990001}) 23:42:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @in={0x2, 0x0, @empty}, @xdp, @isdn, 0x7}) 23:42:00 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18010000", @ANYRES16=r0, @ANYBLOB="010000000000000000007e"], 0x118}}, 0x0) [ 285.254045][T19045] XFS: ikeep mount option is deprecated. [ 285.306519][T19045] XFS (loop3): Invalid superblock magic number [ 285.321628][T19078] loop4: detected capacity change from 0 to 264192 23:42:00 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1) 23:42:00 executing program 3: syz_mount_image$xfs(&(0x7f0000000340)='xfs\x00', &(0x7f0000001380)='./file0\x00', 0x0, 0x0, &(0x7f0000003740), 0x810, &(0x7f0000003800)={[{@gqnoenforce='gqnoenforce'}, {@filestreams='filestreams'}, {@ikeep='ikeep'}, {@prjquota='prjquota'}]}) [ 285.364411][T19133] netlink: 260 bytes leftover after parsing attributes in process `syz-executor.5'. [ 285.387900][T19133] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:42:00 executing program 4: r0 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCADDRT(r0, 0x80047453, 0x0) [ 285.409092][T19133] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 285.421678][T19139] XFS: ikeep mount option is deprecated. [ 285.453881][T19139] XFS (loop3): Invalid superblock magic number 23:42:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0x25}]}, 0x48}}, 0x0) 23:42:00 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x164b4ce13a94c062}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:42:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f00000002c0)=[{{&(0x7f0000000080)=@in={0xa, 0x4e23, @local}, 0x80, 0x0}}], 0x1, 0x0) 23:42:00 executing program 3: syz_mount_image$xfs(&(0x7f0000000340)='xfs\x00', &(0x7f0000001380)='./file0\x00', 0x0, 0x0, &(0x7f0000003740), 0x810, &(0x7f0000003800)={[{@gqnoenforce='gqnoenforce'}, {@filestreams='filestreams'}, {@ikeep='ikeep'}, {@prjquota='prjquota'}]}) 23:42:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3}) 23:42:00 executing program 1: r0 = syz_open_dev$char_raw(&(0x7f0000000100)='/dev/raw/raw#\x00', 0x1, 0x0) close(r0) 23:42:00 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 23:42:00 executing program 0: socketpair(0x10, 0x3, 0x7, &(0x7f0000000000)) [ 286.102143][T19205] XFS: ikeep mount option is deprecated. [ 286.192414][T19205] XFS (loop3): Invalid superblock magic number [ 286.220249][T19234] netlink: 260 bytes leftover after parsing attributes in process `syz-executor.5'. 23:42:01 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80383, 0x0) dup2(r0, r1) 23:42:01 executing program 1: r0 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f00000000c0)={'wlan0\x00'}) 23:42:01 executing program 5: r0 = socket(0x18, 0x0, 0x0) getsockname$l2tp(r0, 0x0, &(0x7f00000000c0)) 23:42:01 executing program 4: r0 = socket(0x2b, 0x1, 0x0) bind$netrom(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) 23:42:01 executing program 0: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100008, 0x500001c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r1) 23:42:01 executing program 3: syz_mount_image$xfs(&(0x7f0000000340)='xfs\x00', &(0x7f0000001380)='./file0\x00', 0x0, 0x0, &(0x7f0000003740), 0x810, &(0x7f0000003800)={[{@gqnoenforce='gqnoenforce'}, {@filestreams='filestreams'}, {@ikeep='ikeep'}, {@prjquota='prjquota'}]}) 23:42:01 executing program 4: r0 = socket(0x18, 0x0, 0x1) recvmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 286.325784][T19249] XFS: ikeep mount option is deprecated. [ 286.334013][T19249] XFS (loop3): Invalid superblock magic number 23:42:01 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80383, 0x0) dup2(r0, r1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 23:42:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8981, &(0x7f0000000240)={'ip_vti0\x00', 0x0}) 23:42:01 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000400)={&(0x7f0000767000/0x3000)=nil, 0x3000}) 23:42:01 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x3}) 23:42:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) write$cgroup_int(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x2da8020000100008, 0x500001c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x177a) close(r1) 23:42:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty, {[@generic={0x0, 0x2}]}}}}}) 23:42:01 executing program 3: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) r0 = getpgrp(0x0) setpgid(r0, 0x0) [ 286.513660][ T36] audit: type=1804 audit(1615938121.220:36): pid=19284 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir487797069/syzkaller.uD5yfh/379/memory.events" dev="sda1" ino=14969 res=1 errno=0 23:42:01 executing program 1: open$dir(&(0x7f0000000000)='./file0\x00', 0x7bf6d621ebd66ee6, 0x0) [ 286.624966][ T36] audit: type=1804 audit(1615938121.260:37): pid=19266 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir487797069/syzkaller.uD5yfh/379/memory.events" dev="sda1" ino=14969 res=1 errno=0 23:42:01 executing program 0: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100008, 0x500001c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r1) 23:42:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x4376461b4e205d3, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 23:42:01 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000080), 0x10) [ 286.741593][ T36] audit: type=1800 audit(1615938121.290:38): pid=19284 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="sda1" ino=14969 res=0 errno=0 23:42:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) write$cgroup_int(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x2da8020000100008, 0x500001c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x177a) close(r1) [ 286.788091][T19306] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability 23:42:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x1, 0x824b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)=0x28) 23:42:01 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000080), 0x10) [ 286.877169][ T36] audit: type=1804 audit(1615938121.360:39): pid=19284 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir487797069/syzkaller.uD5yfh/379/memory.events" dev="sda1" ino=14969 res=1 errno=0 [ 286.990597][ T36] audit: type=1804 audit(1615938121.360:40): pid=19276 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir487797069/syzkaller.uD5yfh/379/memory.events" dev="sda1" ino=14969 res=1 errno=0 23:42:01 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @link_local}, 0x22, {0x2, 0x0, @multicast2}, 'vlan1\x00'}) 23:42:01 executing program 1: r0 = socket(0x18, 0x0, 0x1) accept4$netrom(r0, 0x0, 0x0, 0x0) 23:42:01 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000080), 0x10) 23:42:01 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000080), 0x10) 23:42:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) write$cgroup_int(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x2da8020000100008, 0x500001c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x177a) close(r1) 23:42:01 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000140)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) [ 287.115857][ T36] audit: type=1804 audit(1615938121.730:41): pid=19322 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir487797069/syzkaller.uD5yfh/380/memory.events" dev="sda1" ino=14965 res=1 errno=0 23:42:01 executing program 0: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100008, 0x500001c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r1) 23:42:01 executing program 1: mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 287.239306][ T36] audit: type=1804 audit(1615938121.730:42): pid=19324 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir487797069/syzkaller.uD5yfh/380/memory.events" dev="sda1" ino=14965 res=1 errno=0 23:42:02 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {0x0, 0x0, 0x8}}}}}, 0x0) 23:42:02 executing program 1: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000040)={{r0}, "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"}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r1, &(0x7f0000001040)={{0x3, @default, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null]}, 0x48) accept$ax25(r1, 0x0, 0x0) [ 287.384506][ T36] audit: type=1800 audit(1615938121.730:43): pid=19322 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="sda1" ino=14965 res=0 errno=0 23:42:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000700)={0x0, @in6={{0xa, 0x0, 0x0, @local, 0x5}}}, &(0x7f00000007c0)=0x98) 23:42:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000005240)) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:02 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10) 23:42:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 23:42:02 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) [ 287.522023][ T36] audit: type=1804 audit(1615938122.230:44): pid=19356 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir487797069/syzkaller.uD5yfh/381/memory.events" dev="sda1" ino=14963 res=1 errno=0 [ 287.553643][T19362] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 23:42:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000005240)) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, &(0x7f0000000680)=0x9c) 23:42:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) write$cgroup_int(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x2da8020000100008, 0x500001c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x177a) close(r1) [ 287.594581][T19362] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 287.611349][ T36] audit: type=1804 audit(1615938122.300:45): pid=19346 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir487797069/syzkaller.uD5yfh/381/memory.events" dev="sda1" ino=14963 res=1 errno=0 [ 287.664848][T19358] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 287.684845][T19358] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 23:42:02 executing program 0: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100008, 0x500001c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r1) 23:42:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x2, 0x7, 0x3}, 0x14}}, 0x0) 23:42:02 executing program 1: r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000000c0)=@hat={'changehat ', 0x0, 0x5e, ['/proc/bu\x00/in\x00\x00@\x00\x00\x00@\x00lers\x00', '/p/handlers\x00'/25]}, 0x4f) [ 287.719750][T19358] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 287.748501][T19358] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 287.763518][T19378] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:42:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x14, 0x2, 0x2, 0x301}, 0x14}}, 0x0) [ 287.793682][T19358] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 23:42:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x4, 0x8, 0x301}, 0x14}}, 0x0) 23:42:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc}]}, @NFT_MSG_NEWSETELEM={0xdfc, 0xc, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xde8, 0x3, 0x0, 0x1, [{0x450, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x84, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7d, 0x1, "a930cdfc3baab4df14c1be210d5beea67e9961b8ec6c25a5f3d6934b0e4cd661091821297bf407f0c00f10e71be939a992fd6a707de382fe393a64f0d54f084b1941feae90c880e9ac5e1658e6e154510396e0104a1283b790b7366edac19172245e96b0c6c87b5359f52944b0d3a4452d249ea9bf02d6d583"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x224, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x65, 0x1, "bbae735f24df1cebe7dd0bf3fc7f40ee8312a98cfe57ef66e3397d450b15792dec8a5bc0326982089f41c02ece8fd927f518316f816da4472cd9f69096e0acb260b878d45f18901c182e8095540d9e407f7bb5a4bcbb49de953d9f6f1e168ed187"}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4d, 0x1, "b04fe04cfd384cb9c97d033677f20aa5a59d4ef0469c24b02358221fcd7b1500d0f5d006e335961124820f7facf8f12bef4f1279723123dff684156692d7000c73880bff4e181b21bc"}, @NFTA_DATA_VALUE={0x35, 0x1, "2ba636c5acd4516a9f854de302fab021df91edcc76791eea3e5bf311d11a11abf2e8e5c2b8d2279642e6b89fa40fb96205"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_DATA={0x15c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa1, 0x1, "a0a0dd4f9f4092371c0d96bf872889cac121f78f4c59942b198bf5024eb6a9700712f8cbb60c141bf8d4e7936c825fd0c8385ef5a0fe7381dde8b11df59bbb086de8f69a7863f17cbc741beeb1f14ba1f18a183bbb788e8483baac45d097b8172b02f152613dbf9c78d89c5ad5ffd37005a9a2f593259e66f1266569ca84ba39d724a818ada29911a3df24a2ff28e536e91db3db1c3afb3d6b3754b15d"}, @NFTA_DATA_VALUE={0xb1, 0x1, "855d3c5bab08708ee12d532b280eacb79c32af8bcce28b1340c147be644542295f08e005c998a7b76b6abe262b6be59834780fe2c5a0ffa8d1dc92517b41d5d583751397949551f3710b7ed264ee6da68ec71faea1c3ba14057b91bd0974a0bebe31d96c3c4f759074c01806536b051dd6c3b920c912774341db82606935383b29899247ae6aa42aec0d8a08f11f24ab6700e555b358977d49023bf05595d489b0be4dcbaaa02e4fdc4feec017"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_USERDATA={0x19, 0x6, 0x1, 0x0, "62bfff763040dd766684d020e88df87fc3038c6044"}]}, {0x528, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x15c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x55, 0x1, "bc1ca5c3bd186a44c2a790acba0c54d3ba854d9c1e6cb757ef54a6d4d17f36405c0de2456bd9c7cccbc4d1359590ad2ffb2f923716f7b9bf6e2d2b8b78e1d829bbd3aaa296718829613008e4e314689a4c"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x9, 0x1, "daff705a96"}, @NFTA_DATA_VALUE={0x69, 0x1, "55ebeb3fabb1566adec60b5e447fbd6f3700976f06ade47dcd8aef5b31b6caf1e324233629c144183c5cce7e104131ebbd23062feefc23badc57eafd4a04245be986763522bfc2c6c2070cdce18b82031dd744e47cef8f9d6632a12d9c8cc0d2db7b54df1b"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_KEY={0x280, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x95, 0x1, "81bf5c6ba79858ca63e61f5c5c854ee820d46301b7c808bdb72745b2f2092fe907529c82a59a3c48255344a66cf1692bad876a159bac0825143e49485616ef6c012d2dd84f6265bf686b147b6af08bf5ffc87b3d85ee12df4391a8d6c73db19411aec160122882e6b11df8a5e716fe8bf1c7dfc8366680c63db64ec7d279ad4c04fc8243faa3830964e7bc56d2491ebd30"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "7c9081fb41233714b8e628932debddd9b4d8452b8b36245119adf10af99264f803ec4a5f5baaabc89e1732de14647ec4f81bcff5da18f41aca5cb56b4d2a034755a4ea9a6411c0b377de4f21ea15dfca0e738e73e86cfa3f463f4e8df197bc47fcc94a7b4177cf17b0056c45afe6bd1b269f8ba75dfbd2023d37a21d4aa7fc72df0abc74bdffd2101d53b2e000108593df3b1ab1ad39f66c54e7f2a5949f2c90da9c88185efc49e13a9f26dc04f571936ce6d42059f5f771060321187e16188d6cd08a960bc105e80f66457e28"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x124, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc1, 0x1, "9793b3d243b34e41dfb8482c587f3a258ba79569e21d3be083d7fc9dc531e1844ee89b94b533cb77645b7d4a070d83d97c8c1ae1a0fddb5401fe6564e2f848eb0f7bb3c7a11a21da5234363abbc8836da92df492ead06ebae25f1ba34f44ba9f7afe240ffd6e4aa7b91e03a1eeeb4a23064079e432144f64feafc5a1b8b9f6af22861e5404cad4ee3e114b808b30637644fb4a4f961c9dc5ec6c1d622f2a82b10cd36c445edf9baddef3e86087ef2c7858448adf7a086ff38263cee3ea"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}]}, {0x1a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x168, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x89, 0x1, "96dd513b958da59fede999fe5ef58323b6ee4501fbaad65b499cdab2fd2fd2da2036ee2a139328c6f809b5f332890b5f217da6b4e4921194b6c3577ae945723a32827a2de7984813b37b883591252c74416b672ad0f33d988b16fb48db28c564600d27cdebd416aaac61349fd5d02b3d6828b678f63ec9418285d72c30cb7aabf35cc380e7"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x21c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x104, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5d, 0x1, "784a748ea7bdf93d27ce09ef0e6661c9d3e41c56cf7d68d161844e195a91b38818dc02468cd9d921f75cbea423416ddd943e8c61b1407aa6d8252a1d4d0f435a3fd3b9d28c0aed67c7398a731f8cbed19b173900d19c09077b"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x41, 0x1, "81568bf01b6a2d0051c45fd050ed269b428669db0f82e4e1afcde067f0631b5b4b61b59a6d735485488030b442a038fa09b7f1c346695419a92ce2aa6e"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x8c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x1d, 0x6, 0x1, 0x0, "21728d505be93b94ef839d10af84faec66a998bb947dcd4348"}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0x44, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3d, 0x1, "fe6eded79c772474911b352ca69400bedf5dc44ef568ef94e0e1aec3817f500850d3446d52147e51e825202133dacfbef1cd93db7fd597fe91"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x21, 0x6, 0x1, 0x0, "0c3f37da263c72fa53ddf4c9f0dc57fe5e7dceb162900e50e82725d6c2"}, @NFTA_SET_ELEM_DATA={0x44, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3d, 0x1, "5c48c30f0f85e4ef5186537a3274cf6902e3d849f336ec5a5e9df3cf51836f2d19fec3601fd194c8f542ee257981d9e8d70c45598bb379e3a7"}]}]}]}]}], {0x14}}, 0xec4}}, 0x0) 23:42:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000005240)) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}]}, 0x1c}}, 0x0) 23:42:02 executing program 4: r0 = openat$rtc(0xffffff9c, &(0x7f0000000340)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4004700c, 0x0) 23:42:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x1c, 0x6, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 23:42:02 executing program 5: add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x3, 0xffffffffffffffff) 23:42:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000005240)) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:02 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000001c0)=""/40) 23:42:02 executing program 2: socketpair(0x26, 0x5, 0x6, 0x0) 23:42:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0xb, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 23:42:02 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000140)={0x0, 0x9, &(0x7f00000000c0)="302e61f1793dc7a4ee"}) 23:42:02 executing program 5: removexattr(&(0x7f0000000a80)='./file0/../file0\x00', 0x0) 23:42:02 executing program 2: keyctl$set_reqkey_keyring(0xe, 0xd) 23:42:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_test}) 23:42:02 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000140)={0x0, 0x9, &(0x7f00000000c0)="302e61f1793dc7a4ee"}) 23:42:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x44, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}]}]}, 0x44}}, 0x0) 23:42:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x201}, 0x14}}, 0x0) 23:42:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000005240)) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:03 executing program 4: futex(&(0x7f0000000080)=0x2, 0x8b, 0x2, &(0x7f0000000100), &(0x7f0000000140), 0x0) 23:42:03 executing program 2: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200094cd3, 0x387f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f0000000000)) 23:42:03 executing program 5: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) 23:42:03 executing program 4: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) 23:42:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 23:42:03 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000140)={0x0, 0x9, &(0x7f00000000c0)="302e61f1793dc7a4ee"}) 23:42:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000005240)) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) 23:42:03 executing program 4: setrlimit(0x0, &(0x7f0000000080)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) fork() 23:42:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf1}, 0x14) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0xedba) 23:42:03 executing program 2: syz_open_dev$rtc(&(0x7f0000000f00)='/dev/rtc#\x00', 0x0, 0x1) 23:42:03 executing program 5: socketpair(0x0, 0xb, 0x0, 0x0) 23:42:03 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000140)={0x0, 0x9, &(0x7f00000000c0)="302e61f1793dc7a4ee"}) 23:42:03 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x0, 0x4}]}, 0x14, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000002700)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x22, 0x0) 23:42:03 executing program 2: capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x9}) 23:42:03 executing program 1: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 23:42:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='veno\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x208e24b) socket$inet6(0xa, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="00aae734718308d3359239927452a3d15ec5ccdbe8ec94a9aff8bb20138d35ac79a0a234f02aed4d0d9d693be61de6a7e972090e4975622167cf84674df04fa3b44037508687d22696b657120f9d14af9700ffd481ccb1dbf956af9f2cfbd2f26a646e", 0x63, 0x0, 0x0, 0x0) 23:42:03 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00 \x00;'], 0x30}}, 0x0) 23:42:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='nonumtail=0']) [ 288.689590][T19480] FAT-fs (loop2): bogus number of reserved sectors [ 288.701359][T19480] FAT-fs (loop2): Can't find a valid FAT filesystem [ 288.790832][T19480] FAT-fs (loop2): bogus number of reserved sectors [ 288.810234][T19480] FAT-fs (loop2): Can't find a valid FAT filesystem 23:42:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000005240)) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) 23:42:04 executing program 1: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 23:42:04 executing program 5: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x50}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r4, 0x0) preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) 23:42:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000180)="b8050000000f01c10f46a78900000066ba2100b067ee4066ba2000b000eeedb9800000c00f3266bac0000f3066b808008ed0660f38806f000f011c26f5f30fc7b2533b0000", 0x45}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:42:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 23:42:04 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x121005) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000140)={0x8, 'wlan1\x00', {'rose0\x00'}, 0x8001}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) pkey_mprotect(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) [ 289.370717][ C1] sd 0:0:1:0: [sg0] tag#3295 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 289.381133][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB: Test Unit Ready [ 289.387573][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 289.397126][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 289.406680][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 289.413116][T19531] kvm: pic: level sensitive irq not supported [ 289.416236][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 289.416356][T19531] kvm: pic: non byte read [ 289.422361][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 289.433717][T19531] kvm: pic: level sensitive irq not supported [ 289.436236][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 289.436258][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 289.470957][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 289.480536][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 289.490141][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 289.490662][T19531] kvm: pic: non byte read [ 289.499701][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 23:42:04 executing program 1: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 23:42:04 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db9820000000000000d403ffff635427e59aa146175dd106736d173f0fc7ec58000000000000000081baf9459c5c953948c6801f2c0945c08ba8000063dfe6da5bec97a324016f7b7fa4981ffc99a7422007653872ecb4f63adb415ccdfe808101000100000000004f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5092d45cc36c2440eac2d224609aba9e600000000128ef922502a34290365194a47871a079242514ddb61c548aa5f6486b1aa16690cfe"], 0xab) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000140)={0x8, 'wlan1\x00', {'rose0\x00'}, 0x8001}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) pkey_mprotect(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) [ 289.499720][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 289.499736][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[c0]: 00 00 00 00 00 00 00 00 23:42:04 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:42:04 executing program 5: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2400, 0x1) 23:42:04 executing program 1: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) [ 289.613934][T19531] kvm: pic: level sensitive irq not supported [ 289.613972][T19531] kvm: pic: non byte read [ 289.628860][T19531] kvm: pic: level sensitive irq not supported [ 289.628895][T19531] kvm: pic: non byte read 23:42:04 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 289.658560][T19531] kvm: pic: level sensitive irq not supported [ 289.658603][T19531] kvm: pic: non byte read [ 289.678195][T19531] kvm: pic: level sensitive irq not supported [ 289.678233][T19531] kvm: pic: non byte read [ 289.691032][T19531] kvm: pic: level sensitive irq not supported [ 289.691071][T19531] kvm: pic: non byte read [ 289.708420][T19531] kvm: pic: level sensitive irq not supported [ 289.708468][T19531] kvm: pic: non byte read [ 289.724017][T19531] kvm: pic: level sensitive irq not supported [ 289.724050][T19531] kvm: pic: non byte read [ 289.745034][T19531] kvm: pic: level sensitive irq not supported [ 289.745071][T19531] kvm: pic: non byte read [ 289.927063][ T2039] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 290.056935][ T9710] usb 1-1: new high-speed USB device number 9 using dummy_hcd 23:42:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000005240)) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) 23:42:04 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$FIGETBSZ(r0, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000440)={0x1, 0x4, @name="2773f16770f81fb213919f523b38a0084a9de4359c00affbd84fb07690b7c09a"}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)}], 0x1, &(0x7f00000009c0)=""/214, 0xd6}, 0x2020) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'broute\x00'}, &(0x7f0000000200)=0x78) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff000}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) open_tree(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x1000) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) fcntl$setsig(r1, 0xa, 0x27) 23:42:04 executing program 2: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2402, 0x0) 23:42:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:04 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_open_dev$sg(0x0, 0x100000001, 0x10102) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x1}}, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x400007f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000002300)=0xfffffffffffffeac) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) 23:42:05 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x1}}, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) [ 290.326985][ T9710] usb 1-1: Using ep0 maxpacket: 8 [ 290.332373][ T2039] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 290.348688][ T2039] usb 5-1: config 0 has no interface number 0 [ 290.369863][ T2039] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.400284][ T2039] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 290.426537][ T2039] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:42:05 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$FIGETBSZ(r0, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000440)={0x1, 0x4, @name="2773f16770f81fb213919f523b38a0084a9de4359c00affbd84fb07690b7c09a"}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)}], 0x1, &(0x7f00000009c0)=""/214, 0xd6}, 0x2020) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'broute\x00'}, &(0x7f0000000200)=0x78) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff000}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) open_tree(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x1000) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) fcntl$setsig(r1, 0xa, 0x27) [ 290.467190][ T9710] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 290.488353][ T9710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.512587][ T2039] usb 5-1: config 0 descriptor?? 23:42:05 executing program 2: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pkey_mprotect(&(0x7f0000b20000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f00004c7000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) [ 290.528818][ T9710] usb 1-1: config 0 descriptor?? [ 290.588788][ T9710] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 291.008775][ T2039] hid-picolcd 0003:04D8:C002.0001: unknown main item tag 0x0 [ 291.077403][ T2039] hid-picolcd 0003:04D8:C002.0001: No report with id 0x11 found [ 291.226848][ T2039] usb 5-1: USB disconnect, device number 13 [ 291.666733][ T9710] gspca_sonixj: reg_w1 err -71 [ 291.706821][ T9710] sonixj: probe of 1-1:0.0 failed with error -71 [ 291.718951][ T9710] usb 1-1: USB disconnect, device number 9 [ 292.026702][ T8987] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 292.426701][ T9531] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 292.476687][ T8987] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 292.484849][ T8987] usb 5-1: config 0 has no interface number 0 [ 292.491523][ T8987] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.502838][ T8987] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 292.512168][ T8987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.522406][ T8987] usb 5-1: config 0 descriptor?? 23:42:07 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:42:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:07 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r1 = epoll_create(0x4) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) [ 292.666753][ T9531] usb 1-1: Using ep0 maxpacket: 8 [ 292.716669][ T8987] usbhid 5-1:0.35: can't add hid device: -71 [ 292.723896][ T8987] usbhid: probe of 5-1:0.35 failed with error -71 [ 292.741561][ T8987] usb 5-1: USB disconnect, device number 14 [ 292.786676][ T9531] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 292.795755][ T9531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.806806][ T9531] usb 1-1: config 0 descriptor?? [ 292.848615][ T9531] gspca_main: sonixj-2.14.0 probing 0471:0330 23:42:07 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:42:07 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @dev}, 0x10) 23:42:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:07 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r1 = epoll_create(0x4) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 23:42:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:07 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r1 = epoll_create(0x4) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 23:42:07 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 292.987951][ T9531] gspca_sonixj: reg_w1 err -71 [ 292.992828][ T9531] sonixj: probe of 1-1:0.0 failed with error -71 [ 293.016760][ T9531] usb 1-1: USB disconnect, device number 10 23:42:07 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r1 = epoll_create(0x4) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) [ 293.081753][T19709] __nla_validate_parse: 27 callbacks suppressed [ 293.081767][T19709] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 293.117996][ T8987] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 293.138947][T19709] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 293.161719][T19698] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 293.178573][T19698] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:42:07 executing program 2: syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r0 = epoll_create(0x4) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) [ 293.194610][T19698] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 293.216345][T19698] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 293.237935][T19698] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 293.416628][ T9531] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 293.486629][ T8987] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 293.500840][ T8987] usb 5-1: config 0 has no interface number 0 [ 293.506988][ T8987] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.518099][ T8987] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 293.527244][ T8987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.536051][ T8987] usb 5-1: config 0 descriptor?? [ 293.656583][ T9531] usb 1-1: Using ep0 maxpacket: 8 [ 293.776878][ T9531] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 293.785920][ T9531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.801587][ T9531] usb 1-1: config 0 descriptor?? [ 293.850023][ T9531] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 294.037212][ T8987] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x0 [ 294.106551][ T8987] hid-picolcd 0003:04D8:C002.0002: No report with id 0x11 found [ 294.241699][ T8987] usb 5-1: USB disconnect, device number 15 23:42:09 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:42:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:09 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) [ 294.926511][ T9531] gspca_sonixj: reg_w1 err -71 [ 294.956467][ T9531] sonixj: probe of 1-1:0.0 failed with error -71 [ 294.965137][ T9531] usb 1-1: USB disconnect, device number 11 [ 295.056479][ T5] usb 5-1: new high-speed USB device number 16 using dummy_hcd 23:42:10 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:42:10 executing program 1: syz_mount_image$tmpfs(&(0x7f0000017b40)='tmpfs\x00', &(0x7f0000017b80)='./file0\x00', 0x0, 0x0, &(0x7f0000018f00), 0x4480, &(0x7f0000018f80)={[{@huge_advise='huge=advise'}, {@nr_inodes={'nr_inodes', 0x3d, [0x0]}}], [{@fowner_lt={'fowner<'}}]}) 23:42:10 executing program 2: syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r0 = epoll_create(0x4) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 23:42:10 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 295.416830][ T5] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 295.427456][ T5] usb 5-1: config 0 has no interface number 0 [ 295.433585][ T5] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 23:42:10 executing program 2: syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r0 = epoll_create(0x4) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 23:42:10 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) [ 295.472971][T19780] tmpfs: Bad value for 'nr_inodes' [ 295.479233][ T5] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 295.497001][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.514312][ T5] usb 5-1: config 0 descriptor?? [ 295.554619][T19780] tmpfs: Bad value for 'nr_inodes' 23:42:10 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) 23:42:10 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) [ 295.786418][ T9531] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 295.997023][ T5] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 296.026407][ T9531] usb 1-1: Using ep0 maxpacket: 8 [ 296.066411][ T5] hid-picolcd 0003:04D8:C002.0003: No report with id 0x11 found [ 296.146415][ T9531] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 296.155627][ T9531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.165776][ T9531] usb 1-1: config 0 descriptor?? [ 296.210096][ T4821] usb 5-1: USB disconnect, device number 16 [ 296.211049][ T9531] gspca_main: sonixj-2.14.0 probing 0471:0330 23:42:11 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:42:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 296.756784][T19839] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.766923][T19839] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 297.076840][ T4821] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 297.286333][ T9531] gspca_sonixj: reg_w1 err -71 [ 297.317505][ T9531] sonixj: probe of 1-1:0.0 failed with error -71 [ 297.324917][ T9531] usb 1-1: USB disconnect, device number 12 [ 297.486283][ T4821] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 297.494373][ T4821] usb 5-1: config 0 has no interface number 0 [ 297.501688][ T4821] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.512686][ T4821] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 297.523218][ T4821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.532522][ T4821] usb 5-1: config 0 descriptor?? 23:42:12 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:42:12 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 23:42:12 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 23:42:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:12 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 23:42:12 executing program 1: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xd9, 0xc3, 0xd8, 0x40, 0x6cd, 0x112, 0x181, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2b, 0x2e, 0x7d, 0x0, [], [{}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x7f}, 0x4c, &(0x7f0000000ec0)={0x5, 0xf, 0x4c, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "2aba0f5132e8f3ff95dd2b29be1fe08f"}, @ss_container_id={0x14, 0x10, 0x4, 0x4c, "aa5ffb9f708b7c7bcb41acf6ef16ece1"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x0, 0xf, 0x0, [0x3f00, 0xff3f3f, 0x18000]}]}, 0x1, [{0x0, 0x0}]}) [ 297.832332][T19867] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:42:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:12 executing program 2: r0 = epoll_create(0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) [ 298.017736][ T4821] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 298.096241][ T4821] hid-picolcd 0003:04D8:C002.0004: No report with id 0x11 found [ 298.126957][ T8987] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 298.146650][ T9710] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 298.226384][ T5] usb 5-1: USB disconnect, device number 17 [ 298.376197][ T8987] usb 1-1: Using ep0 maxpacket: 8 [ 298.527120][ T8987] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 298.537708][ T8987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.547615][ T8987] usb 1-1: config 0 descriptor?? [ 298.556202][ T9710] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 298.599419][ T8987] gspca_main: sonixj-2.14.0 probing 0471:0330 23:42:13 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 23:42:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 298.772890][T19912] __nla_validate_parse: 3 callbacks suppressed [ 298.772942][T19912] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 298.790292][T19912] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 298.836351][ T9710] usb 2-1: string descriptor 0 read error: -22 [ 298.843722][ T9710] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= 1.81 [ 298.862661][ T9710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.877999][ T9710] usb 2-1: config 0 descriptor?? [ 298.929890][ T9710] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 298.937553][ T9710] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 298.945276][ T9710] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 298.953378][ T9710] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 298.961429][ T9710] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 298.969629][ T9710] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 298.978821][ T9710] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 298.996140][ T9710] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 299.004811][ T9710] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 299.066180][ T9531] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 299.129151][ T9711] usb 2-1: USB disconnect, device number 60 [ 299.139349][ T9711] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 299.148931][ T9711] keyspan 2-1:0.0: device disconnected [ 299.426135][ T9531] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 299.434528][ T9531] usb 5-1: config 0 has no interface number 0 [ 299.441246][ T9531] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.452525][ T9531] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 299.461909][ T9531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.470732][ T9531] usb 5-1: config 0 descriptor?? [ 299.696118][ T8987] gspca_sonixj: reg_w1 err -71 [ 299.736256][ T8987] sonixj: probe of 1-1:0.0 failed with error -71 [ 299.743628][ T8987] usb 1-1: USB disconnect, device number 13 [ 299.906093][ T9711] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 300.006075][ T9531] usbhid 5-1:0.35: can't add hid device: -71 [ 300.012186][ T9531] usbhid: probe of 5-1:0.35 failed with error -71 [ 300.020080][ T9531] usb 5-1: USB disconnect, device number 18 23:42:14 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 23:42:14 executing program 2: r0 = epoll_create(0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 23:42:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:14 executing program 2: r0 = epoll_create(0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) [ 300.237202][T19967] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 300.272653][ T9711] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 23:42:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) [ 300.285962][T19967] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 300.365019][T19978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 300.384691][T19978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 300.496026][ T9531] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 300.576072][ T9711] usb 2-1: string descriptor 0 read error: -22 [ 300.582279][ T9711] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= 1.81 [ 300.591837][ T9711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.602131][ T9711] usb 2-1: config 0 descriptor?? [ 300.658818][ T9711] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 300.667715][ T9711] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 300.675372][ T9711] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 300.683698][ T9711] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 300.693326][ T9711] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 300.701062][ T9711] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 300.710221][ T9711] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 300.718088][ T9711] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 300.726670][ T9711] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 300.736016][ T9531] usb 1-1: Using ep0 maxpacket: 8 23:42:15 executing program 1: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xd9, 0xc3, 0xd8, 0x40, 0x6cd, 0x112, 0x181, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2b, 0x2e, 0x7d, 0x0, [], [{}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x7f}, 0x4c, &(0x7f0000000ec0)={0x5, 0xf, 0x4c, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "2aba0f5132e8f3ff95dd2b29be1fe08f"}, @ss_container_id={0x14, 0x10, 0x4, 0x4c, "aa5ffb9f708b7c7bcb41acf6ef16ece1"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x0, 0xf, 0x0, [0x3f00, 0xff3f3f, 0x18000]}]}, 0x1, [{0x0, 0x0}]}) 23:42:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:15 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = epoll_create(0x4) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 23:42:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:15 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 300.856025][ T9531] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 300.866102][ T4821] usb 2-1: USB disconnect, device number 61 [ 300.869337][ T9531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.883119][ T4821] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 300.912368][ T4821] keyspan 2-1:0.0: device disconnected 23:42:15 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = epoll_create(0x4) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) [ 300.934394][ T9531] usb 1-1: config 0 descriptor?? [ 300.987757][ T9531] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 301.004480][T20020] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 301.036821][T20020] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 301.072720][T20009] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 301.091780][T20009] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 301.216005][ T5] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 301.385951][ T4821] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 301.576001][ T5] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 301.584154][ T5] usb 5-1: config 0 has no interface number 0 [ 301.590278][ T5] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.601307][ T5] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 301.610401][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.619883][ T5] usb 5-1: config 0 descriptor?? [ 301.806162][ T4821] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 301.865933][ T9531] gspca_sonixj: reg_r err -71 [ 301.870690][ T9531] sonixj: probe of 1-1:0.0 failed with error -71 [ 301.878186][ T9531] usb 1-1: USB disconnect, device number 14 [ 302.115911][ T4821] usb 2-1: string descriptor 0 read error: -22 [ 302.122185][ T4821] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= 1.81 [ 302.131285][ T4821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.141412][ T4821] usb 2-1: config 0 descriptor?? [ 302.155941][ T5] usbhid 5-1:0.35: can't add hid device: -71 [ 302.162077][ T5] usbhid: probe of 5-1:0.35 failed with error -71 [ 302.169390][ T5] usb 5-1: USB disconnect, device number 19 [ 302.199223][ T4821] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 302.207037][ T4821] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 302.214668][ T4821] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 302.222734][ T4821] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 302.230910][ T4821] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 302.245930][ T4821] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 302.253500][ T4821] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 302.261532][ T4821] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 302.270195][ T4821] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 23:42:17 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 23:42:17 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = epoll_create(0x4) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 23:42:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:17 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r1 = epoll_create(0x0) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 23:42:17 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r1 = epoll_create(0x0) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) [ 302.418508][ T5] usb 2-1: USB disconnect, device number 62 [ 302.431877][ T5] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 302.457244][ T5] keyspan 2-1:0.0: device disconnected [ 302.705869][ T4821] usb 1-1: new high-speed USB device number 15 using dummy_hcd 23:42:17 executing program 1: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xd9, 0xc3, 0xd8, 0x40, 0x6cd, 0x112, 0x181, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2b, 0x2e, 0x7d, 0x0, [], [{}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x7f}, 0x4c, &(0x7f0000000ec0)={0x5, 0xf, 0x4c, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "2aba0f5132e8f3ff95dd2b29be1fe08f"}, @ss_container_id={0x14, 0x10, 0x4, 0x4c, "aa5ffb9f708b7c7bcb41acf6ef16ece1"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x0, 0xf, 0x0, [0x3f00, 0xff3f3f, 0x18000]}]}, 0x1, [{0x0, 0x0}]}) 23:42:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:17 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r1 = epoll_create(0x0) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 23:42:17 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 23:42:17 executing program 2: syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r0 = epoll_create(0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) [ 302.967422][ T4821] usb 1-1: Using ep0 maxpacket: 8 [ 303.097496][ T4821] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 303.109738][ T4821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.141512][ T4821] usb 1-1: config 0 descriptor?? [ 303.207652][ T4821] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 303.275857][ T5] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 303.285909][ T8987] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 303.635804][ T5] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 303.643939][ T5] usb 5-1: config 0 has no interface number 0 [ 303.650516][ T5] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.661764][ T5] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 303.671257][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.681043][ T5] usb 5-1: config 0 descriptor?? [ 303.687560][ T8987] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 303.975821][ T8987] usb 2-1: string descriptor 0 read error: -22 [ 303.982236][ T8987] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= 1.81 [ 303.991689][ T8987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.000886][ T8987] usb 2-1: config 0 descriptor?? [ 304.059378][ T8987] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 304.075014][ T8987] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 304.082931][ T4821] gspca_sonixj: reg_r err -71 [ 304.087948][ T4821] sonixj: probe of 1-1:0.0 failed with error -71 [ 304.094990][ T8987] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 304.102614][ T4821] usb 1-1: USB disconnect, device number 15 [ 304.108973][ T8987] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 304.117306][ T8987] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 304.124955][ T8987] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 304.136411][ T8987] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 304.145750][ T8987] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 304.154678][ T8987] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 304.225761][ T5] usbhid 5-1:0.35: can't add hid device: -71 [ 304.231930][ T5] usbhid: probe of 5-1:0.35 failed with error -71 [ 304.242741][ T5] usb 5-1: USB disconnect, device number 20 [ 304.265285][ T9531] usb 2-1: USB disconnect, device number 63 [ 304.272129][ T9531] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 304.287634][ T9531] keyspan 2-1:0.0: device disconnected 23:42:19 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 23:42:19 executing program 2: syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r0 = epoll_create(0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 23:42:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:19 executing program 2: syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r0 = epoll_create(0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 23:42:19 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) [ 304.664097][T20165] __nla_validate_parse: 14 callbacks suppressed [ 304.664112][T20165] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 304.704992][T20165] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 304.737303][T20160] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:42:19 executing program 1: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xd9, 0xc3, 0xd8, 0x40, 0x6cd, 0x112, 0x181, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2b, 0x2e, 0x7d, 0x0, [], [{}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x7f}, 0x4c, &(0x7f0000000ec0)={0x5, 0xf, 0x4c, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "2aba0f5132e8f3ff95dd2b29be1fe08f"}, @ss_container_id={0x14, 0x10, 0x4, 0x4c, "aa5ffb9f708b7c7bcb41acf6ef16ece1"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x0, 0xf, 0x0, [0x3f00, 0xff3f3f, 0x18000]}]}, 0x1, [{0x0, 0x0}]}) 23:42:19 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r1 = epoll_create(0x4) close_range(r0, 0xffffffffffffffff, 0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 23:42:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 304.764626][T20160] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 304.776321][T20160] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 304.787374][T20160] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 304.810873][T20160] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:42:19 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r1 = epoll_create(0x4) close_range(r0, 0xffffffffffffffff, 0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 23:42:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:19 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r1 = epoll_create(0x4) close_range(r0, 0xffffffffffffffff, 0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) [ 304.905673][ T9531] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 304.969129][T20193] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 304.984984][T20193] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 305.005855][T20187] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 305.037564][ T5] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 305.135678][ T4821] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 305.175683][ T9531] usb 1-1: Using ep0 maxpacket: 8 [ 305.296309][ T9531] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 305.305401][ T9531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.316549][ T9531] usb 1-1: config 0 descriptor?? [ 305.358909][ T9531] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 305.395723][ T5] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 305.403951][ T5] usb 5-1: config 0 has no interface number 0 [ 305.410674][ T5] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.422091][ T5] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 305.431459][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.441741][ T5] usb 5-1: config 0 descriptor?? [ 305.545669][ T4821] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 305.835650][ T4821] usb 2-1: string descriptor 0 read error: -22 [ 305.841865][ T4821] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= 1.81 [ 305.851993][ T4821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.862605][ T4821] usb 2-1: config 0 descriptor?? [ 305.906761][ T4821] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 305.914190][ T4821] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 305.930083][ T4821] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 305.941755][ T4821] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 305.953693][ T4821] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 305.965159][ T4821] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 305.976203][ T4821] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 305.983846][ T4821] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 305.985685][ T5] usbhid 5-1:0.35: can't add hid device: -71 [ 305.999208][ T5] usbhid: probe of 5-1:0.35 failed with error -71 [ 306.006450][ T4821] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 306.008931][ T5] usb 5-1: USB disconnect, device number 21 [ 306.127480][ T9709] usb 2-1: USB disconnect, device number 64 [ 306.135473][ T9709] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 306.145298][ T9709] keyspan 2-1:0.0: device disconnected [ 306.215672][ T9531] gspca_sonixj: reg_r err -71 [ 306.220452][ T9531] sonixj: probe of 1-1:0.0 failed with error -71 [ 306.228019][ T9531] usb 1-1: USB disconnect, device number 16 23:42:21 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:42:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:21 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) epoll_create(0x4) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 23:42:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:21 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:42:21 executing program 1: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 23:42:21 executing program 1: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 23:42:21 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) epoll_create(0x4) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 23:42:21 executing program 1: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 23:42:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}], 0x2}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:21 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) epoll_create(0x4) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 23:42:21 executing program 1: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xd9, 0xc3, 0xd8, 0x40, 0x6cd, 0x112, 0x181, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2b, 0x2e, 0x7d, 0x0, [], [{}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x7f}, 0x4c, &(0x7f0000000ec0)={0x5, 0xf, 0x4c, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "2aba0f5132e8f3ff95dd2b29be1fe08f"}, @ss_container_id={0x14, 0x10, 0x4, 0x4c, "aa5ffb9f708b7c7bcb41acf6ef16ece1"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x0, 0xf, 0x0, [0x3f00, 0xff3f3f, 0x18000]}]}, 0x1, [{0x0, 0x0}]}) [ 307.026899][ T8987] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 307.045549][ T9531] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 307.205521][ T9710] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 307.305528][ T9531] usb 1-1: Using ep0 maxpacket: 8 [ 307.385872][ T8987] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 307.394053][ T8987] usb 5-1: config 0 has no interface number 0 [ 307.400695][ T8987] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.412179][ T8987] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 307.421499][ T8987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.431523][ T8987] usb 5-1: config 0 descriptor?? [ 307.435914][ T9531] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 307.445782][ T9531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.454403][ T9531] usb 1-1: config 0 descriptor?? [ 307.498746][ T9531] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 307.566041][ T9710] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 307.815472][ T9710] usb 2-1: string descriptor 0 read error: -22 [ 307.821720][ T9710] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= 1.81 [ 307.831358][ T9710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.840142][ T9710] usb 2-1: config 0 descriptor?? [ 307.878211][ T9710] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 307.885684][ T9710] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 307.893869][ T9710] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 307.914838][ T9710] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 307.928328][ T9710] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 307.939740][ T9710] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 307.950772][ T9710] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 307.962362][ T9710] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 307.973451][ T8987] usbhid 5-1:0.35: can't add hid device: -71 [ 307.979515][ T8987] usbhid: probe of 5-1:0.35 failed with error -71 [ 307.989950][ T9710] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 308.003000][ T8987] usb 5-1: USB disconnect, device number 22 [ 308.077289][ T9709] usb 2-1: USB disconnect, device number 65 [ 308.084279][ T9709] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 308.100277][ T9709] keyspan 2-1:0.0: device disconnected [ 308.355455][ T9531] gspca_sonixj: reg_r err -71 [ 308.360176][ T9531] sonixj: probe of 1-1:0.0 failed with error -71 [ 308.367841][ T9531] usb 1-1: USB disconnect, device number 17 23:42:23 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:42:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}], 0x2}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r1 = epoll_create(0x4) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 23:42:23 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:42:23 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xd9, 0xc3, 0xd8, 0x40, 0x6cd, 0x112, 0x181, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2b, 0x2e, 0x7d, 0x0, [], [{}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x7f}, 0x4c, &(0x7f0000000ec0)={0x5, 0xf, 0x4c, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "2aba0f5132e8f3ff95dd2b29be1fe08f"}, @ss_container_id={0x14, 0x10, 0x4, 0x4c, "aa5ffb9f708b7c7bcb41acf6ef16ece1"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x0, 0xf, 0x0, [0x3f00, 0xff3f3f, 0x18000]}]}, 0x1, [{0x0, 0x0}]}) 23:42:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r1 = epoll_create(0x4) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 23:42:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r1 = epoll_create(0x4) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 23:42:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}], 0x2}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r1 = epoll_create(0x4) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(r1, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 23:42:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r1 = epoll_create(0x4) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(r1, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) [ 309.185380][ T9531] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 309.195424][ T8987] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 309.196023][ T9709] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 309.455653][ T9709] usb 1-1: Using ep0 maxpacket: 8 [ 309.555746][ T8987] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 309.563848][ T8987] usb 5-1: config 0 has no interface number 0 [ 309.571371][ T8987] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.582632][ T8987] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 309.585656][ T9531] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 309.593236][ T8987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.612707][ T8987] usb 5-1: config 0 descriptor?? [ 309.625921][ T9709] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 309.635173][ T9709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.644312][ T9709] usb 1-1: config 0 descriptor?? [ 309.707245][ T9709] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 309.885334][ T9531] usb 2-1: string descriptor 0 read error: -22 [ 309.891560][ T9531] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= 1.81 [ 309.900675][ T9531] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.909486][ T9531] usb 2-1: config 0 descriptor?? [ 309.946318][ T9531] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 309.953747][ T9531] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 309.969300][ T9531] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 309.980851][ T9531] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 309.993528][ T9531] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 310.004553][ T9531] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 310.015899][ T9531] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 310.023540][ T9531] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 310.039965][ T9531] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 310.147333][ T9710] usb 2-1: USB disconnect, device number 66 [ 310.154257][ T9710] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 310.168834][ T9710] keyspan 2-1:0.0: device disconnected [ 310.185341][ T8987] usbhid 5-1:0.35: can't add hid device: -71 [ 310.191402][ T8987] usbhid: probe of 5-1:0.35 failed with error -71 [ 310.203144][ T8987] usb 5-1: USB disconnect, device number 23 [ 310.565493][ T3247] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.565526][ T9709] gspca_sonixj: reg_r err -71 [ 310.571810][ T3247] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.576919][ T9709] sonixj: probe of 1-1:0.0 failed with error -71 [ 310.599809][ T9709] usb 1-1: USB disconnect, device number 18 23:42:25 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:42:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {0x0}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:25 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r1 = epoll_create(0x4) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(r1, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 23:42:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:25 executing program 4: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:42:25 executing program 1: syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000fc0)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x7f}, 0x4c, &(0x7f0000000ec0)={0x5, 0xf, 0x4c, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "2aba0f5132e8f3ff95dd2b29be1fe08f"}, @ss_container_id={0x14, 0x10, 0x4, 0x4c, "aa5ffb9f708b7c7bcb41acf6ef16ece1"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x0, 0xf, 0x0, [0x3f00, 0xff3f3f, 0x18000]}]}, 0x1, [{0x0, 0x0}]}) 23:42:25 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x2, 0x0, 0x1}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x3, 0x7, &(0x7f0000000000)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x1000, &(0x7f0000000280)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 23:42:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="17000000160001edff000000000000000a"], 0x24}}, 0x0) [ 311.168751][T20440] __nla_validate_parse: 32 callbacks suppressed [ 311.168804][T20440] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 311.186741][T20440] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 311.196975][T20434] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 311.207477][T20434] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:42:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 311.251228][T20434] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 311.275099][T20434] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 311.295965][T20434] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:42:26 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)) eventfd2(0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xffffffffffffbf81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 23:42:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {0x0}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) [ 311.376770][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 311.376825][ T36] audit: type=1326 audit(1615938146.092:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20453 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x465f69 code=0x0 [ 311.405615][ T8987] usb 1-1: new high-speed USB device number 19 using dummy_hcd 23:42:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 311.418969][T20458] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 311.428911][T20458] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 311.458154][T20454] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 311.645183][ T8987] usb 1-1: Using ep0 maxpacket: 8 [ 311.765196][ T8987] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 311.774275][ T8987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.784579][ T8987] usb 1-1: config 0 descriptor?? [ 311.828350][ T8987] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 312.208418][ T36] audit: type=1326 audit(1615938146.922:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20453 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x465f69 code=0x0 [ 312.706443][ T8987] gspca_sonixj: reg_r err -71 [ 312.711191][ T8987] sonixj: probe of 1-1:0.0 failed with error -71 [ 312.718404][ T8987] usb 1-1: USB disconnect, device number 19 23:42:27 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:42:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {0x0}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:27 executing program 4: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:42:27 executing program 1: syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000fc0)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x7f}, 0x4c, &(0x7f0000000ec0)={0x5, 0xf, 0x4c, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "2aba0f5132e8f3ff95dd2b29be1fe08f"}, @ss_container_id={0x14, 0x10, 0x4, 0x4c, "aa5ffb9f708b7c7bcb41acf6ef16ece1"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x0, 0xf, 0x0, [0x3f00, 0xff3f3f, 0x18000]}]}, 0x1, [{0x0, 0x0}]}) 23:42:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) 23:42:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x2}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 313.515057][ T9709] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 313.775030][ T9709] usb 1-1: Using ep0 maxpacket: 8 [ 313.895057][ T9709] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 313.904244][ T9709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.914247][ T9709] usb 1-1: config 0 descriptor?? [ 313.957106][ T9709] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 314.395000][ T9709] gspca_sonixj: reg_r err -32 [ 314.399817][ T9709] sonixj: probe of 1-1:0.0 failed with error -32 23:42:30 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:42:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x2}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:30 executing program 1: syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000fc0)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x7f}, 0x4c, &(0x7f0000000ec0)={0x5, 0xf, 0x4c, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "2aba0f5132e8f3ff95dd2b29be1fe08f"}, @ss_container_id={0x14, 0x10, 0x4, 0x4c, "aa5ffb9f708b7c7bcb41acf6ef16ece1"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x0, 0xf, 0x0, [0x3f00, 0xff3f3f, 0x18000]}]}, 0x1, [{0x0, 0x0}]}) 23:42:30 executing program 4: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:42:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x4b4c, &(0x7f0000000000)) [ 316.239161][ T8987] usb 1-1: USB disconnect, device number 20 23:42:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fstat(r1, &(0x7f0000000040)) 23:42:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000300)="a0") [ 316.348453][T20555] __nla_validate_parse: 18 callbacks suppressed [ 316.348465][T20555] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.365899][T20555] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.383352][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:42:31 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:31 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) 23:42:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x2}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) [ 316.393602][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.404017][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.414019][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.423792][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.560825][T20570] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.570300][T20570] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.586284][T20567] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.704833][ T8987] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 316.944818][ T8987] usb 1-1: Using ep0 maxpacket: 8 [ 317.064908][ T8987] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 317.073966][ T8987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.082797][ T8987] usb 1-1: config 0 descriptor?? [ 317.126736][ T8987] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 317.564812][ T8987] gspca_sonixj: reg_r err -32 [ 317.569580][ T8987] sonixj: probe of 1-1:0.0 failed with error -32 23:42:34 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:42:34 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:34 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000001c0)) 23:42:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:34 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xd9, 0xc3, 0xd8, 0x0, 0x6cd, 0x112, 0x181, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2b, 0x2e, 0x7d, 0x0, [], [{}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x7f}, 0x4c, &(0x7f0000000ec0)={0x5, 0xf, 0x4c, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "2aba0f5132e8f3ff95dd2b29be1fe08f"}, @ss_container_id={0x14, 0x10, 0x4, 0x4c, "aa5ffb9f708b7c7bcb41acf6ef16ece1"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x0, 0xf, 0x0, [0x3f00, 0xff3f3f, 0x18000]}]}, 0x1, [{0x0, 0x0}]}) 23:42:34 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:42:34 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 319.286229][ T8987] usb 1-1: USB disconnect, device number 21 23:42:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b30, 0x0) 23:42:34 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:34 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:34 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="8c", 0x1) r2 = dup(r1) r3 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) socket$netlink(0x10, 0x3, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) setsockopt(r2, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) [ 319.485922][T20620] "syz-executor.2" (20620) uses obsolete ecb(arc4) skcipher [ 319.510729][ T36] audit: type=1800 audit(1615938154.223:53): pid=20620 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=14530 res=0 errno=0 [ 319.594518][T20624] "syz-executor.2" (20624) uses obsolete ecb(arc4) skcipher [ 319.624630][ T4821] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 319.734635][ T8987] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 319.814636][ T4821] usb 2-1: device descriptor read/64, error 18 [ 319.974602][ T8987] usb 1-1: Using ep0 maxpacket: 8 [ 320.084616][ T4821] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 320.094942][ T8987] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 320.104042][ T8987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.114184][ T8987] usb 1-1: config 0 descriptor?? [ 320.156368][ T8987] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 320.274585][ T4821] usb 2-1: device descriptor read/64, error 18 [ 320.394606][ T4821] usb usb2-port1: attempt power cycle [ 320.594560][ T8987] gspca_sonixj: reg_r err -32 [ 320.599310][ T8987] sonixj: probe of 1-1:0.0 failed with error -32 [ 321.104528][ T4821] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 321.194705][ T4821] usb 2-1: Invalid ep0 maxpacket: 0 [ 321.344569][ T4821] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 321.464534][ T4821] usb 2-1: Invalid ep0 maxpacket: 0 [ 321.469948][ T4821] usb usb2-port1: unable to enumerate USB device 23:42:37 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:42:37 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0xf, 0x0) 23:42:37 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:42:37 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xd9, 0xc3, 0xd8, 0x0, 0x6cd, 0x112, 0x181, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2b, 0x2e, 0x7d, 0x0, [], [{}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x7f}, 0x4c, &(0x7f0000000ec0)={0x5, 0xf, 0x4c, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "2aba0f5132e8f3ff95dd2b29be1fe08f"}, @ss_container_id={0x14, 0x10, 0x4, 0x4c, "aa5ffb9f708b7c7bcb41acf6ef16ece1"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x0, 0xf, 0x0, [0x3f00, 0xff3f3f, 0x18000]}]}, 0x1, [{0x0, 0x0}]}) [ 322.342408][ T8987] usb 1-1: USB disconnect, device number 22 23:42:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 322.451277][T20660] __nla_validate_parse: 18 callbacks suppressed [ 322.451288][T20660] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:42:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 322.495959][T20660] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 322.505862][T20652] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 322.515985][T20652] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:42:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x2}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) [ 322.547231][T20652] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 322.574239][T20652] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 322.584776][T20652] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:42:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 322.709371][T20679] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 322.718837][T20679] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 322.729305][T20673] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 322.784420][ T4821] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 322.814428][ T8987] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 322.974387][ T4821] usb 2-1: device descriptor read/64, error 18 [ 323.054407][ T8987] usb 1-1: Using ep0 maxpacket: 8 [ 323.174704][ T8987] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 323.183920][ T8987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.194088][ T8987] usb 1-1: config 0 descriptor?? [ 323.237733][ T8987] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 323.254462][ T4821] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 323.444373][ T4821] usb 2-1: device descriptor read/64, error 18 [ 323.564384][ T4821] usb usb2-port1: attempt power cycle [ 323.674352][ T8987] gspca_sonixj: reg_r err -32 [ 323.679117][ T8987] sonixj: probe of 1-1:0.0 failed with error -32 [ 324.294301][ T4821] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 324.394601][ T4821] usb 2-1: Invalid ep0 maxpacket: 0 [ 324.554829][ T4821] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 324.644561][ T4821] usb 2-1: Invalid ep0 maxpacket: 0 [ 324.649896][ T4821] usb usb2-port1: unable to enumerate USB device 23:42:40 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:42:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') 23:42:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x2}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:40 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:42:40 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xd9, 0xc3, 0xd8, 0x0, 0x6cd, 0x112, 0x181, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2b, 0x2e, 0x7d, 0x0, [], [{}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x7f}, 0x4c, &(0x7f0000000ec0)={0x5, 0xf, 0x4c, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "2aba0f5132e8f3ff95dd2b29be1fe08f"}, @ss_container_id={0x14, 0x10, 0x4, 0x4c, "aa5ffb9f708b7c7bcb41acf6ef16ece1"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x0, 0xf, 0x0, [0x3f00, 0xff3f3f, 0x18000]}]}, 0x1, [{0x0, 0x0}]}) [ 325.405756][ T9531] usb 1-1: USB disconnect, device number 23 23:42:40 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x70, 0x7, 0x6, 0x40, 0x4, 0x0, 0x5, 0x3000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x3, @perf_bp={&(0x7f0000000400), 0x9}, 0x4280, 0x0, 0x6, 0x7, 0x2, 0x5}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r1, r0, 0x0, 0xa, &(0x7f0000000300)='/dev/rtc0\x00'}, 0x30) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x37, 0x29, 0x2f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000003c0)}, 0x606, 0x800, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x6, 0x1, 0x81, 0x8, 0x0, 0x3, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x7ff, 0x6}, 0x202, 0x2, 0x7fffffff, 0x6, 0xfffffffffffff634, 0x8, 0xffff}, r1, 0xc, r0, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 23:42:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x2}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) [ 325.510680][T20711] IPVS: ftp: loaded support on port[0] = 21 23:42:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{0x0}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) [ 325.747910][T20729] IPVS: ftp: loaded support on port[0] = 21 [ 325.884218][ T9709] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 325.894275][ T9531] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 326.074193][ T9709] usb 2-1: device descriptor read/64, error 18 [ 326.144169][ T9531] usb 1-1: Using ep0 maxpacket: 8 [ 326.284400][ T9531] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 326.293616][ T9531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.302920][ T9531] usb 1-1: config 0 descriptor?? [ 326.364191][ T9709] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 326.374820][ T9531] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 326.574191][ T9709] usb 2-1: device descriptor read/64, error 18 [ 326.694934][ T9709] usb usb2-port1: attempt power cycle [ 326.784147][ T9531] gspca_sonixj: reg_r err -32 [ 326.788894][ T9531] sonixj: probe of 1-1:0.0 failed with error -32 [ 327.404096][ T9709] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 327.494341][ T9709] usb 2-1: Invalid ep0 maxpacket: 0 [ 327.644073][ T9709] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 327.734425][ T9709] usb 2-1: Invalid ep0 maxpacket: 0 [ 327.739827][ T9709] usb usb2-port1: unable to enumerate USB device 23:42:43 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:42:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{0x0}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:43 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x70, 0x7, 0x6, 0x40, 0x4, 0x0, 0x5, 0x3000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x3, @perf_bp={&(0x7f0000000400), 0x9}, 0x4280, 0x0, 0x6, 0x7, 0x2, 0x5}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r1, r0, 0x0, 0xa, &(0x7f0000000300)='/dev/rtc0\x00'}, 0x30) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x37, 0x29, 0x2f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000003c0)}, 0x606, 0x800, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x6, 0x1, 0x81, 0x8, 0x0, 0x3, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x7ff, 0x6}, 0x202, 0x2, 0x7fffffff, 0x6, 0xfffffffffffff634, 0x8, 0xffff}, r1, 0xc, r0, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 23:42:43 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:42:43 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xd9, 0xc3, 0xd8, 0x40, 0x6cd, 0x112, 0x181, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2b, 0x2e, 0x7d, 0x0, [], [{}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x7f}, 0x4c, &(0x7f0000000ec0)={0x5, 0xf, 0x4c, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "2aba0f5132e8f3ff95dd2b29be1fe08f"}, @ss_container_id={0x14, 0x10, 0x4, 0x4c, "aa5ffb9f708b7c7bcb41acf6ef16ece1"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x0, 0xf, 0x0, [0x3f00, 0xff3f3f, 0x18000]}]}, 0x1, [{0x0, 0x0}]}) [ 328.473826][ T4821] usb 1-1: USB disconnect, device number 24 23:42:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 328.538626][T20796] IPVS: ftp: loaded support on port[0] = 21 [ 328.605673][T20825] __nla_validate_parse: 25 callbacks suppressed [ 328.605684][T20825] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 328.651887][T20825] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:42:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 328.714564][T20798] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 328.740854][T20798] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 328.761739][T20798] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 328.779038][T20798] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:42:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{0x0}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 328.811877][T20798] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:42:43 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x70, 0x7, 0x6, 0x40, 0x4, 0x0, 0x5, 0x3000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x3, @perf_bp={&(0x7f0000000400), 0x9}, 0x4280, 0x0, 0x6, 0x7, 0x2, 0x5}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r1, r0, 0x0, 0xa, &(0x7f0000000300)='/dev/rtc0\x00'}, 0x30) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x37, 0x29, 0x2f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000003c0)}, 0x606, 0x800, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x6, 0x1, 0x81, 0x8, 0x0, 0x3, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x7ff, 0x6}, 0x202, 0x2, 0x7fffffff, 0x6, 0xfffffffffffff634, 0x8, 0xffff}, r1, 0xc, r0, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 23:42:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 328.893988][ T9709] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 328.922731][T20843] IPVS: ftp: loaded support on port[0] = 21 [ 328.936184][ T8987] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 328.945355][ T4821] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 328.962975][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 328.973237][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 328.987870][T20839] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 329.094066][ T9709] usb 5-1: device descriptor read/64, error 18 [ 329.205372][ T4821] usb 1-1: Using ep0 maxpacket: 8 [ 329.364012][ T9709] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 329.364425][ T8987] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 329.383935][ T4821] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 329.394735][ T4821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.403617][ T4821] usb 1-1: config 0 descriptor?? [ 329.477486][ T4821] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 329.553961][ T9709] usb 5-1: device descriptor read/64, error 18 [ 329.663975][ T8987] usb 2-1: string descriptor 0 read error: -22 [ 329.670185][ T8987] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= 1.81 [ 329.674876][ T9709] usb usb5-port1: attempt power cycle [ 329.681114][ T8987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.693336][ T8987] usb 2-1: config 0 descriptor?? [ 329.735067][ T8987] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 329.742499][ T8987] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 329.750331][ T8987] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 329.758302][ T8987] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 329.773915][ T8987] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 329.781499][ T8987] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 329.789376][ T8987] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 329.797347][ T8987] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 329.805440][ T8987] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 329.893940][ T4821] gspca_sonixj: reg_r err -32 [ 329.898742][ T4821] sonixj: probe of 1-1:0.0 failed with error -32 [ 329.936210][ T4821] usb 2-1: USB disconnect, device number 79 [ 329.943439][ T4821] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 329.959497][ T4821] keyspan 2-1:0.0: device disconnected [ 330.393899][ T9709] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 330.563911][ T9709] usb 5-1: device descriptor read/8, error -61 [ 330.833872][ T9709] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 331.003896][ T9709] usb 5-1: device descriptor read/8, error -61 [ 331.123947][ T9709] usb usb5-port1: unable to enumerate USB device 23:42:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:46 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:42:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:46 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x70, 0x7, 0x6, 0x40, 0x4, 0x0, 0x5, 0x3000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x3, @perf_bp={&(0x7f0000000400), 0x9}, 0x4280, 0x0, 0x6, 0x7, 0x2, 0x5}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r1, r0, 0x0, 0xa, &(0x7f0000000300)='/dev/rtc0\x00'}, 0x30) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x37, 0x29, 0x2f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000003c0)}, 0x606, 0x800, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x6, 0x1, 0x81, 0x8, 0x0, 0x3, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x7ff, 0x6}, 0x202, 0x2, 0x7fffffff, 0x6, 0xfffffffffffff634, 0x8, 0xffff}, r1, 0xc, r0, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 331.519893][ T5] usb 1-1: USB disconnect, device number 25 23:42:46 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:42:46 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xd9, 0xc3, 0xd8, 0x40, 0x6cd, 0x112, 0x181, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2b, 0x2e, 0x7d}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x7f}, 0x4c, &(0x7f0000000ec0)={0x5, 0xf, 0x4c, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "2aba0f5132e8f3ff95dd2b29be1fe08f"}, @ss_container_id={0x14, 0x10, 0x4, 0x4c, "aa5ffb9f708b7c7bcb41acf6ef16ece1"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x0, 0xf, 0x0, [0x3f00, 0xff3f3f, 0x18000]}]}, 0x1, [{0x0, 0x0}]}) 23:42:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 331.581639][T20913] IPVS: ftp: loaded support on port[0] = 21 23:42:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 331.975254][ T4821] usb 2-1: new high-speed USB device number 80 using dummy_hcd 23:42:46 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:42:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:46 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x4000) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x466353f4, 0x140) [ 332.083844][ T9709] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 332.273798][ T9709] usb 5-1: device descriptor read/64, error 18 [ 332.543748][ T9709] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 332.653830][ T4821] usb 2-1: string descriptor 0 read error: -22 [ 332.660133][ T4821] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= 1.81 [ 332.669792][ T4821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.679115][ T4821] usb 2-1: config 0 descriptor?? [ 332.724684][ T4821] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 332.732096][ T4821] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 332.735209][ T9709] usb 5-1: device descriptor read/64, error 18 [ 332.747113][ T4821] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 332.760595][ T4821] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 332.783830][ T4821] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 332.792354][ T4821] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 332.801768][ T4821] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 332.810149][ T4821] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 332.819502][ T4821] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 332.874517][ T9709] usb usb5-port1: attempt power cycle [ 332.925203][ T4821] usb 2-1: USB disconnect, device number 80 [ 332.932533][ T4821] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 332.947745][ T4821] keyspan 2-1:0.0: device disconnected [ 333.583679][ T9709] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 333.754181][ T9709] usb 5-1: device descriptor read/8, error -61 [ 334.023670][ T9709] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 334.194128][ T9709] usb 5-1: device descriptor read/8, error -61 [ 334.313660][ T9709] usb usb5-port1: unable to enumerate USB device 23:42:49 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:42:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:49 executing program 2: creat(&(0x7f0000000980)='./file0\x00', 0x0) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00') 23:42:49 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:42:49 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xd9, 0xc3, 0xd8, 0x40, 0x6cd, 0x112, 0x181, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2b, 0x2e, 0x7d}}]}}]}}, 0x0) 23:42:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:49 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="8c", 0x1) r2 = dup(r1) r3 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) setsockopt(r2, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) 23:42:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 334.750501][T21030] __nla_validate_parse: 22 callbacks suppressed [ 334.750514][T21030] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 334.780002][T21030] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 334.797713][T21024] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 334.809035][T21024] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 334.825569][T21036] "syz-executor.2" (21036) uses obsolete ecb(arc4) skcipher [ 334.826677][T21024] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:42:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 334.843516][T21024] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 334.855645][ T36] audit: type=1800 audit(1615938169.574:54): pid=21036 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=15162 res=0 errno=0 [ 334.940872][T21044] "syz-executor.2" (21044) uses obsolete ecb(arc4) skcipher [ 334.948758][T21045] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 334.958794][T21045] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 334.963580][ T5] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 334.977381][T21039] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 334.987419][T21039] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 335.133578][ T9709] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 335.333592][ T9709] usb 5-1: device descriptor read/64, error 18 [ 335.553574][ T5] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= 1.81 [ 335.562814][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.571150][ T5] usb 2-1: Product: syz [ 335.575440][ T5] usb 2-1: Manufacturer: syz [ 335.580105][ T5] usb 2-1: SerialNumber: syz [ 335.586342][ T5] usb 2-1: config 0 descriptor?? [ 335.604487][ T9709] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 335.626260][ T5] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 335.633716][ T5] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 335.641352][ T5] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 335.649711][ T5] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 335.657703][ T5] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 335.673144][ T5] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 335.680990][ T5] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 335.688932][ T5] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 335.697867][ T5] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 335.793540][ T9709] usb 5-1: device descriptor read/64, error 18 [ 335.825238][ T4821] usb 2-1: USB disconnect, device number 81 [ 335.832123][ T4821] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 335.847614][ T4821] keyspan 2-1:0.0: device disconnected [ 335.913576][ T9709] usb usb5-port1: attempt power cycle [ 336.633475][ T9709] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 336.803822][ T9709] usb 5-1: device descriptor read/8, error -61 [ 337.073470][ T9709] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 337.273911][ T9709] usb 5-1: device descriptor read/8, error -61 [ 337.393469][ T9709] usb usb5-port1: unable to enumerate USB device 23:42:52 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:42:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000000)=ANY=[], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x67e0317e552b57d7, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x9}]}}]}, 0x40}}, 0x0) 23:42:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:52 executing program 0: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:42:52 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) 23:42:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x4, [@struct={0x0, 0xb, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @struct, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @func_proto]}, {0x0, [0x0, 0x0]}}, 0x0, 0xd8}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:42:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000000100)=[@acquire_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:42:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe000000f}) 23:42:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 338.153383][ T4821] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 338.373391][ T4821] usb 5-1: device descriptor read/64, error 18 [ 338.643387][ T4821] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 338.833352][ T4821] usb 5-1: device descriptor read/64, error 18 [ 338.953404][ T4821] usb usb5-port1: attempt power cycle [ 339.683326][ T4821] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 339.873316][ T4821] usb 5-1: device descriptor read/8, error -61 [ 340.153347][ T4821] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 340.343549][ T4821] usb 5-1: device descriptor read/8, error -61 [ 340.463356][ T4821] usb usb5-port1: unable to enumerate USB device 23:42:55 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:42:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe000000f}) 23:42:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:55 executing program 0: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:42:55 executing program 1: syz_open_dev$sg(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x44, r1, 0x605, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x24, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan0\x00'}) r2 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x30, r2, 0x281, 0x0, 0x0, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}}, 0x0) 23:42:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe000000f}) 23:42:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 340.835586][T21153] __nla_validate_parse: 14 callbacks suppressed [ 340.835600][T21153] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 340.868412][T21153] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 340.889611][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 340.901315][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:42:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:55 executing program 1: syz_open_dev$sg(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x44, r1, 0x605, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x24, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan0\x00'}) r2 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x30, r2, 0x281, 0x0, 0x0, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}}, 0x0) 23:42:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe000000f}) [ 340.935154][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 340.992144][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:42:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) [ 341.151545][T21187] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 341.160981][T21187] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 341.171005][T21182] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 341.181199][T21182] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 341.193190][ T5] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 341.383192][ T5] usb 5-1: device descriptor read/64, error 18 [ 341.653206][ T5] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 341.843254][ T5] usb 5-1: device descriptor read/64, error 18 [ 341.963253][ T5] usb usb5-port1: attempt power cycle [ 342.673115][ T5] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 342.843477][ T5] usb 5-1: device descriptor read/8, error -61 [ 343.113107][ T5] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 343.283446][ T5] usb 5-1: device descriptor read/8, error -61 [ 343.403170][ T5] usb usb5-port1: unable to enumerate USB device 23:42:58 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:42:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe000000f}) 23:42:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:58 executing program 1: syz_open_dev$sg(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x44, r1, 0x605, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x24, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan0\x00'}) r2 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x30, r2, 0x281, 0x0, 0x0, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}}, 0x0) 23:42:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:58 executing program 0: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:42:58 executing program 1: syz_open_dev$sg(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x44, r1, 0x605, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x24, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan0\x00'}) r2 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x30, r2, 0x281, 0x0, 0x0, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}}, 0x0) 23:42:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:42:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe000000f}) 23:42:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:42:58 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00', 0xffffffffffffffff) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000940)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x6c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP_SADDR={0xfffffffffffffedb, 0x18, @private=0x7ff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x80000000}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3ff}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}]}, 0x6c}}, 0x0) 23:42:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe000000f}) [ 344.263508][ T8987] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 344.472986][ T8987] usb 5-1: device descriptor read/64, error 18 [ 344.742989][ T8987] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 344.962972][ T8987] usb 5-1: device descriptor read/64, error 18 [ 345.092975][ T8987] usb usb5-port1: attempt power cycle [ 345.822904][ T8987] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 346.032904][ T8987] usb 5-1: device descriptor read/8, error -61 [ 346.322912][ T8987] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 346.513354][ T8987] usb 5-1: device descriptor read/8, error -61 [ 346.643330][ T8987] usb usb5-port1: unable to enumerate USB device 23:43:01 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:43:01 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0xe000000f}) 23:43:01 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x2, 0x0, 0x0, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x0, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230, 'bpf\x00'}}, @common=@eui64={{0x28, 'eui64\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 23:43:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:43:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:01 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x0, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:43:01 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0xe000000f}) [ 346.841714][T21248] xt_bpf: check failed: parse error [ 346.853817][T21250] ptrace attach of "/root/syz-executor.1"[21248] was attempted by "/root/syz-executor.1"[21250] [ 346.871839][T21248] xt_bpf: check failed: parse error 23:43:01 executing program 1: r0 = socket(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) 23:43:01 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0xe000000f}) [ 346.892902][T21257] __nla_validate_parse: 17 callbacks suppressed [ 346.892912][T21257] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 346.959432][T21257] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 346.988469][T21244] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:01 executing program 2: r0 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0xe000000f}) [ 347.006650][T21244] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 347.032916][T21244] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xfd45) 23:43:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 347.059516][T21244] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 347.090813][T21244] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 347.102823][ T5] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 347.262833][ T9709] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 347.302917][ T5] usb 1-1: device descriptor read/64, error 18 [ 347.572829][ T5] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 347.622844][ T9709] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.633003][ T9709] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 347.641926][ T9709] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 347.651108][ T9709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.659877][ T9709] usb 5-1: config 0 descriptor?? [ 347.762816][ T5] usb 1-1: device descriptor read/64, error 18 [ 347.882901][ T5] usb usb1-port1: attempt power cycle [ 348.592754][ T5] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 348.683192][ T5] usb 1-1: Invalid ep0 maxpacket: 0 [ 348.832724][ T5] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 348.923012][ T5] usb 1-1: Invalid ep0 maxpacket: 0 [ 348.928301][ T5] usb usb1-port1: unable to enumerate USB device 23:43:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:43:04 executing program 2: r0 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0xe000000f}) 23:43:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, 0x0) 23:43:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:04 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:43:04 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x0, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 349.846093][ T8021] usb 5-1: USB disconnect, device number 48 23:43:04 executing program 2: r0 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0xe000000f}) 23:43:04 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x3, 0x70, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x0, 0x3}, 0x4000, 0xfffffffffffff59e, 0x3, 0x3, 0x0, 0x4, 0x1}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x800) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000940)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x100000000) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="5734686ac7a114f40075ee76b63997e18a993410b0ad2c45f21631b60e55223d434616109961740b9e60058c1ffbd88d0324c4b36434ac4eb8bdf49db850aae35957fc20aa20e151f2761f701c615ae86e9e0e849cc601432237dafc22f8541648c8c73982af4d4aa062c3b34d37e9d3b86410765c4ef0319aacb2accee0d1fb2085b18a7729120c26b78047d81d47ddf2c51aa6c316b298f3c14af3381ff0cbdc1f50c1a510d805c9de3483c5583b4b43f10000000d332adf1334d5a460f98a0779651d523be974ca7e40a1f0adcad492ef0d512e864eb85a5d11a7d7085f22f7f686f6b2565cc5a11ea863c5ec70e21f61062f22896198486eb9ea479bd9a0f05081d8c626a24ba3687281ade3bc66ffc95ed4530ef41ec9e08c8cde6b2c55f24c7653fadabe871cbd5689076c5032f86eddd00b71b1024ff3eb88fbfc6918cc1478e50000", @ANYRES16=0x0, @ANYBLOB], 0x48}}, 0x40000) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:43:04 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe000000f}) 23:43:04 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x4, [@struct={0x0, 0xb, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int]}, {0x0, [0x0, 0x0]}}, 0x0, 0x104}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:43:04 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe000000f}) [ 349.955741][T21309] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 349.982537][T21309] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 350.029143][T21299] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:43:04 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe000000f}) 23:43:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe000000f}) 23:43:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 350.302653][ T8021] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 350.312681][ T8987] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 350.532619][ T8987] usb 1-1: device descriptor read/64, error 18 [ 350.672899][ T8021] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.683164][ T8021] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 350.692169][ T8021] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 350.702097][ T8021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.711753][ T8021] usb 5-1: config 0 descriptor?? [ 350.822607][ T8987] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 351.032610][ T8987] usb 1-1: device descriptor read/64, error 18 [ 351.152620][ T8987] usb usb1-port1: attempt power cycle [ 351.882568][ T8987] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 351.982970][ T8987] usb 1-1: Invalid ep0 maxpacket: 0 [ 352.133335][ T8987] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 352.234002][ T8987] usb 1-1: Invalid ep0 maxpacket: 0 [ 352.239244][ T8987] usb usb1-port1: unable to enumerate USB device 23:43:07 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:43:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe000000f}) 23:43:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:43:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:07 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x0, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 352.888430][ T8021] usb 5-1: USB disconnect, device number 49 23:43:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe000000f}) 23:43:07 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x4, [@struct={0x0, 0xb, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int]}, {0x0, [0x0, 0x0]}}, 0x0, 0x104}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 353.000576][T21371] __nla_validate_parse: 11 callbacks suppressed [ 353.000588][T21371] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 353.044584][T21371] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 353.056167][T21365] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 353.071321][T21365] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe000000f}) 23:43:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe000000f}) [ 353.104073][T21365] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 353.130810][T21365] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 353.144512][T21365] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:43:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe000000f}) [ 353.278664][T21394] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 353.307728][T21394] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 353.334533][T21390] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 353.362567][ T8021] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 353.372447][ T8987] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 353.572506][ T8987] usb 1-1: device descriptor read/64, error 18 [ 353.732789][ T8021] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.744241][ T8021] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 353.753553][ T8021] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 353.762881][ T8021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.771692][ T8021] usb 5-1: config 0 descriptor?? [ 353.852431][ T8987] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 354.072415][ T8987] usb 1-1: device descriptor read/64, error 18 [ 354.202437][ T8987] usb usb1-port1: attempt power cycle [ 354.922368][ T8987] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 355.013082][ T8987] usb 1-1: Invalid ep0 maxpacket: 0 [ 355.162358][ T8987] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 355.272361][ T8987] usb 1-1: Invalid ep0 maxpacket: 0 [ 355.277704][ T8987] usb usb1-port1: unable to enumerate USB device 23:43:10 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c04000000000010902240001000000000904230001030100000921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:43:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe000000f}) 23:43:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:43:10 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 355.932413][ T9709] usb 5-1: USB disconnect, device number 50 23:43:10 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x4, [@struct={0x0, 0xb, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int]}, {0x0, [0x0, 0x0]}}, 0x0, 0x104}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:43:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe000000f}) 23:43:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe000000f}) 23:43:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:43:10 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x4, [@struct={0x0, 0xb, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int]}, {0x0, [0x0, 0x0]}}, 0x0, 0x104}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:43:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe000000f}) [ 356.392280][ T9709] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 356.415197][ T8021] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 356.662266][ T8021] usb 1-1: Using ep0 maxpacket: 8 [ 356.752812][ T9709] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 356.761083][ T9709] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.771722][ T9709] usb 5-1: config 0 has no interface number 0 [ 356.778194][ T9709] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 356.791587][ T8021] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 356.800690][ T9709] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 356.810263][ T8021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.818704][ T9709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.827507][ T8021] usb 1-1: config 0 descriptor?? [ 356.835798][ T9709] usb 5-1: config 0 descriptor?? [ 356.874279][ T8021] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 356.882533][ T9709] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 357.312218][ T8021] gspca_sonixj: reg_r err -32 [ 357.316959][ T8021] sonixj: probe of 1-1:0.0 failed with error -32 23:43:13 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c04000000000010902240001000000000904230001030100000921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:43:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe000000f}) 23:43:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000002540)=""/215, 0xd7}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:43:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:13 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:43:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe000000f}) [ 358.974951][ T8987] usb 5-1: USB disconnect, device number 51 [ 359.011410][ T4821] usb 1-1: USB disconnect, device number 38 23:43:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0xe000000f}) [ 359.090676][T21485] __nla_validate_parse: 18 callbacks suppressed [ 359.090688][T21485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 359.110152][T21485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 359.120455][T21477] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 359.132288][T21477] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@uid={'uid'}}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) 23:43:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 359.141824][T21477] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 359.156351][T21477] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 359.175785][T21477] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000002540)=""/215, 0xd7}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:43:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0xe000000f}) 23:43:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0xe000000f}) [ 359.253686][T21491] tmpfs: Unknown parameter 'defcontext' [ 359.303841][T21502] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 359.318350][T21502] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 359.330812][T21494] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 359.423822][ T8987] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 359.482180][ T4821] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 359.742267][ T4821] usb 1-1: Using ep0 maxpacket: 8 [ 359.842201][ T8987] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 359.850392][ T8987] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.861392][ T8987] usb 5-1: config 0 has no interface number 0 [ 359.867828][ T8987] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.881193][ T8987] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 359.890622][ T8987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.898878][ T4821] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 359.908070][ T4821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.917033][ T8987] usb 5-1: config 0 descriptor?? [ 359.925928][ T4821] usb 1-1: config 0 descriptor?? [ 359.965484][ T8987] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 359.988368][ T4821] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 360.412382][ T4821] gspca_sonixj: reg_r err -32 [ 360.417153][ T4821] sonixj: probe of 1-1:0.0 failed with error -32 23:43:16 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c04000000000010902240001000000000904230001030100000921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:43:16 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x8000, 0x4, 0x8}) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)) 23:43:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0xe000000f}) 23:43:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000002540)=""/215, 0xd7}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) [ 362.021790][ T9710] usb 5-1: USB disconnect, device number 52 23:43:16 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:43:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 362.074062][ T8021] usb 1-1: USB disconnect, device number 39 23:43:16 executing program 1: mknod$loop(&(0x7f0000000680)='./file0\x00', 0x0, 0x1) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x11800, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20028, &(0x7f0000000100)) 23:43:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0xe000000f}) 23:43:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {0x0}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:43:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0xe000000f}) 23:43:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:17 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000000c0), 0xc, &(0x7f0000000d80)={&(0x7f0000000100)={0x108, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0xe4, 0x4, 0x0, 0x1, [{0xbc, 0x1, 0x0, 0x1, [@fib={{0x8, 0x1, 'fib\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}, @ct={{0x7, 0x1, 'ct\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_KEY={0x8}]}}, @numgen={{0xb, 0x1, 'numgen\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x56c08039}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @notrack={{0xc, 0x1, 'notrack\x00'}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}, @tunnel={{0xb, 0x1, 'tunnel\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}]}, {0x24, 0x1, 0x0, 0x1, [@immediate={{0xe, 0x1, 'immediate\x00'}, @void}, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}]}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x8000, 0x4, 0x8}) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)) [ 362.241809][T21564] EXT4-fs (sda1): re-mounted. Opts: . Quota mode: none. [ 362.266621][T21566] EXT4-fs (sda1): re-mounted. Opts: . Quota mode: none. [ 362.511924][ T9710] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 362.541930][ T8021] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 362.781901][ T8021] usb 1-1: Using ep0 maxpacket: 8 [ 362.901955][ T8021] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 362.911088][ T8021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.921049][ T8021] usb 1-1: config 0 descriptor?? [ 362.922189][ T9710] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 362.937217][ T9710] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.947805][ T9710] usb 5-1: config 0 has no interface number 0 [ 362.954283][ T9710] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 362.963912][ T8021] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 362.967657][ T9710] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 362.982706][ T9710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.993846][ T9710] usb 5-1: config 0 descriptor?? [ 363.056398][ T9710] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 363.391874][ T8021] gspca_sonixj: reg_r err -32 [ 363.396717][ T8021] sonixj: probe of 1-1:0.0 failed with error -32 23:43:19 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c04000000000010902240001000000000904230001030100000921000000012201"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:43:19 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0x0) 23:43:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {0x0}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:43:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000550001000000000000000000070000001fb3"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 365.083693][ T9710] usb 5-1: USB disconnect, device number 53 23:43:19 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:43:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:19 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0x0) [ 365.131299][ T8021] usb 1-1: USB disconnect, device number 40 [ 365.157310][T21613] __nla_validate_parse: 18 callbacks suppressed [ 365.157321][T21613] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 23:43:19 executing program 1: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0xcb1}) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') exit(0x0) preadv(r0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x401, 0x0) 23:43:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {0x0}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) [ 365.189304][T21624] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 365.207078][T21625] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:20 executing program 1: mknod$loop(&(0x7f0000000680)='./file0\x00', 0x0, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x11800, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000480)=ANY=[@ANYBLOB="646174613d77726974656261636b2c61626f72b359004a04000000ab98c6e8592042cccaad0de2e6ca32364ad1d6abbf4257b8e01fce1ac85c37aa33338e8ceffcfb8e4d786b447e5bf23222f9b15e60d8ae54aa76cf2016fb7fb1070000001e2581a02347468cab0345834190929bbc57848809780c7aafe81f747b319e5eaf"]) ioctl$CHAR_RAW_BSZGET(r0, 0x80081270, &(0x7f0000000300)) [ 365.207093][T21625] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 365.207382][T21615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0x0) [ 365.207687][T21615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 365.207944][T21615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 365.208043][T21615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 365.208318][T21615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 365.447787][T21647] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 365.478639][T21647] EXT4-fs (sda1): Unrecognized mount option "abor³Y" or missing value [ 365.507736][T21647] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 365.521243][T21654] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 365.541357][T21647] EXT4-fs (sda1): Unrecognized mount option "abor³Y" or missing value [ 365.611753][ T8021] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 365.612502][ T9710] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 365.851716][ T8021] usb 1-1: Using ep0 maxpacket: 8 [ 365.972131][ T8021] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 365.981263][ T8021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.991486][ T8021] usb 1-1: config 0 descriptor?? [ 366.021740][ T9710] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 366.029875][ T9710] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.034940][ T8021] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 366.040733][ T9710] usb 5-1: config 0 has no interface number 0 [ 366.052738][ T9710] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 366.065788][ T9710] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 366.075186][ T9710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.084640][ T9710] usb 5-1: config 0 descriptor?? [ 366.145434][ T9710] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 366.471698][ T8021] gspca_sonixj: reg_r err -32 [ 366.476603][ T8021] sonixj: probe of 1-1:0.0 failed with error -32 23:43:22 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c04000000000010902240001000000000904230001030100000921000000012201"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:43:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 23:43:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) [ 368.127942][ T9709] usb 5-1: USB disconnect, device number 54 23:43:22 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:43:22 executing program 1: mknod$loop(&(0x7f0000000680)='./file0\x00', 0x0, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x11800, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000480)=ANY=[@ANYBLOB="646174613d77726974656261636b2c61626f72b359004a04000000ab98c6e8592042cccaad0de2e6ca32364ad1d6abbf4257b8e01fce1ac85c37aa33338e8ceffcfb8e4d786b447e5bf23222f9b15e60d8ae54aa76cf2016fb7fb1070000001e2581a02347468cab0345834190929bbc57848809780c7aafe81f747b319e5eaf"]) ioctl$CHAR_RAW_BSZGET(r0, 0x80081270, &(0x7f0000000300)) 23:43:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) [ 368.231577][ T4821] usb 1-1: USB disconnect, device number 41 23:43:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:43:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:23 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) [ 368.307019][T21695] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option 23:43:23 executing program 1: mknod$loop(&(0x7f0000000680)='./file0\x00', 0x0, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x11800, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000480)=ANY=[@ANYBLOB="646174613d77726974656261636b2c61626f72b359004a04000000ab98c6e8592042cccaad0de2e6ca32364ad1d6abbf4257b8e01fce1ac85c37aa33338e8ceffcfb8e4d786b447e5bf23222f9b15e60d8ae54aa76cf2016fb7fb1070000001e2581a02347468cab0345834190929bbc57848809780c7aafe81f747b319e5eaf"]) ioctl$CHAR_RAW_BSZGET(r0, 0x80081270, &(0x7f0000000300)) [ 368.350909][T21695] EXT4-fs (sda1): Unrecognized mount option "abor³Y" or missing value 23:43:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d05, 0x0, 0x1fffffffffc}]}) [ 368.464597][T21709] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 368.491346][T21709] EXT4-fs (sda1): Unrecognized mount option "abor³Y" or missing value [ 368.581599][ T9709] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 368.722861][ T4821] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 368.941592][ T9709] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 368.949725][ T9709] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.959877][ T9709] usb 5-1: config 0 has no interface number 0 [ 368.966124][ T9709] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 368.979196][ T9709] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 368.988267][ T9709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.998404][ T9709] usb 5-1: config 0 descriptor?? [ 369.001545][ T4821] usb 1-1: Using ep0 maxpacket: 8 [ 369.043952][ T9709] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 369.141583][ T4821] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 369.150641][ T4821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.160941][ T4821] usb 1-1: config 0 descriptor?? [ 369.204588][ T4821] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 369.641519][ T4821] gspca_sonixj: reg_r err -32 [ 369.646257][ T4821] sonixj: probe of 1-1:0.0 failed with error -32 23:43:25 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c04000000000010902240001000000000904230001030100000921000000012201"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:43:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:43:25 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:25 executing program 1: mknod$loop(&(0x7f0000000680)='./file0\x00', 0x0, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x11800, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000480)=ANY=[@ANYBLOB="646174613d77726974656261636b2c61626f72b359004a04000000ab98c6e8592042cccaad0de2e6ca32364ad1d6abbf4257b8e01fce1ac85c37aa33338e8ceffcfb8e4d786b447e5bf23222f9b15e60d8ae54aa76cf2016fb7fb1070000001e2581a02347468cab0345834190929bbc57848809780c7aafe81f747b319e5eaf"]) ioctl$CHAR_RAW_BSZGET(r0, 0x80081270, &(0x7f0000000300)) [ 371.171701][ T8987] usb 5-1: USB disconnect, device number 55 [ 371.219243][T21750] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 371.230188][T21755] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 371.252092][T21750] EXT4-fs (sda1): Unrecognized mount option "abor³Y" or missing value [ 371.262850][T21759] __nla_validate_parse: 20 callbacks suppressed 23:43:26 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:43:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:26 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 371.262863][T21759] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 371.303982][ T9709] usb 1-1: USB disconnect, device number 42 [ 371.308225][T21759] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/227, 0xe3}], 0x1, 0x9, 0x0) 23:43:26 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 371.367195][T21751] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 371.387537][T21751] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {@in, 0x0, 0x32}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x0) [ 371.426346][T21751] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 371.448593][T21751] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 371.475364][T21751] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:26 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{0x0}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) [ 371.656857][T21802] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 371.667763][T21802] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 371.677587][ T8987] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 371.688233][T21797] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 371.761382][ T9709] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 372.001565][ T3247] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.002051][ T9709] usb 1-1: Using ep0 maxpacket: 8 [ 372.007880][ T3247] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.091691][ T8987] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 372.099791][ T8987] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.110141][ T8987] usb 5-1: config 0 has no interface number 0 [ 372.116275][ T8987] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 372.129282][ T8987] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 372.138381][ T8987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.141680][ T9709] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 372.152148][ T8987] usb 5-1: config 0 descriptor?? [ 372.157245][ T9709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.171748][ T9709] usb 1-1: config 0 descriptor?? [ 372.193588][ T8987] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 372.213143][ T9709] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 372.651391][ T9709] gspca_sonixj: reg_r err -32 [ 372.656111][ T9709] sonixj: probe of 1-1:0.0 failed with error -32 23:43:28 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 23:43:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:28 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:28 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c04000000000010902240001000000000904230001030100000921000000012201000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) [ 374.222684][ T8987] usb 5-1: USB disconnect, device number 56 23:43:29 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:43:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{0x0}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:43:29 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 374.358989][ T8021] usb 1-1: USB disconnect, device number 43 23:43:29 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 23:43:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000053c0)=""/4107, 0x100b}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{0x0}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:43:29 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:43:29 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 374.671242][ T8987] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 374.831230][ T8021] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 375.081215][ T8021] usb 1-1: Using ep0 maxpacket: 8 [ 375.101218][ T8987] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 375.109353][ T8987] usb 5-1: config 0 has no interface number 0 [ 375.115971][ T8987] usb 5-1: config 0 interface 35 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 375.126794][ T8987] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 375.136154][ T8987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.145110][ T8987] usb 5-1: config 0 descriptor?? [ 375.183282][ T8987] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 375.201522][ T8021] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 375.210558][ T8021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.220964][ T8021] usb 1-1: config 0 descriptor?? [ 375.264370][ T8021] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 375.701182][ T8021] gspca_sonixj: reg_r err -32 [ 375.705942][ T8021] sonixj: probe of 1-1:0.0 failed with error -32 23:43:32 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c04000000000010902240001000000000904230001030100000921000000012201000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) [ 377.264623][ T8987] usb 5-1: USB disconnect, device number 57 23:43:32 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:43:32 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:32 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 23:43:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) [ 377.414877][ T9709] usb 1-1: USB disconnect, device number 44 23:43:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:32 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 377.520837][T21924] __nla_validate_parse: 24 callbacks suppressed [ 377.520850][T21924] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 377.539823][T21924] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 377.551493][T21919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:32 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 377.582971][T21919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 377.621311][T21919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:32 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 377.655105][T21919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) [ 377.712681][ T8987] usb 5-1: new high-speed USB device number 58 using dummy_hcd 23:43:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 377.807063][T21943] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 377.816632][T21943] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 377.821046][ T9709] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 377.828992][T21938] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 377.846101][T21938] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 378.101044][ T9709] usb 1-1: Using ep0 maxpacket: 8 [ 378.101083][ T8987] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 378.115472][ T8987] usb 5-1: config 0 has no interface number 0 [ 378.121601][ T8987] usb 5-1: config 0 interface 35 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 378.133346][ T8987] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 378.142438][ T8987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.152800][ T8987] usb 5-1: config 0 descriptor?? [ 378.203201][ T8987] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 378.221261][ T9709] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 378.230299][ T9709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.240120][ T9709] usb 1-1: config 0 descriptor?? [ 378.284343][ T9709] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 378.721048][ T9709] gspca_sonixj: reg_r err -32 [ 378.725787][ T9709] sonixj: probe of 1-1:0.0 failed with error -32 23:43:35 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c04000000000010902240001000000000904230001030100000921000000012201000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) [ 380.294805][ T9709] usb 5-1: USB disconnect, device number 58 23:43:35 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:43:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000002000)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004480)={0x2020}, 0x2020) r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000140)='S', 0xfe03, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="696f636861727365743d63703933362c00ab43d418f1a8dfb60d4b70b091b118a2149462c570f98c729bf1a874dfa36d077a431f399f4d08aee6502bea8728e1fcf96bf49cc775fb21684b429bbbdaef69a1fe800d66a3f61346e0a7f50a1c4bd255c2131de13c9064194da132734ca7243b5eb0ea4382a874e3ce724c0bc8c3e83599f8"]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/96, 0x60}, {&(0x7f0000000f80)=""/4096, 0x1000}], 0x2, 0x0, 0x7) write(r0, &(0x7f0000000000)="101d5e6bc5123d4033509a0f48da92d9e25bafb679ef8d82f8d2f295c6467c4fcb86f4ce400a6fcf3a8c9b294fe0ad23ae7601568e72f7", 0x37) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_mount_image$fuse(&(0x7f0000002140)='fuse\x00', &(0x7f0000002180)='./file0\x00', 0x0, 0x0, 0x0, 0x21, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_get$uid(0x3, r1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@ipv4={[], [], @dev}, @in=@empty}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) 23:43:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:43:35 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 380.455771][ T8987] usb 1-1: USB disconnect, device number 45 23:43:35 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 380.532238][T21987] loop1: detected capacity change from 0 to 270 23:43:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) 23:43:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000002000)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004480)={0x2020}, 0x2020) r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000140)='S', 0xfe03, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="696f636861727365743d63703933362c00ab43d418f1a8dfb60d4b70b091b118a2149462c570f98c729bf1a874dfa36d077a431f399f4d08aee6502bea8728e1fcf96bf49cc775fb21684b429bbbdaef69a1fe800d66a3f61346e0a7f50a1c4bd255c2131de13c9064194da132734ca7243b5eb0ea4382a874e3ce724c0bc8c3e83599f8"]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/96, 0x60}, {&(0x7f0000000f80)=""/4096, 0x1000}], 0x2, 0x0, 0x7) write(r0, &(0x7f0000000000)="101d5e6bc5123d4033509a0f48da92d9e25bafb679ef8d82f8d2f295c6467c4fcb86f4ce400a6fcf3a8c9b294fe0ad23ae7601568e72f7", 0x37) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_mount_image$fuse(&(0x7f0000002140)='fuse\x00', &(0x7f0000002180)='./file0\x00', 0x0, 0x0, 0x0, 0x21, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_get$uid(0x3, r1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@ipv4={[], [], @dev}, @in=@empty}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) 23:43:35 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 380.702443][ T9709] usb 5-1: new high-speed USB device number 59 using dummy_hcd 23:43:35 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 380.758643][T22008] loop1: detected capacity change from 0 to 270 [ 380.890894][ T8987] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 381.070899][ T9709] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 381.079010][ T9709] usb 5-1: config 0 has no interface number 0 [ 381.085937][ T9709] usb 5-1: config 0 interface 35 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 381.097091][ T9709] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 381.106770][ T9709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.116977][ T9709] usb 5-1: config 0 descriptor?? [ 381.131105][ T8987] usb 1-1: Using ep0 maxpacket: 8 [ 381.163011][ T9709] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 381.260949][ T8987] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 381.270241][ T8987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.281474][ T8987] usb 1-1: config 0 descriptor?? [ 381.323777][ T8987] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 381.750831][ T8987] gspca_sonixj: reg_r err -32 [ 381.755605][ T8987] sonixj: probe of 1-1:0.0 failed with error -32 23:43:38 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) [ 383.337167][ T9709] usb 5-1: USB disconnect, device number 59 23:43:38 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:43:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000002000)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004480)={0x2020}, 0x2020) r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000140)='S', 0xfe03, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="696f636861727365743d63703933362c00ab43d418f1a8dfb60d4b70b091b118a2149462c570f98c729bf1a874dfa36d077a431f399f4d08aee6502bea8728e1fcf96bf49cc775fb21684b429bbbdaef69a1fe800d66a3f61346e0a7f50a1c4bd255c2131de13c9064194da132734ca7243b5eb0ea4382a874e3ce724c0bc8c3e83599f8"]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/96, 0x60}, {&(0x7f0000000f80)=""/4096, 0x1000}], 0x2, 0x0, 0x7) write(r0, &(0x7f0000000000)="101d5e6bc5123d4033509a0f48da92d9e25bafb679ef8d82f8d2f295c6467c4fcb86f4ce400a6fcf3a8c9b294fe0ad23ae7601568e72f7", 0x37) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_mount_image$fuse(&(0x7f0000002140)='fuse\x00', &(0x7f0000002180)='./file0\x00', 0x0, 0x0, 0x0, 0x21, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_get$uid(0x3, r1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@ipv4={[], [], @dev}, @in=@empty}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) 23:43:38 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) [ 383.497183][ T9531] usb 1-1: USB disconnect, device number 46 23:43:38 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 383.584284][T22061] loop1: detected capacity change from 0 to 270 23:43:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000002000)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004480)={0x2020}, 0x2020) r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000140)='S', 0xfe03, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="696f636861727365743d63703933362c00ab43d418f1a8dfb60d4b70b091b118a2149462c570f98c729bf1a874dfa36d077a431f399f4d08aee6502bea8728e1fcf96bf49cc775fb21684b429bbbdaef69a1fe800d66a3f61346e0a7f50a1c4bd255c2131de13c9064194da132734ca7243b5eb0ea4382a874e3ce724c0bc8c3e83599f8"]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/96, 0x60}, {&(0x7f0000000f80)=""/4096, 0x1000}], 0x2, 0x0, 0x7) write(r0, &(0x7f0000000000)="101d5e6bc5123d4033509a0f48da92d9e25bafb679ef8d82f8d2f295c6467c4fcb86f4ce400a6fcf3a8c9b294fe0ad23ae7601568e72f7", 0x37) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_mount_image$fuse(&(0x7f0000002140)='fuse\x00', &(0x7f0000002180)='./file0\x00', 0x0, 0x0, 0x0, 0x21, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_get$uid(0x3, r1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@ipv4={[], [], @dev}, @in=@empty}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) 23:43:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 383.674941][T22072] overlayfs: failed to resolve './file0': -2 23:43:38 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 383.741467][ T9709] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 383.812481][T22081] loop1: detected capacity change from 0 to 270 [ 383.825785][T22082] overlayfs: failed to resolve './file0': -2 23:43:38 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 383.952292][ T9531] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 383.983351][T22090] overlayfs: failed to resolve './file0': -2 [ 384.120745][ T9709] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 384.129023][ T9709] usb 5-1: config 0 has no interface number 0 [ 384.135743][ T9709] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.147086][ T9709] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.157267][ T9709] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 384.166713][ T9709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.175646][ T9709] usb 5-1: config 0 descriptor?? [ 384.190896][ T9531] usb 1-1: Using ep0 maxpacket: 8 [ 384.310804][ T9531] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 384.319911][ T9531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.331854][ T9531] usb 1-1: config 0 descriptor?? [ 384.373065][ T9531] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 384.661308][ T9709] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 384.732140][ T9709] hid-picolcd 0003:04D8:C002.0005: No report with id 0x11 found [ 384.810722][ T9531] gspca_sonixj: reg_r err -32 [ 384.815445][ T9531] sonixj: probe of 1-1:0.0 failed with error -32 [ 384.863683][ T9531] usb 5-1: USB disconnect, device number 60 23:43:40 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) [ 385.670625][ T8987] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 386.070685][ T8987] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 386.078842][ T8987] usb 5-1: config 0 has no interface number 0 [ 386.085637][ T8987] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.096980][ T8987] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.107086][ T8987] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 386.116407][ T8987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.125972][ T8987] usb 5-1: config 0 descriptor?? 23:43:41 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:43:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000002000)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004480)={0x2020}, 0x2020) r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000140)='S', 0xfe03, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="696f636861727365743d63703933362c00ab43d418f1a8dfb60d4b70b091b118a2149462c570f98c729bf1a874dfa36d077a431f399f4d08aee6502bea8728e1fcf96bf49cc775fb21684b429bbbdaef69a1fe800d66a3f61346e0a7f50a1c4bd255c2131de13c9064194da132734ca7243b5eb0ea4382a874e3ce724c0bc8c3e83599f8"]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/96, 0x60}, {&(0x7f0000000f80)=""/4096, 0x1000}], 0x2, 0x0, 0x7) write(r0, &(0x7f0000000000)="101d5e6bc5123d4033509a0f48da92d9e25bafb679ef8d82f8d2f295c6467c4fcb86f4ce400a6fcf3a8c9b294fe0ad23ae7601568e72f7", 0x37) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_mount_image$fuse(&(0x7f0000002140)='fuse\x00', &(0x7f0000002180)='./file0\x00', 0x0, 0x0, 0x0, 0x21, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_get$uid(0x3, r1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@ipv4={[], [], @dev}, @in=@empty}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) 23:43:41 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf79"], 0x1c}}, 0x0) [ 386.553632][ T9710] usb 1-1: USB disconnect, device number 47 [ 386.613352][T22141] loop1: detected capacity change from 0 to 270 [ 386.621319][ T8987] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 23:43:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000002000)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004480)={0x2020}, 0x2020) r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000140)='S', 0xfe03, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="696f636861727365743d63703933362c00ab43d418f1a8dfb60d4b70b091b118a2149462c570f98c729bf1a874dfa36d077a431f399f4d08aee6502bea8728e1fcf96bf49cc775fb21684b429bbbdaef69a1fe800d66a3f61346e0a7f50a1c4bd255c2131de13c9064194da132734ca7243b5eb0ea4382a874e3ce724c0bc8c3e83599f8"]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/96, 0x60}, {&(0x7f0000000f80)=""/4096, 0x1000}], 0x2, 0x0, 0x7) write(r0, &(0x7f0000000000)="101d5e6bc5123d4033509a0f48da92d9e25bafb679ef8d82f8d2f295c6467c4fcb86f4ce400a6fcf3a8c9b294fe0ad23ae7601568e72f7", 0x37) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_mount_image$fuse(&(0x7f0000002140)='fuse\x00', &(0x7f0000002180)='./file0\x00', 0x0, 0x0, 0x0, 0x21, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_get$uid(0x3, r1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@ipv4={[], [], @dev}, @in=@empty}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) 23:43:41 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 386.690580][ T8987] hid-picolcd 0003:04D8:C002.0006: No report with id 0x11 found 23:43:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:41 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000002000)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004480)={0x2020}, 0x2020) r0 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000140)='S', 0xfe03, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="696f636861727365743d63703933362c00ab43d418f1a8dfb60d4b70b091b118a2149462c570f98c729bf1a874dfa36d077a431f399f4d08aee6502bea8728e1fcf96bf49cc775fb21684b429bbbdaef69a1fe800d66a3f61346e0a7f50a1c4bd255c2131de13c9064194da132734ca7243b5eb0ea4382a874e3ce724c0bc8c3e83599f8"]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/96, 0x60}, {&(0x7f0000000f80)=""/4096, 0x1000}], 0x2, 0x0, 0x7) write(r0, &(0x7f0000000000)="101d5e6bc5123d4033509a0f48da92d9e25bafb679ef8d82f8d2f295c6467c4fcb86f4ce400a6fcf3a8c9b294fe0ad23ae7601568e72f7", 0x37) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_mount_image$fuse(&(0x7f0000002140)='fuse\x00', &(0x7f0000002180)='./file0\x00', 0x0, 0x0, 0x0, 0x21, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_get$uid(0x3, r1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@ipv4={[], [], @dev}, @in=@empty}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) [ 386.822854][T22159] loop1: detected capacity change from 0 to 270 [ 386.823540][ T8987] usb 5-1: USB disconnect, device number 61 23:43:41 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 386.961168][T22178] loop1: detected capacity change from 0 to 270 [ 386.990550][ T9710] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 387.280594][ T9710] usb 1-1: Using ep0 maxpacket: 8 23:43:42 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) [ 387.420568][ T9710] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 387.429679][ T9710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.445608][ T9710] usb 1-1: config 0 descriptor?? [ 387.502880][ T9710] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 387.630519][ T8987] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 387.930531][ T9710] gspca_sonixj: reg_r err -32 [ 387.935385][ T9710] sonixj: probe of 1-1:0.0 failed with error -32 [ 388.040512][ T8987] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 388.048622][ T8987] usb 5-1: config 0 has no interface number 0 [ 388.055219][ T8987] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.066600][ T8987] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.076726][ T8987] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 388.086111][ T8987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.096573][ T8987] usb 5-1: config 0 descriptor?? [ 388.611023][ T8987] hid-picolcd 0003:04D8:C002.0007: unknown main item tag 0x0 [ 388.690482][ T8987] hid-picolcd 0003:04D8:C002.0007: No report with id 0x11 found [ 388.811816][ T9709] usb 5-1: USB disconnect, device number 62 23:43:44 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:43:44 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:44 executing program 1: socket$inet6(0xa, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/227, 0xe3}], 0x1, 0x20000009, 0x0) 23:43:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 23:43:44 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) [ 389.595780][ T9531] usb 1-1: USB disconnect, device number 48 23:43:44 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:44 executing program 1: ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r2 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x4, 0xb9, 0x5, 0x1f, 0x0, 0x8, 0x400, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10, 0x4, @perf_config_ext={0x10001, 0x2c}, 0x40512, 0x5, 0x1, 0x8, 0x7f, 0x5, 0x3}, r1, 0x1, r1, 0xa0b4ce917c085eb0) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000200)=""/121, 0x79}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000180)=""/35, 0x23}], 0x4, 0x2, 0x3) sendfile(r0, r1, &(0x7f00000001c0)=0x3f, 0x5) vmsplice(r2, &(0x7f0000001500)=[{&(0x7f0000000440)="a1a295596484744b09816a5cf7fce3954161a246e4b9e661de1196dcbde2bddd20", 0x21}, {&(0x7f0000000480)}], 0x2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000000c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x0, 0xff, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00', 0xffffffffffffffff) 23:43:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:44 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:44 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000045c0)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(0xee00, r2, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r3, &(0x7f0000004ac0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 389.796823][T22255] overlayfs: failed to resolve './file1': -2 23:43:44 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 389.910932][T22269] overlayfs: failed to resolve './file1': -2 [ 389.942281][ T9710] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 390.050398][ T9531] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 390.290384][ T9531] usb 1-1: Using ep0 maxpacket: 8 [ 390.340393][ T9710] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 390.348536][ T9710] usb 5-1: config 0 has no interface number 0 [ 390.355217][ T9710] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.366514][ T9710] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 390.375923][ T9710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.386114][ T9710] usb 5-1: config 0 descriptor?? [ 390.410662][ T9531] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 390.419805][ T9531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.429539][ T9531] usb 1-1: config 0 descriptor?? [ 390.472321][ T9531] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 390.910380][ T9531] gspca_sonixj: reg_r err -32 [ 390.915088][ T9531] sonixj: probe of 1-1:0.0 failed with error -32 [ 390.930361][ T9710] usbhid 5-1:0.35: can't add hid device: -71 [ 390.936448][ T9710] usbhid: probe of 5-1:0.35 failed with error -71 [ 390.943777][ T9710] usb 5-1: USB disconnect, device number 63 23:43:47 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:43:47 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000045c0)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(0xee00, r2, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r3, &(0x7f0000004ac0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 23:43:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:47 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 23:43:47 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) [ 392.650405][ T4821] usb 1-1: USB disconnect, device number 49 23:43:47 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000045c0)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(0xee00, r2, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r3, &(0x7f0000004ac0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 23:43:47 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 392.715190][T22310] overlayfs: failed to resolve './file1': -2 23:43:47 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000045c0)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(0xee00, r2, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r3, &(0x7f0000004ac0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 23:43:47 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:47 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000240)=0x4b, 0x9) 23:43:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 392.970291][ T9710] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 393.120248][ T4821] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 393.370743][ T9710] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 393.378885][ T4821] usb 1-1: Using ep0 maxpacket: 8 [ 393.383936][ T9710] usb 5-1: config 0 has no interface number 0 [ 393.390066][ T9710] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.401464][ T9710] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 393.410641][ T9710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.421033][ T9710] usb 5-1: config 0 descriptor?? [ 393.510250][ T4821] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 393.519365][ T4821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.528397][ T4821] usb 1-1: config 0 descriptor?? [ 393.582156][ T4821] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 393.970196][ T9710] usbhid 5-1:0.35: can't add hid device: -71 [ 393.976305][ T9710] usbhid: probe of 5-1:0.35 failed with error -71 [ 393.983708][ T9710] usb 5-1: USB disconnect, device number 64 [ 394.470196][ T4821] gspca_sonixj: reg_r err -71 [ 394.475019][ T4821] sonixj: probe of 1-1:0.0 failed with error -71 [ 394.483625][ T4821] usb 1-1: USB disconnect, device number 50 23:43:49 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:43:49 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:49 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000100)={0x118, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0xf4, 0x4, 0x0, 0x1, [{0xcc, 0x1, 0x0, 0x1, [@fib={{0x8, 0x1, 'fib\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}, @ct={{0x7, 0x1, 'ct\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8}, @NFTA_CT_DREG={0x8}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_CT_KEY={0x8}, @NFTA_CT_KEY={0x8}]}}, @numgen={{0xb, 0x1, 'numgen\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x56c08039}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @notrack={{0xc, 0x1, 'notrack\x00'}, @val={0x4, 0x2, 0x0, 0x1, [""]}}, @tunnel={{0xb, 0x1, 'tunnel\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TUNNEL_MODE={0x8}]}}]}, {0x24, 0x1, 0x0, 0x1, [@immediate={{0xe, 0x1, 'immediate\x00'}, @void}, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}]}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)) 23:43:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 23:43:49 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:43:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:43:49 executing program 2: exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) 23:43:49 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000100)={0x118, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0xf4, 0x4, 0x0, 0x1, [{0xcc, 0x1, 0x0, 0x1, [@fib={{0x8, 0x1, 'fib\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}, @ct={{0x7, 0x1, 'ct\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8}, @NFTA_CT_DREG={0x8}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_CT_KEY={0x8}, @NFTA_CT_KEY={0x8}]}}, @numgen={{0xb, 0x1, 'numgen\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x56c08039}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @notrack={{0xc, 0x1, 'notrack\x00'}, @val={0x4, 0x2, 0x0, 0x1, [""]}}, @tunnel={{0xb, 0x1, 'tunnel\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TUNNEL_MODE={0x8}]}}]}, {0x24, 0x1, 0x0, 0x1, [@immediate={{0xe, 0x1, 'immediate\x00'}, @void}, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}]}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)) 23:43:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) 23:43:49 executing program 2: exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 395.251565][ T9709] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 395.280121][ T9711] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 395.490129][ T9709] usb 1-1: Using ep0 maxpacket: 8 [ 395.610392][ T9709] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 395.619486][ T9709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.631224][ T9709] usb 1-1: config 0 descriptor?? [ 395.673782][ T9709] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 395.700123][ T9711] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 395.708266][ T9711] usb 5-1: config 0 has no interface number 0 [ 395.715031][ T9711] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.726319][ T9711] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 395.735575][ T9711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.745461][ T9711] usb 5-1: config 0 descriptor?? [ 396.310091][ T9711] usbhid 5-1:0.35: can't add hid device: -71 [ 396.316267][ T9711] usbhid: probe of 5-1:0.35 failed with error -71 [ 396.323983][ T9711] usb 5-1: USB disconnect, device number 65 [ 396.550079][ T9709] gspca_sonixj: reg_r err -71 [ 396.555011][ T9709] sonixj: probe of 1-1:0.0 failed with error -71 [ 396.562582][ T9709] usb 1-1: USB disconnect, device number 51 23:43:51 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:43:51 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000100)={0x118, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0xf4, 0x4, 0x0, 0x1, [{0xcc, 0x1, 0x0, 0x1, [@fib={{0x8, 0x1, 'fib\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}, @ct={{0x7, 0x1, 'ct\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8}, @NFTA_CT_DREG={0x8}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_CT_KEY={0x8}, @NFTA_CT_KEY={0x8}]}}, @numgen={{0xb, 0x1, 'numgen\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x56c08039}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @notrack={{0xc, 0x1, 'notrack\x00'}, @val={0x4, 0x2, 0x0, 0x1, [""]}}, @tunnel={{0xb, 0x1, 'tunnel\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TUNNEL_MODE={0x8}]}}]}, {0x24, 0x1, 0x0, 0x1, [@immediate={{0xe, 0x1, 'immediate\x00'}, @void}, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}]}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)) 23:43:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) 23:43:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 23:43:51 executing program 2: exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:51 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:43:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) 23:43:51 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) 23:43:51 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000100)={0x118, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0xf4, 0x4, 0x0, 0x1, [{0xcc, 0x1, 0x0, 0x1, [@fib={{0x8, 0x1, 'fib\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}, @ct={{0x7, 0x1, 'ct\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8}, @NFTA_CT_DREG={0x8}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_CT_KEY={0x8}, @NFTA_CT_KEY={0x8}]}}, @numgen={{0xb, 0x1, 'numgen\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x56c08039}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @notrack={{0xc, 0x1, 'notrack\x00'}, @val={0x4, 0x2, 0x0, 0x1, [""]}}, @tunnel={{0xb, 0x1, 'tunnel\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TUNNEL_MODE={0x8}]}}]}, {0x24, 0x1, 0x0, 0x1, [@immediate={{0xe, 0x1, 'immediate\x00'}, @void}, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x4}}]}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)) 23:43:51 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:51 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 397.350010][ T9531] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 397.400020][ T9711] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 397.700019][ T9711] usb 1-1: Using ep0 maxpacket: 8 [ 397.710145][ T9531] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 397.718567][ T9531] usb 5-1: config 0 has no interface number 0 [ 397.726199][ T9531] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.737301][ T9531] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 397.747740][ T9531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.756684][ T9531] usb 5-1: config 0 descriptor?? [ 397.830103][ T9711] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 397.839439][ T9711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.849163][ T9711] usb 1-1: config 0 descriptor?? [ 397.893981][ T9711] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 398.300048][ T9531] usbhid 5-1:0.35: can't add hid device: -71 [ 398.306907][ T9531] usbhid: probe of 5-1:0.35 failed with error -71 [ 398.316186][ T9531] usb 5-1: USB disconnect, device number 66 [ 398.751509][ T9711] gspca_sonixj: reg_r err -71 [ 398.756255][ T9711] sonixj: probe of 1-1:0.0 failed with error -71 [ 398.764243][ T9711] usb 1-1: USB disconnect, device number 52 23:43:53 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:43:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) 23:43:53 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x92be, 0x10001, 0x8, 0x40}, 0x40) 23:43:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 23:43:53 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:43:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) 23:43:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5411, &(0x7f0000000040)) 23:43:54 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 399.306108][T22524] overlayfs: failed to resolve './file1': -2 23:43:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 23:43:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) 23:43:54 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 399.407182][T22539] overlayfs: failed to resolve './file1': -2 [ 399.471792][T22551] overlayfs: failed to resolve './file1': -2 [ 399.549909][ T9711] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 399.579929][ T8021] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 399.819928][ T8021] usb 1-1: Using ep0 maxpacket: 8 [ 399.940521][ T8021] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 399.950204][ T8021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.966030][ T8021] usb 1-1: config 0 descriptor?? [ 399.969921][ T9711] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 399.979357][ T9711] usb 5-1: config 0 has no interface number 0 [ 399.986301][ T9711] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.997670][ T9711] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 400.007437][ T9711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.013278][ T8021] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 400.018835][ T9711] usb 5-1: config 0 descriptor?? [ 400.570770][ T9711] usbhid 5-1:0.35: can't add hid device: -71 [ 400.577212][ T9711] usbhid: probe of 5-1:0.35 failed with error -71 [ 400.585404][ T9711] usb 5-1: USB disconnect, device number 67 [ 400.879908][ T8021] gspca_sonixj: reg_r err -71 [ 400.884800][ T8021] sonixj: probe of 1-1:0.0 failed with error -71 [ 400.892810][ T8021] usb 1-1: USB disconnect, device number 53 23:43:56 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:43:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) 23:43:56 executing program 1: syz_emit_ethernet(0xa6, &(0x7f0000000380)={@empty, @broadcast, @void, {@ipv4={0x800, @gre={{0x15, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @dev, {[@generic={0x0, 0x10, "6b395a3c1e103f0c55dbdaed4bdf"}, @lsrr={0x83, 0x2b, 0x0, [@private, @remote, @empty, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @private, @rand_addr, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @timestamp_prespec={0x44, 0x4}]}}}}}}, 0x0) 23:43:56 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 23:43:56 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00m'], 0x0, 0x0, 0x0}, 0x0) 23:43:56 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:56 executing program 1: syz_io_uring_setup(0x459e, &(0x7f0000000140), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000444000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 23:43:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab", 0x3a, 0x11, 0x0, 0x0) 23:43:56 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:56 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae8a, &(0x7f0000000000)) 23:43:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab", 0x3a, 0x11, 0x0, 0x0) [ 401.679792][ T9711] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 401.739817][ T9710] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 402.009835][ T9710] usb 1-1: Using ep0 maxpacket: 8 [ 402.069920][ T9711] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 402.078299][ T9711] usb 5-1: config 0 has no interface number 0 [ 402.084928][ T9711] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.096303][ T9711] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 402.105830][ T9711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.115206][ T9711] usb 5-1: config 0 descriptor?? [ 402.139833][ T9710] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 402.149256][ T9710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.159696][ T9710] usb 1-1: config 0 descriptor?? [ 402.221427][ T9710] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 402.649860][ T9711] usbhid 5-1:0.35: can't add hid device: -71 [ 402.656193][ T9711] usbhid: probe of 5-1:0.35 failed with error -71 [ 402.664118][ T9711] usb 5-1: USB disconnect, device number 68 [ 403.109777][ T9710] gspca_sonixj: reg_r err -71 [ 403.114930][ T9710] sonixj: probe of 1-1:0.0 failed with error -71 [ 403.122454][ T9710] usb 1-1: USB disconnect, device number 54 23:43:58 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:43:58 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab", 0x3a, 0x11, 0x0, 0x0) 23:43:58 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae8a, &(0x7f0000000000)) 23:43:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) 23:43:58 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 23:43:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x11, 0x0, 0x0) 23:43:58 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae8a, &(0x7f0000000000)) 23:43:58 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:43:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x11, 0x0, 0x0) 23:43:58 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae8a, &(0x7f0000000000)) 23:43:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x11, 0x0, 0x0) [ 403.959740][ T4821] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 403.979659][ T9711] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 404.249673][ T9711] usb 1-1: Using ep0 maxpacket: 8 [ 404.359986][ T4821] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 404.368119][ T4821] usb 5-1: config 0 has no interface number 0 [ 404.374263][ T9711] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 404.383678][ T9711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.391861][ T4821] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.403217][ T4821] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 404.412807][ T9711] usb 1-1: config 0 descriptor?? [ 404.418123][ T4821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.432811][ T4821] usb 5-1: config 0 descriptor?? [ 404.453022][ T9711] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 404.959615][ T4821] usbhid 5-1:0.35: can't add hid device: -71 [ 404.966982][ T4821] usbhid: probe of 5-1:0.35 failed with error -71 [ 404.987350][ T4821] usb 5-1: USB disconnect, device number 69 [ 405.299662][ T9711] gspca_sonixj: reg_r err -71 [ 405.304558][ T9711] sonixj: probe of 1-1:0.0 failed with error -71 [ 405.312502][ T9711] usb 1-1: USB disconnect, device number 55 23:44:00 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 23:44:00 executing program 1: bpf$MAP_CREATE(0x6, 0x0, 0x7) 23:44:00 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf74", 0x49, 0x11, 0x0, 0x0) 23:44:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) 23:44:00 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 23:44:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf74", 0x49, 0x11, 0x0, 0x0) 23:44:00 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 23:44:00 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x402c542b, &(0x7f0000000040)) 23:44:00 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf74", 0x49, 0x11, 0x0, 0x0) 23:44:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x19, 0x4, 0x0, 0xff}, 0x40) [ 405.961806][T22765] overlayfs: failed to resolve './file0': -2 [ 406.121187][ T9711] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 406.139612][ T9531] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 406.359601][ T9711] usb 1-1: Using ep0 maxpacket: 8 [ 406.479642][ T9711] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 406.488940][ T9711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.498303][ T9711] usb 1-1: config 0 descriptor?? [ 406.541620][ T9711] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 406.561174][ T9531] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 406.569894][ T9531] usb 5-1: config 0 has no interface number 0 [ 406.576057][ T9531] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.588465][ T9531] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 406.598367][ T9531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.608193][ T9531] usb 5-1: config 0 descriptor?? [ 407.139580][ T9531] usbhid 5-1:0.35: can't add hid device: -71 [ 407.139644][ T9531] usbhid: probe of 5-1:0.35 failed with error -71 [ 407.140896][ T9531] usb 5-1: USB disconnect, device number 70 [ 407.419551][ T9711] gspca_sonixj: reg_r err -71 [ 407.424479][ T9711] sonixj: probe of 1-1:0.0 failed with error -71 [ 407.432745][ T9711] usb 1-1: USB disconnect, device number 56 23:44:02 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 23:44:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec", 0x4b, 0x11, 0x0, 0x0) 23:44:02 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:02 executing program 1: syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaa37aaaaaaaaaa408864"], 0x0) 23:44:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) 23:44:02 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 23:44:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec", 0x4b, 0x11, 0x0, 0x0) 23:44:02 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x80045440, &(0x7f0000000040)) 23:44:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec", 0x4b, 0x11, 0x0, 0x0) [ 407.948938][T22811] overlayfs: failed to resolve './file0': -2 23:44:02 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, 0x202}, 0x40) 23:44:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x11, 0x0, 0x0) [ 408.052675][T22826] overlayfs: failed to resolve './file0': -2 [ 408.259494][ T8021] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 408.267157][ T9531] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 408.499431][ T8021] usb 1-1: Using ep0 maxpacket: 8 [ 408.649490][ T8021] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 408.658817][ T8021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.669991][ T8021] usb 1-1: config 0 descriptor?? [ 408.679431][ T9531] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 408.687508][ T9531] usb 5-1: config 0 has no interface number 0 [ 408.700066][ T9531] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.712032][ T9531] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 408.721319][ T9531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.731530][ T8021] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 408.738474][ T9531] usb 5-1: config 0 descriptor?? [ 409.279470][ T9531] usbhid 5-1:0.35: can't add hid device: -71 [ 409.285528][ T9531] usbhid: probe of 5-1:0.35 failed with error -71 [ 409.293305][ T9531] usb 5-1: USB disconnect, device number 71 [ 409.589385][ T8021] gspca_sonixj: reg_r err -71 [ 409.594117][ T8021] sonixj: probe of 1-1:0.0 failed with error -71 [ 409.601725][ T8021] usb 1-1: USB disconnect, device number 57 23:44:04 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 23:44:04 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x11, 0x0, 0x0) 23:44:04 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5425, &(0x7f0000000040)) 23:44:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[], 0x1c}}, 0x0) 23:44:04 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 23:44:04 executing program 1: syz_emit_ethernet(0xaa, &(0x7f0000000380)={@empty, @broadcast, @void, {@ipv4={0x800, @gre={{0x16, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @dev, {[@generic={0x0, 0xe, "6b395a3c1e103f0c55dbdaed"}, @lsrr={0x83, 0x27, 0x0, [@private, @remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private, @rand_addr, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}]}}}}}}, 0x0) 23:44:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x11, 0x0, 0x0) 23:44:04 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:04 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000380)={@empty, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @dev}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}}, 0x0) 23:44:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 23:44:04 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 410.439368][ T9710] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 410.446989][ T9711] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 410.719350][ T9710] usb 1-1: Using ep0 maxpacket: 8 [ 410.869362][ T9711] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 410.877748][ T9710] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 410.886803][ T9711] usb 5-1: config 0 has no interface number 0 [ 410.893608][ T9710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.901995][ T9711] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.913546][ T9711] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 410.922948][ T9710] usb 1-1: config 0 descriptor?? [ 410.928039][ T9711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.937538][ T9711] usb 5-1: config 0 descriptor?? [ 410.961147][ T9710] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 411.499296][ T9711] usbhid 5-1:0.35: can't add hid device: -71 [ 411.505425][ T9711] usbhid: probe of 5-1:0.35 failed with error -71 [ 411.516647][ T9711] usb 5-1: USB disconnect, device number 72 [ 411.839278][ T9710] gspca_sonixj: reg_r err -71 [ 411.844121][ T9710] sonixj: probe of 1-1:0.0 failed with error -71 [ 411.852047][ T9710] usb 1-1: USB disconnect, device number 58 23:44:07 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:44:07 executing program 1: syz_io_uring_setup(0x1c, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x459e, &(0x7f0000000140), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000444000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 23:44:07 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 23:44:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[], 0x1c}}, 0x0) 23:44:07 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 23:44:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x12, 0xd6cb, 0x4, 0x1, 0x2}, 0x40) 23:44:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 23:44:07 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:07 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x5}]}]}}, &(0x7f00000003c0)=""/200, 0x2e, 0xc8, 0x8}, 0x20) 23:44:07 executing program 5: r0 = syz_io_uring_setup(0x1c, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) [ 412.488515][T22960] BPF:[1] FUNC_PROTO (anon) [ 412.494446][T22960] BPF:return=0 args=( [ 412.505781][T22960] BPF:5 (anon) [ 412.513644][T22960] BPF:) [ 412.525281][T22960] BPF: [ 412.534760][T22960] BPF:Invalid arg#1 23:44:07 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 412.545438][T22960] BPF: [ 412.545438][T22960] [ 412.551765][T22960] BPF:[1] FUNC_PROTO (anon) [ 412.558803][T22960] BPF:return=0 args=( [ 412.566305][T22960] BPF:5 (anon) [ 412.570043][T22960] BPF:) [ 412.573274][T22960] BPF: [ 412.576111][T22960] BPF:Invalid arg#1 [ 412.583029][T22960] BPF: [ 412.583029][T22960] [ 412.659225][ T9711] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 412.669705][ T8021] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 412.929211][ T8021] usb 1-1: Using ep0 maxpacket: 8 [ 413.019511][ T9711] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 413.027614][ T9711] usb 5-1: config 0 has no interface number 0 [ 413.034411][ T9711] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.045810][ T9711] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 413.055162][ T9711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.064008][ T9711] usb 5-1: config 0 descriptor?? [ 413.069636][ T8021] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 413.078716][ T8021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.087728][ T8021] usb 1-1: config 0 descriptor?? [ 413.141142][ T8021] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 413.599185][ T9711] usbhid 5-1:0.35: can't add hid device: -71 [ 413.605243][ T9711] usbhid: probe of 5-1:0.35 failed with error -71 [ 413.612415][ T9711] usb 5-1: USB disconnect, device number 73 [ 414.009174][ T8021] gspca_sonixj: reg_r err -71 [ 414.013952][ T8021] sonixj: probe of 1-1:0.0 failed with error -71 [ 414.021530][ T8021] usb 1-1: USB disconnect, device number 59 23:44:09 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:44:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5408, &(0x7f0000000040)) 23:44:09 executing program 5: r0 = syz_io_uring_setup(0x1c, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) 23:44:09 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[], 0x1c}}, 0x0) 23:44:09 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 23:44:09 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f000000cfc0)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x8000000) 23:44:09 executing program 5: r0 = syz_io_uring_setup(0x1c, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) [ 414.591963][T23019] overlayfs: missing 'lowerdir' 23:44:09 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:09 executing program 1: setitimer(0x1, &(0x7f0000000300)={{}, {0x0, 0x2710}}, 0x0) setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x2710}}, &(0x7f0000000040)) 23:44:09 executing program 5: r0 = syz_io_uring_setup(0x1c, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) [ 414.707991][T23040] overlayfs: missing 'lowerdir' 23:44:09 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 414.819884][T23047] overlayfs: missing 'lowerdir' [ 414.829098][ T8021] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 414.849528][ T9531] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 415.089423][ T9531] usb 1-1: Using ep0 maxpacket: 8 [ 415.189495][ T8021] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 415.197586][ T8021] usb 5-1: config 0 has no interface number 0 [ 415.204415][ T8021] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.215643][ T9531] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 415.224692][ T8021] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 415.233861][ T9531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.242007][ T8021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.251698][ T9531] usb 1-1: config 0 descriptor?? [ 415.257012][ T8021] usb 5-1: config 0 descriptor?? [ 415.290926][ T9531] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 415.799093][ T8021] usbhid 5-1:0.35: can't add hid device: -71 [ 415.805184][ T8021] usbhid: probe of 5-1:0.35 failed with error -71 [ 415.813784][ T8021] usb 5-1: USB disconnect, device number 74 [ 416.169066][ T9531] gspca_sonixj: reg_r err -71 [ 416.173858][ T9531] sonixj: probe of 1-1:0.0 failed with error -71 [ 416.182487][ T9531] usb 1-1: USB disconnect, device number 60 23:44:11 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:44:11 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 23:44:11 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:11 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5405, &(0x7f0000000040)) 23:44:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB], 0x1c}}, 0x0) 23:44:11 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 23:44:11 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0xf000, 0x0) 23:44:11 executing program 1: r0 = syz_io_uring_setup(0x1c, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x5, 0x0, r1) [ 416.742685][T23085] overlayfs: missing 'lowerdir' 23:44:11 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:11 executing program 5: syz_emit_ethernet(0x26, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @private, {[@rr={0x7, 0x3, 0x7b}]}}}}}}, 0x0) 23:44:11 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 416.827218][T23105] overlayfs: missing 'lowerdir' 23:44:11 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5456, &(0x7f0000000040)) [ 416.952376][T23116] overlayfs: missing 'lowerdir' [ 416.968990][ T8021] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 417.009012][ T8987] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 417.269355][ T8987] usb 1-1: Using ep0 maxpacket: 8 [ 417.329322][ T8021] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 417.337510][ T8021] usb 5-1: config 0 has no interface number 0 [ 417.344224][ T8021] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.355597][ T8021] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 417.365067][ T8021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.375708][ T8021] usb 5-1: config 0 descriptor?? [ 417.419289][ T8987] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 417.430004][ T8987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.438654][ T8987] usb 1-1: config 0 descriptor?? [ 417.481052][ T8987] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 418.118981][ T8021] usbhid 5-1:0.35: can't add hid device: -71 [ 418.125275][ T8021] usbhid: probe of 5-1:0.35 failed with error -71 [ 418.132885][ T8021] usb 5-1: USB disconnect, device number 75 [ 418.348949][ T8987] gspca_sonixj: reg_r err -71 [ 418.353766][ T8987] sonixj: probe of 1-1:0.0 failed with error -71 [ 418.361360][ T8987] usb 1-1: USB disconnect, device number 61 23:44:13 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:44:13 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541b, &(0x7f0000000040)) 23:44:13 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSSOFTCAR(r0, 0xc0189436, &(0x7f0000000040)) 23:44:13 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB], 0x1c}}, 0x0) 23:44:13 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 23:44:13 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 418.892056][T23152] overlayfs: missing 'lowerdir' 23:44:13 executing program 5: socket(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x300000208, 0x0, 0x20004c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000ba00)={0x0, 0x0, &(0x7f000000b9c0)=[{&(0x7f000000b800)=ANY=[@ANYBLOB="280000002a0001"], 0x28}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=""/89, 0x59}}], 0x1, 0x10000, 0x0) 23:44:13 executing program 1: syz_emit_ethernet(0xa6, &(0x7f0000000380)={@empty, @broadcast, @void, {@ipv4={0x800, @gre={{0x15, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @dev, {[@generic={0x0, 0x11, "6b395a3c1e103f0c55dbdaed4bdf3c"}, @lsrr={0x83, 0x2b, 0x0, [@private, @remote, @empty, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @private, @rand_addr, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @timestamp_prespec={0x44, 0x4}]}}}}}}, 0x0) [ 418.988227][T23169] __nla_validate_parse: 9 callbacks suppressed [ 418.988241][T23169] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 419.020339][T23169] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 419.022934][T23168] overlayfs: missing 'lowerdir' 23:44:13 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 419.075163][T23165] pic_ioport_write: 54 callbacks suppressed [ 419.075189][T23165] kvm: pic: single mode not supported [ 419.101122][T23165] kvm: pic: single mode not supported 23:44:13 executing program 1: io_uring_setup(0x0, 0xffffffffffffffff) [ 419.114544][T23165] kvm: pic: single mode not supported [ 419.126953][T23165] kvm: pic: single mode not supported [ 419.140765][T23165] kvm: pic: single mode not supported [ 419.146454][T23165] kvm: pic: single mode not supported [ 419.158979][ T8021] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 419.177100][T23165] kvm: pic: single mode not supported [ 419.178534][T23165] kvm: pic: single mode not supported [ 419.185497][T23183] overlayfs: missing 'lowerdir' [ 419.191540][T23165] kvm: pic: single mode not supported [ 419.195998][T23165] kvm: pic: single mode not supported [ 419.210849][ T5] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 419.458918][ T5] usb 1-1: Using ep0 maxpacket: 8 [ 419.539238][ T8021] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 419.547452][ T8021] usb 5-1: config 0 has no interface number 0 [ 419.554091][ T8021] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.565375][ T8021] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 419.575043][ T8021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.584851][ T8021] usb 5-1: config 0 descriptor?? [ 419.592986][ T5] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 419.602109][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.612582][ T5] usb 1-1: config 0 descriptor?? [ 419.652286][ T5] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 420.338848][ T8021] usbhid 5-1:0.35: can't add hid device: -71 [ 420.344963][ T8021] usbhid: probe of 5-1:0.35 failed with error -71 [ 420.356126][ T8021] usb 5-1: USB disconnect, device number 76 [ 420.729813][ T9531] usb 1-1: USB disconnect, device number 62 23:44:15 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:44:15 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:15 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000162, 0x0) 23:44:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x58, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) 23:44:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB], 0x1c}}, 0x0) 23:44:15 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 23:44:16 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000180)='logon\x00', &(0x7f00000001c0)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000200)={0x0, "3fe307071b08c9dc00eb00c88168bc783e5335f1a2afbd33e04a0d2235cb7dc2d83ef91b74359e4658fa8280e7598ab84e473f6857c8d32ab0161f7120ff99a8"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0) 23:44:16 executing program 5: syz_emit_ethernet(0x23, &(0x7f0000000040)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x15, 0x0, 0x2, 0x0, 0x0, 0x0, @rand_addr, @private}, 'd'}}}}, 0x0) 23:44:16 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x540b, &(0x7f0000000040)) [ 421.336639][T23237] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 421.346677][T23237] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 23:44:16 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:16 executing program 5: socket(0x0, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x300000208, 0x0, 0x20004c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:16 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x180000000) [ 421.505827][T23256] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 421.532339][T23256] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 421.560344][ T9531] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 421.567953][ T8021] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 421.798756][ T9531] usb 1-1: Using ep0 maxpacket: 8 [ 421.919734][ T9531] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 421.928885][ T9531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.937532][ T9531] usb 1-1: config 0 descriptor?? [ 421.949191][ T8021] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 421.957270][ T8021] usb 5-1: config 0 has no interface number 0 [ 421.966034][ T8021] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.977281][ T8021] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 421.986554][ T8021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.995525][ T8021] usb 5-1: config 0 descriptor?? [ 422.005095][ T9531] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 422.748730][ T8021] usbhid 5-1:0.35: can't add hid device: -71 [ 422.754835][ T8021] usbhid: probe of 5-1:0.35 failed with error -71 [ 422.763297][ T8021] usb 5-1: USB disconnect, device number 77 [ 423.070460][ T8021] usb 1-1: USB disconnect, device number 63 23:44:18 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:44:18 executing program 1: clone(0x400000404e5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = fork() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = gettid() tkill(r2, 0x34) ptrace$setopts(0x4206, r1, 0x0, 0x0) 23:44:18 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:18 executing program 5: socket(0x0, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x300000208, 0x0, 0x20004c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c000000"], 0x1c}}, 0x0) 23:44:18 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) 23:44:18 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x2}}, &(0x7f00000003c0)=""/200, 0x1a, 0xc8, 0x1}, 0x20) [ 423.657464][T23313] ptrace attach of "/root/syz-executor.1"[23315] was attempted by "/root/syz-executor.1"[23313] [ 423.666269][T23305] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 423.697584][T23305] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 23:44:18 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:18 executing program 5: socket(0x0, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x300000208, 0x0, 0x20004c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 23:44:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@delnexthop={0x28, 0x69, 0x301, 0x0, 0x0, {}, [{0x8}, {0x8}]}, 0x28}}, 0x0) [ 423.835700][T23338] overlayfs: unrecognized mount option "upper" or missing value 23:44:18 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 423.930312][ T9711] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 423.948713][ T9544] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 424.016007][T23352] overlayfs: unrecognized mount option "upper" or missing value [ 424.188637][ T9544] usb 1-1: Using ep0 maxpacket: 8 [ 424.308956][ T9544] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 424.318275][ T9544] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.328650][ T9711] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 424.329487][ T9544] usb 1-1: config 0 descriptor?? [ 424.340574][ T9711] usb 5-1: config 0 has no interface number 0 [ 424.347943][ T9711] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.359474][ T9711] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 424.369149][ T9711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.377768][ T9711] usb 5-1: config 0 descriptor?? [ 424.390358][ T9544] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 425.108629][ T9711] usbhid 5-1:0.35: can't add hid device: -71 [ 425.114696][ T9711] usbhid: probe of 5-1:0.35 failed with error -71 [ 425.126740][ T9711] usb 5-1: USB disconnect, device number 78 [ 425.490333][ T9711] usb 1-1: USB disconnect, device number 64 23:44:20 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:44:20 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000280)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000003c0)=""/200, 0x1a, 0xc8, 0x1}, 0x20) 23:44:20 executing program 5: socket(0x0, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x300000208, 0x0, 0x20004c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:20 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c000000"], 0x1c}}, 0x0) 23:44:20 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) 23:44:20 executing program 1: syslog(0x2, &(0x7f0000000580)=""/47, 0x2f) [ 426.086383][T23389] overlayfs: unrecognized mount option "upper" or missing value 23:44:20 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:20 executing program 1: syz_emit_ethernet(0x12, &(0x7f0000000000)={@link_local, @local, @val={@void}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000040)={@broadcast, @link_local, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "f9b8b5860bac86d0"}}}}, 0x0) [ 426.159235][T23390] pic_ioport_write: 54 callbacks suppressed [ 426.159263][T23390] kvm: pic: single mode not supported [ 426.172497][T23390] kvm: pic: single mode not supported [ 426.192970][T23390] kvm: pic: single mode not supported [ 426.222861][T23390] kvm: pic: single mode not supported [ 426.235712][T23390] kvm: pic: single mode not supported [ 426.247904][T23390] kvm: pic: single mode not supported 23:44:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) read(r0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) [ 426.259768][T23390] kvm: pic: single mode not supported [ 426.271355][T23390] kvm: pic: single mode not supported [ 426.293134][T23390] kvm: pic: single mode not supported [ 426.303533][T23390] kvm: pic: single mode not supported [ 426.328559][ T5] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 426.338529][T23417] overlayfs: workdir and upperdir must be separate subtrees 23:44:21 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb0600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "57b623d148a88900"}) ioctl$TCXONC(r1, 0x540a, 0x2) [ 426.428525][ T9711] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 426.453548][T23427] overlayfs: workdir and upperdir must be separate subtrees [ 426.688501][ T9711] usb 1-1: Using ep0 maxpacket: 8 [ 426.708526][ T5] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 426.716733][ T5] usb 5-1: config 0 has no interface number 0 [ 426.723619][ T5] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.734911][ T5] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 426.744315][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.755115][ T5] usb 5-1: config 0 descriptor?? [ 426.829135][ T9711] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 426.838320][ T9711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.848681][ T9711] usb 1-1: config 0 descriptor?? [ 426.900344][ T9711] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 427.498499][ T5] usbhid 5-1:0.35: can't add hid device: -71 [ 427.504637][ T5] usbhid: probe of 5-1:0.35 failed with error -71 [ 427.516502][ T5] usb 5-1: USB disconnect, device number 79 [ 427.969544][ T9711] usb 1-1: USB disconnect, device number 65 23:44:23 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:44:23 executing program 5: syz_emit_ethernet(0x37, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f289b8", 0x1, 0x3a, 0x0, @private2, @local, {[], "ae"}}}}}, 0x0) 23:44:23 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c000000"], 0x1c}}, 0x0) 23:44:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f00000000c0)="a9") 23:44:23 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) 23:44:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000001c0)) 23:44:23 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in, 0x0, 0x0, 0x30, 0x0, "ab67f5eb814fe6f062771094918990b505b7acd227c8a8eb0fd008bf99cf19f416ec3e2d0c47a0721f86ec5a66b4d6d1c044a50f175c2f7f2bef3579182948efb6cc4ace99943c85a086a4b1352bd616"}, 0xd8) 23:44:23 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 428.555401][T23466] overlayfs: workdir and upperdir must be separate subtrees 23:44:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') read$char_usb(r0, &(0x7f0000000080)=""/166, 0xa6) 23:44:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, 0xfffffffffffffffe) 23:44:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) [ 428.719195][T23500] overlayfs: failed to resolve './fil': -2 [ 428.820053][ T9544] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 428.838397][ T9711] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 429.098601][ T9711] usb 1-1: Using ep0 maxpacket: 8 [ 429.178665][ T9544] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 429.186896][ T9544] usb 5-1: config 0 has no interface number 0 [ 429.195090][ T9544] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.206802][ T9544] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 429.217556][ T9544] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.227442][ T9544] usb 5-1: config 0 descriptor?? [ 429.238437][ T9711] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 429.247513][ T9711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.256584][ T9711] usb 1-1: config 0 descriptor?? [ 429.300317][ T9711] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 429.968458][ T9544] usbhid 5-1:0.35: can't add hid device: -71 [ 429.974590][ T9544] usbhid: probe of 5-1:0.35 failed with error -71 [ 429.985732][ T9544] usb 5-1: USB disconnect, device number 80 [ 430.400304][ T9544] usb 1-1: USB disconnect, device number 66 23:44:25 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:44:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) clone(0x400000404e5fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fork() prctl$PR_SET_PTRACER(0x59616d61, r1) r2 = gettid() r3 = gettid() tkill(r3, 0x34) ptrace$setopts(0x4206, r2, 0x0, 0x0) 23:44:25 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200"], 0x1c}}, 0x0) 23:44:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb0600"}) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) finit_module(r1, 0x0, 0x0) 23:44:25 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00'], 0x0, 0x0, 0x0}, 0x0) 23:44:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000080)='o') 23:44:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/144, 0x90}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb0600"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) read(r0, 0x0, 0x0) r2 = syz_open_pts(r0, 0x0) r3 = dup2(r2, r0) ioctl$TCXONC(r3, 0x540a, 0x3) 23:44:25 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000080)) [ 431.006615][T23549] overlayfs: failed to resolve './fil': -2 [ 431.012551][T23560] ptrace attach of "/root/syz-executor.5"[23558] was attempted by "/root/syz-executor.5"[23560] 23:44:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/144, 0x90}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb0600"}) read(r0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) ioctl$TCXONC(r2, 0x540a, 0x3) 23:44:25 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 431.151159][T23577] overlayfs: failed to resolve './fil': -2 [ 431.220907][T23588] overlayfs: failed to resolve './file': -2 [ 431.238308][ T9544] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 431.258612][ T8021] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 431.518373][ T8021] usb 1-1: Using ep0 maxpacket: 8 [ 431.598319][ T9544] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 431.606435][ T9544] usb 5-1: config 0 has no interface number 0 [ 431.612592][ T9544] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.623577][ T9544] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 431.632655][ T9544] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.642158][ T9544] usb 5-1: config 0 descriptor?? [ 431.648280][ T8021] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 431.657431][ T8021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.667335][ T8021] usb 1-1: config 0 descriptor?? [ 431.710095][ T8021] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 432.378284][ T9544] usbhid 5-1:0.35: can't add hid device: -71 [ 432.384475][ T9544] usbhid: probe of 5-1:0.35 failed with error -71 [ 432.392015][ T9544] usb 5-1: USB disconnect, device number 81 [ 432.789145][ T8021] usb 1-1: USB disconnect, device number 67 23:44:28 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:44:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)) 23:44:28 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000080)) pipe(&(0x7f0000000440)) 23:44:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200"], 0x1c}}, 0x0) 23:44:28 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00'], 0x0, 0x0, 0x0}, 0x0) 23:44:28 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) readlinkat(r1, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_getneigh={0x28, 0x1e, 0x209, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', r4, 0x29, 0x7, 0xb7, 0x15, 0x56, @remote, @local, 0x40, 0x29a117a0120a4ba0, 0x8, 0x9}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=@deltaction={0xb0, 0x31, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe00000}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44000}, 0xdad0de08165550aa) keyctl$read(0xb, r0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000000280)=0x8001) 23:44:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000080)) pipe(&(0x7f0000000440)) [ 433.385121][T23627] overlayfs: failed to resolve './file': -2 23:44:28 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000080)) pipe(&(0x7f0000000440)) 23:44:28 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001e000902"], 0x28}}, 0x0) [ 433.439193][ T3247] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.445540][ T3247] ieee802154 phy1 wpan1: encryption failed: -22 23:44:28 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 433.510462][T23651] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 433.534260][T23655] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 433.538655][T23653] overlayfs: failed to resolve './file': -2 [ 433.619885][ T9544] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 433.648229][ T8021] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 433.888164][ T8021] usb 1-1: Using ep0 maxpacket: 8 [ 433.978177][ T9544] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 433.986313][ T9544] usb 5-1: config 0 has no interface number 0 [ 433.992885][ T9544] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.003958][ T9544] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 434.013363][ T8021] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 434.022420][ T9544] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.030428][ T8021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.039051][ T9544] usb 5-1: config 0 descriptor?? [ 434.044819][ T8021] usb 1-1: config 0 descriptor?? [ 434.091510][ T8021] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 434.778174][ T9544] usbhid 5-1:0.35: can't add hid device: -71 [ 434.784255][ T9544] usbhid: probe of 5-1:0.35 failed with error -71 [ 434.795636][ T9544] usb 5-1: USB disconnect, device number 82 [ 435.159077][ T9711] usb 1-1: USB disconnect, device number 68 23:44:30 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:44:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000080)) pipe(&(0x7f0000000440)) 23:44:30 executing program 5: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)={0x81, 0x0, "2bf6f68d970df4368066d68b496595ba580b240d76a11aff8a7e609698aba01152762b7467a6700549ffaf0eb5a9d69d7dae4fc62be4de531fec2be6d9239838e04a7296720193376dbd787cbef3003b5d932de951a623254a3be7c72139ef63adfcbea70ef33fe8c3a838873bf959f583267fa3593bc8a224"}, 0x0) 23:44:30 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200"], 0x1c}}, 0x0) 23:44:30 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f540d80402c040000000000109022400010000000009042300010301000009210000000122010009058103bd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00'], 0x0, 0x0, 0x0}, 0x0) 23:44:30 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "eaffff3769ea8a7d8b49be0000000000000053"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, "00000007000000000000000900000000001000"}) 23:44:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000080)) 23:44:30 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:30 executing program 1: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000080)) 23:44:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "eaffff3769ea8a7d8b49be0000000000000053"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, "00000007000000000000000900000000001000"}) [ 435.978081][ T9711] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 436.010009][ T9710] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 436.268101][ T9710] usb 1-1: Using ep0 maxpacket: 8 [ 436.358082][ T9711] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 436.366263][ T9711] usb 5-1: config 0 has no interface number 0 [ 436.373181][ T9711] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.384709][ T9711] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 436.393998][ T9711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.402405][ T9710] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 436.411629][ T9710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.420618][ T9711] usb 5-1: config 0 descriptor?? [ 436.427151][ T9710] usb 1-1: config 0 descriptor?? [ 436.479968][ T9710] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 437.138078][ T9711] usbhid 5-1:0.35: can't add hid device: -71 [ 437.144401][ T9711] usbhid: probe of 5-1:0.35 failed with error -71 [ 437.155413][ T9711] usb 5-1: USB disconnect, device number 83 [ 437.560407][ T9544] usb 1-1: USB disconnect, device number 69 23:44:32 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:44:32 executing program 1: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000080)) 23:44:32 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "eaffff3769ea8a7d8b49be0000000000000053"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, "00000007000000000000000900000000001000"}) 23:44:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf"], 0x1c}}, 0x0) 23:44:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$link(0x8, r0, 0xfffffffffffffffd) 23:44:32 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:32 executing program 1: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000080)) 23:44:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00') 23:44:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "eaffff3769ea8a7d8b49be0000000000000053"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, "00000007000000000000000900000000001000"}) 23:44:32 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000080)) 23:44:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$read(0x3, r0, 0x0, 0x0) [ 438.437917][ T9710] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 438.687931][ T9710] usb 1-1: Using ep0 maxpacket: 8 [ 438.837973][ T9710] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 438.847125][ T9710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.856113][ T9710] usb 1-1: config 0 descriptor?? [ 438.910962][ T9710] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 439.970553][ T5] usb 1-1: USB disconnect, device number 70 23:44:35 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:44:35 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:35 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000080)) 23:44:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$read(0xf, r0, 0x0, 0x0) 23:44:35 executing program 5: clone3(&(0x7f0000000300)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {}, &(0x7f0000000380)=""/102400, 0x4, &(0x7f00000000c0)=""/163, &(0x7f0000000280)=[0x0], 0x1}, 0xfffffcc0) 23:44:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf"], 0x1c}}, 0x0) 23:44:35 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0) 23:44:35 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000080)) 23:44:35 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) 23:44:35 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000680)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000340)={[{@delalloc='delalloc'}]}) 23:44:35 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000080)) [ 440.643473][T23840] loop5: detected capacity change from 0 to 4 [ 440.654628][T23840] EXT4-fs (loop5): Mount option "delalloc" incompatible with ext3 [ 440.710144][T23840] loop5: detected capacity change from 0 to 4 [ 440.717224][T23840] EXT4-fs (loop5): Mount option "delalloc" incompatible with ext3 [ 440.800011][ T9710] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 441.087800][ T9710] usb 1-1: Using ep0 maxpacket: 8 [ 441.248180][ T9710] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 441.257420][ T9710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.267403][ T9710] usb 1-1: config 0 descriptor?? [ 441.309678][ T9710] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 442.388648][ T9710] usb 1-1: USB disconnect, device number 71 23:44:37 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:44:37 executing program 4: r0 = syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000240)=[{&(0x7f0000010000)="01434430303101004c494e5558202020202020202020202020202020202020202020202020202020430b734f4d20202020202020202020202020202020202020202020202020202000000000000000002100000000000021000000000000000000000000000000000000000000000000000000000000000001000001010000010004", 0x82, 0x8000}, {&(0x7f0000000080)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000002c0)="28dd976632d1d62dbd9136f51ec874b417f6", 0x12, 0x8}], 0x0, &(0x7f0000000800)=ANY=[]) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 23:44:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000080)) 23:44:37 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:37 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x9381, 0x0) 23:44:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/88, 0x58}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/228, 0xe4}], 0x3}}], 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001200bf"], 0x1c}}, 0x0) 23:44:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000080)) 23:44:37 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(0xffffffffffffffff, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) close(r0) execve(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, &(0x7f0000000880)='%\x00', &(0x7f00000008c0)='}\x00']) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:44:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, 0x0) [ 442.939342][T23883] loop4: detected capacity change from 0 to 136 23:44:37 executing program 4: r0 = syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000240)=[{&(0x7f0000010000)="01434430303101004c494e5558202020202020202020202020202020202020202020202020202020430b734f4d20202020202020202020202020202020202020202020202020202000000000000000002100000000000021000000000000000000000000000000000000000000000000000000000000000001000001010000010004", 0x82, 0x8000}, {&(0x7f0000000080)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000002c0)="28dd976632d1d62dbd9136f51ec874b417f6", 0x12, 0x8}], 0x0, &(0x7f0000000800)=ANY=[]) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 23:44:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, 0x0) 23:44:37 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 443.117230][T23912] loop4: detected capacity change from 0 to 136 [ 443.247707][ T8021] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 443.487733][ T8021] usb 1-1: Using ep0 maxpacket: 8 [ 443.607717][ T8021] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 443.617077][ T8021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.626033][ T8021] usb 1-1: config 0 descriptor?? [ 443.669667][ T8021] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 444.729531][ T8021] usb 1-1: USB disconnect, device number 72 23:44:39 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:44:39 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x11, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x128, 0xffffff80, 0x178, 0x128, 0xc7, 0x348, 0x258, 0x258, 0x348, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2={0xff, 0x2, [0x8, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x4c]}, @mcast2, [], [], 'lo\x00', 'geneve1\x00'}, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@dev, @private1, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 23:44:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, 0x0) 23:44:39 executing program 4: r0 = syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000240)=[{&(0x7f0000010000)="01434430303101004c494e5558202020202020202020202020202020202020202020202020202020430b734f4d20202020202020202020202020202020202020202020202020202000000000000000002100000000000021000000000000000000000000000000000000000000000000000000000000000001000001010000010004", 0x82, 0x8000}, {&(0x7f0000000080)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000002c0)="28dd976632d1d62dbd9136f51ec874b417f6", 0x12, 0x8}], 0x0, &(0x7f0000000800)=ANY=[]) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 23:44:39 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:39 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x34e, 0x0, 0x0) 23:44:40 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0xcbfb) [ 445.276582][T23947] loop4: detected capacity change from 0 to 136 23:44:40 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffb, 0x0, 0x0) 23:44:40 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) 23:44:40 executing program 4: r0 = syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000240)=[{&(0x7f0000010000)="01434430303101004c494e5558202020202020202020202020202020202020202020202020202020430b734f4d20202020202020202020202020202020202020202020202020202000000000000000002100000000000021000000000000000000000000000000000000000000000000000000000000000001000001010000010004", 0x82, 0x8000}, {&(0x7f0000000080)="ff4344303031", 0x6, 0x8800}, {&(0x7f00000002c0)="28dd976632d1d62dbd9136f51ec874b417f6", 0x12, 0x8}], 0x0, &(0x7f0000000800)=ANY=[]) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 23:44:40 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:40 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5d011622}) ftruncate(0xffffffffffffffff, 0x0) [ 445.438212][T23972] loop4: detected capacity change from 0 to 136 [ 445.577596][ T8987] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 445.879375][ T8987] usb 1-1: Using ep0 maxpacket: 8 [ 446.017632][ T8987] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 446.026723][ T8987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.036596][ T8987] usb 1-1: config 0 descriptor?? [ 446.079556][ T8987] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 447.148677][ T8987] usb 1-1: USB disconnect, device number 73 23:44:42 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) readlinkat(r1, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_getneigh={0x28, 0x1e, 0x209, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', r4, 0x29, 0x7, 0xb7, 0x15, 0x56, @remote, @local, 0x40, 0x29a117a0120a4ba0, 0x8, 0x9}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=@deltaction={0xb0, 0x31, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe00000}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44000}, 0xdad0de08165550aa) keyctl$read(0xb, r0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000000280)=0x8001) 23:44:42 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r0, &(0x7f0000000740)=""/384, 0x180) syz_io_uring_complete(0x0) 23:44:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}}, 0x0) 23:44:42 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:42 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x20040040) r1 = accept$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x1401, 0x400, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40085) syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00', 0xffffffffffffffff) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = signalfd(r2, &(0x7f0000000480)={[0x5]}, 0x8) r4 = syz_open_dev$evdev(&(0x7f00000004c0)='/dev/input/event#\x00', 0x7fffffff, 0x402040) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000000500)={{r4}, "0148250c2e5eea1c47967121e343d42bf593ede75b86df88e68af930486ca08d8e327097b46a51a819e7a1912cf082cf3f0706e03324e81d2da9dbfe59d4f8bd33aba27b975ebb821d6287377232cb23ba88f7bd950e4d22da8649c15ee2481c1040827e6ff3ee8b473fe91804a1cf88a344f4f2dfae01d59ec5a29c695d872543bc67cc4613dcf0d1cdee2f91a6b893ce991fcbedebfad2d0b8f4f79082eecb6253766d407d84cd53338459b68885daa022461d0fefb7d3784aee38bbfa20519ceb7c21ce8fb0c0f8513b4868e362368e5222b2bd59dbad8e290230ce70274cf88090537dd7625647f9f974a11afc71cce2e95f515c9769649fc63575f34c952372b7e76ff559e9352e313ca02444fcf012cb778ecf9331b1460172b6463d057c31fac2e67816dc68264eaa1d803be6849140e7f456eecf8aca7466b528a782190d4064a202dabc12c0806b70e24cbe33cbd00632cd324496e9c63e734f74d3c1191b059c5cf529aaeba340f7a50c8d24fbf0b4c73fc2e896c1c40f72e19fdbf8e0ee374ae3823d3e5482940d783381dceca05b5fff2e95aecf6736c7483848f1841c5748fead8384e7eb5bee1beb218f8a9d44ebe3928fae64627af53db45b73b0df2c21007a9d540f13f9d082a529ae2657db8eaf4138c47e95481e02d87bdd0003530012f107c43140f4044d1e7a55efcb9f784d75b85f3caac0a34ee2f7eef008dc3f57a60edfd6deddc6a8299ad5c45157d0f8c138b2ecf48a84d1cba490ffd0282f07724cec96801521685d68689d52d4cda0da4661e10605f49d6df9d88fa8d8b5324d36056a386aed8293b889d8a7b69cd1766110c5d22114468e4d0758d8ff651ce979db070ba982477a6a66ae00778c7be5dcb4a41becad97339bc09492a41e18e7dccf3752f100f5b1dee3fec1215c3301b0e71952dc690636672d7e6837b91a824cf73507d969926bf3d1e841b1669520870acda94a3e3637fc6212090d38d96edacf977c661bc5c6589f67a2bfdb22d61963f7ac7d5657a8e9e615f29def6ba01305b3ae27eed696a714fdccf13ffbe5c2c0b929d076f31980cdcb5c0b1cfc1bc8ebe39660482828831a340d17ccf62b1e59cd0f9ad8e7fac68652e51fe780b9ba89ee345d6ee6085af6b3b18d820bb50076efc74f8549b456e9f8f1cfab30f6213f5a56a71ff00e3adbc1eff9354d9bb1d6cc9fad5e3917b72a41c016acf6bbac8f4102734658437f60d3d066cef94e9bbfdc7ac1f0bf4df79b6171e7efa2584d03024f396ce87eb72c007c87fb0de871a7449e0819a777caeb2363642436ef13706885c3bfb6c56932fd859a04eb5f1836be747a29de662d0ceceede0e5bbfcb72ae0ea0ef4ac45bf752c6d04cfbc2059b93a7ef48bba1be388e9feda25d60146de58bb9f589d884d68671519d1e004ee26cea7670271f872b305414efec7e69aaac1517eb6215a80b6a1048efae8cc92d4e5d8b9efd849c34f9612f1847937f2d6dc7df1c7e11a8ecdd2d73ce29b97e391f3652604761e55af907b29f73127a32b6e3cb9ca3c30945b497691d20e8565de91bf9f602e7fc2ae49e2e51db5c7b87b4aa665587d4ed7b7c98900f6e2f6d9884cc874512fcd47e30fc006e40453a3140f29b2a4e28b595ee363f87c9e8ba2f090843d6dae15647d4d832b94844eddcdfae8b8bac6000a393da00359b97ffd9428a990a4d04ccc20afceab7ee653a1f4168f6c2a448cddc0c637a5af33874708e9abb3822e684f08af7e4e834d7913dee85a7e4f99984bdfaaffb20a40d472dc0c2f5bf2bf005033ebd2a6c1f6af883e9455308dc1af0706de2baaa0f74893653f6534e235e77ba147848215e895b61aab4795164552304d6b83c52ee60f676daea1e36c468f7bddf7b1ddf6e3cbe32e7472529f6ee76e226ea47ad8435d3335c875abfb52490d4a2c0b46638e9d439f34a63221f85023138fb6b247cf9b649964f824e4f4e5a3f609b7f11c828b95bcce13b6d4d6cf38730bd7e0b2341bc29f98f78e5dea411ae86bee16f7eeb271486b12834e414bd1836ce0d8055f91ab97b8c0cc4a3648b4263aa87f7f0472741dcb5d0f14dcd649f9371cae3058925169a0358b60f9be42f4ef4531db2413b77c0c707a3b7da12846d11f2f2d0a57ed6dbf79e4f5bc485a8215ed43210b77db0b28381ab8495230388d9c216cb37a0b7f8646f316f0a26dd5f4bf0156adbe73744f4e59e127f56ca80e4c443e46424ef0899fd34f2228eb2a4c45b99b202cedc0293dfa70f493e7d2e30193bdfbc1f2a1c5db74c487e19a6373bda342ceee07f497373bcd45d2ffbe4ebb063f2021622977fe960a6bcbafb936714b3b8fc272311766b005ff83a386dd46aa8ca4761d9921e4282cf33c7ec8fe35df11e9d73720dc52c1ca8e7eac646f0dc0258d448112f7fa82a1ce13ea1b7641fe9dcd081cf63e1e2949990df07daf3b9f5265ddfab0e63fbe3ee214c959c93df0b2940bb6509362da7dec430d2658d7b1c056c70457f039de1850e21e75d9fcb3a36be815d8566824baf5c671883229370ca1091c03a4b8eceaf51582e007390b17c0557e21fee2613793ce63340d9a5e34ede4b75d1002d08849670e1c165cdf81a75a11374af7df6ce77e08862a0e5ffa6fa2f8e9ef8530b98144c7d3b599c38a6d84009706f66936739ef8789f1e5e9a8b52433759cc1961a4b1843732d0d0eec4e63c0d710d14db6cac091b4d0b90213af73010d2fac306857b619b48ab3d9e588794920b84738704516eed7d690e227f1d1d0fa6784e24039bc8d86fa5615eb2d0d3c5c93a1c7b01e13779d23899ce2931a181ee63032e2f3d040a25a05821de0b9ab8d49d1484fe1a97c521a9f034ce56ab4f5811b0b4bf073b79146fdf9072d81f6f7a73782f5422757b56a1f20345078fdea922b25af3b9ecbc20a1983b7f2526e760b3ddb9c14f1eba0ca56963ba11cf1e577a535af5d6c352794f7582489550b3dd8a3e4e3961bddf3b4579e9e994b7c0b13ffd8ba531f01e636d2f6b724aae2121fa4d7a1bc18d557fe70686f468f396ddfa0d69d8d164ed2790750c58fec69275b3bd415701698283870f172113d6b5ad445c470447c64550f696c04e28c7695edd6bb79a7d5e54acdc5939604b295a7d70590b78aec4d2ab20abcd007711a436d2358407034a178365e49170250a5bb45f447836a19a6dfb1d641980ab62b8e8ae68f2a1d2c3d140c03cfc97fb94bcacfcba17c17ce3860b00cbda1c0587779219dc4f336b6baa76d4856ce503fb1769fd2536434e4dfbcd553fcf1b620dcdfcc26c4b68f4278bf7cff40e1979e60d171ee2cfde8a98d7f80d580d6f6062527121e84fadf30d1c3a2b0fdc595cfd50fdbba29f3057e787cbeef8d5d20f7d0e28d5eaf34226ca3237aa69d0649e4e52ea0ee5329f9ea1848e7afec6ec629ae2794f21a1284c05728785d552e1105be695464bf6b8551d7fdf6308b661324b21bd7cb133b51cdde053a0f106634702a6ee8f86fd0c525113ee7056b6bd60e22050d6a6ccaa711763e109cb372f43be6b705033ea458b4a8ce85454a987ac327b58d93aa1144fbcd7698b4eaf10c0cc45a3bba4ee7e037e1c7c8e6e95743c8d90412083be69206a60ff09233af729052dffe03ddfdafc33db5fe823483dc8c9b441867827277ab8202457136900cce3fc20fff09b886cfe5d3c4fe1d209a432ba9a2b93e0da765fca71e83226541abfca6431e6a746e97c118c09cb82a468cc67c475eaf6c1b5c33e39cdf23ded51de1620eb30eead2ed2fad3dfd5e8f58b75bf06c7c8a681ae48be29e7eea8d8ab80e26cdcaa1787fb9e8eb20d082df841d42970d3947568763458b5594ce24b2902fc51aaf86665b52b414d730c7351116834a12c0992be89a7c0faf5075b2fb0f7c01a5e307f9e1f5e4ef456061435f5e6242f3da19afbaf0dde03f76b85bd6e61dfcfa5104ef8da951dde005b9cc7d82a1b131f733f6bdc582ae8d5b7cee0ad870b109a3bfc5d3e030581aad623b208dd4bf0256434e32503b7413489a36d38148e13860eaec8b1e8b34d887094146375cc9a89f2927e4c3e4f2d793c89cdae60efb74433656dce0c5acb3dc24e2bdb8251e440711a02b283f2f61166a096af703654e9bc2e450fa19083799d0daffb1fcae89d2699d2d4badacac7ddff52db988ccde987a7311a7630bb81e54e194b0e0214551c481a9507d8b9c1d9518ae592c1e51362d4cd400df037be2f2ef1b8273bd23cae4a8d3fe762ebb75371019f644243966e9931600e264be9bbe3cdba93710f4c0f68bba391e5c4d9b8e72481dc7b7a6b3459f0192eed311caddcc808801f4c80e8c55bc6bae8becf16bed3da8f18aaaa1c7f91bce0469b4f9c752fc2cdd7e1b756d66d7491e40f4cd2057760745dac341fb9c02da1fc1ba5de115f9fb37d675e3722fe8599523e8c279154d0b929784f7860a5fc68bacd8c0eb0c65b3ea2003b02ac85c82efb63ee78b9773109823212204c06369dd3eb2959a4796063c1bccd10d3a90d3fc5f7a6e29dda83e740cad938aef6c121f71abc99d793959622b861da621d80e4f828eda84958d9157233fafc533186b683d285547dca574d6747c01a348a908e37ce29fc1c70cfde5817031b4b69603abb32c190490c774e6b0a1c4cf0477a2e381e2a92949f5ead004da96397545a3253e2dd07a13908bb5d5f1ee0acd02461e4468e0ee8f5caf4d1ca44e75e8a8708086bcb4267c04c0f3044a43cdb09498ddb4b92aacc262782e8362236f4f5cbb3964a056107fb5d94938b4dcf0b68cdfbb5e3872b8b7fb17f8312779d2ffd939367629a18ff698efbcc48fb7ee43d0e174190754aff6e5d565f3c4c376fea88cdb0963a123ab2447cf9b7a657036119fddf0864ccc6dc8dfe7757cb7be99591b07d5e784af701405081cabd7ba6fb35005f6057366785f4754d76fbc7382029dba025eb3bd424eb2af9b2b504ff15b589ac954935eb1d4a8da24103fe5f442c3111b15b379c07909ab6f53d9cfe20243af58300b0f32495041c5491c37e0abdbad9ca0378bbef9d50b15569f18e2c6c22ec15bc3e8286cbdaa060c1e3bdfcde24999265acf0a12d06d71e688f748e71e9f3bfbf3c4407348e52c6b34d6e4b177fc9c507866876b9a89234458af2a887b1787ff2fc8599d7d91f0ebfa7bf1487bb3cc28153e3840fd0bc03fb4cf8f6b87c52367948fcc9f8979666556b10912d54b2912cea7ac22c3538069322a4d48c7cdcfd783f99ab3692292dc760172113061974d6861c569ffb55d58eee7a6f2ee3fef98609afd7ba79d8c1432e21a353efcddb7f180cc2c4a6758879a84cf05f153f9eae94a3052e7d6d1bd2f10b35a38964d5fefdaf5b811c4a6f61d7976c73f228b893e9021ffed155902ddc93bf421b55a22ce84488cab7cc7e2ef3d0feefa5d3c7725cc184f51f94ac41cd3314e2e005617a39f8e9d42312608af66e5e7b05e2c38e821dc07f851dda39b3f8e4b93d1cb5500848bb55af986f03a384e8695f8de4579c15b713b9f64b97dcef4cdadba4557794259e5535282def5c87e3766bf1bac17a59be88d19b00fb49c7700ec0e81d78e11938c928dc4aa320745a2ef890553be9009245146b5a4d8818708822c6d25e703af74fca2d76fcc2c8e52cc8e990a061f5ddd6131dcd72bedc0e029656891275732ed386b2c440276b2fcaa57043266e765a2913e2c1bfd992d5ce0fbb79b0d956e78218251372d66225337291d9a2b5ca2d4a0"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001580)={{r1}, 0x0, 0x0, @inherit={0x68, &(0x7f0000001500)={0x0, 0x4, 0x9, 0x100000000, {0x18, 0x2, 0x1eda861b, 0x5, 0x2}, [0x95d, 0x20, 0x3, 0x9c]}}, @name="42a2271ae32a33319915d038bb317c51f504d16095b7fb6f160840a2ae168f595ea11ad495608000e6757b21b76c55ff003907fd84959f2809759cce85dc72bef8f88116b9bc9e8cd97dba46fca4ae748b0e5302090220092c9dee41a12d05ed8ed2eabd740a0599b7ae493f5f5ae8217190a6ba5948a54dccfd20f3f6bc679ed183f50c888747d36ad2d9130a28f512a75e464be1f529b0d23b94a748d89ab45ec739a07852b4cf7785fbf0c6a189fdde2e455ba9c1d1bead69aa362a4dc3941ff312d782ba89d7cfab4e55722ff7390a860825763100a2e7a53964b902a1d0aa54abc867671f365744c36b0d85fb1e5d5fde646ae9cb8555b370d3a789fb0c698380ae726387550ed05cadbe7858be0231e03609de8870a8bee2e9870c2ac71611d703aec4b75286baa8ce3ff147b5620e08ffbc46bfac38ce975728b0bd33a29c79954917676b7d0afa2884dfd5f8ae3231d09d4eb57dd2523f15b83843122e08dd47cfb7bd6661a6df4726f48088cb849a69f4dbca2045ce54e527ed749931252d1dba465627255b0fb38088492b49038a3aae78104d272863e3375b6eabb680dfcd54642197d5ba3e441b457b71232af3c7f345e14dda7da459ce27d366d4091c053bd3263a4fd5c0dc2462b8f0d92169c5d32c128d093692b3f7046d2455081f3681572cb83ef53ba8dddb85f207d8bacd1b9f903cd082a1663fae0c3c7d1116b1f639fed4958e6216faaf93bc3c26d0fc3a6c7b42239717413d9ffb434158a320e3b3db4460dc25feb486f94f612a1e058c97bc0c3bfc101d05b758891b50b1b1a8b612338cea76323ddb1763ea1419bb6843026942e23dc7047afe189bd64d14fad17f4e93a38bfa4735893917006972ffcb26d46ea1488e5db54edf29e6592fc975dbb096c1ef0c517dec75d23823b1b3596e609dc12a948ff2464224cb1a43f74d04e9cae16e6087e6d0faba0982e9d0746d4e34c4fbe071213209430ee868d2f9de98fc23bc04b3b64944f77bc4764de121f3376fc8b7998b018973ce2ef14c1bff7c60e3499ddbed1615829b53012bab07fef3d39d8481778fe3ba40793320d06f08c1cc736708c9abea6bc26cc072c8f7ab3e3fc58c63be43b2b04ffd52b7c3434bed71ec8a7035d805ca4a7d1a52e456c3ea9a41df015657a4a30df3866daccd1451ff681da201d6b6e9fab51c9a733b67e6fdbe1ebb39e780e66ac28c1eef9810399e90fc405c3801497c0d57f38241270d768c130771fc9f4aee031737b61dad8e1770887fa56ab0ed31e615758921147f2d1918bc0fb08f114bce6cc81ac5eb6a97e9ae7365ebf575559bb891accbd63c0af72798cbf9fe03985152a18ddacef4140c21d4f1a9fe8ddd77dc449c1a23665108e4f228507a6a24997ebca408464e4723493fe3b74a8dfd09dc6a5d6827a5c4c681f84a99cc956268a7654d42ddb83217b8c9fce8b30eae086c78011e49856625418edb2f80f488c8a89499024680ff1ce9ef1cae1cd41915d07fc9514d828024e48ede592e0dea80ff717e9c94b825421ebb86495e7c5edb0f25fee89d96f266a8cbae3e53c700abac559848d0f64813b9cd4ff624a7b767fdf89a31bca851e0ce9b3ba07a59ed9df10acfc6a1043375409901c05eca69f490aef3c359aa9e34763fd82f86019ee28ecb88bcaefff66057f3d3729aa32b0636b0cb8308cea75eee29727d87ccc36a968911fa5e79c8043e5c220410fe6c0b501dc76149703ca269d722d0d2e4e70d41511f4db0e5565d5961de9e22b38dd64cd82a04a60878dbb33c8625dc16a841002a6f47330814244e68c84453d5184b391cd39b77a1b41288dafc062bc1f616da6656991b6c426bd9f8d81f26fbb9fe1689b58c3ab649b6b575f0a521eb020b61eb7f46b130cc1dffd2a4f3dcc961ecabab797d906755aac4964b6a039ef691fbdf9406aa6a0a5a6e717799a91534c01e744c448610bbd577771002a674a4091fc13ce61f2d95db500374416ac4d707efd56192b13b46127696f0a5646bbeef613c7c08145912bcd778158e1880b6ba7d0207efa2acbe141c90db54580566b7252549dcbda65fa39f4a6173c703d91b5e18cb3807d506db0cb058c24ffe028342073b75f061e0c5220f42d3be04cafc83ca7334cddefe6e1968126daf6e81f99f679d166e3df2264f18277c9b32b160d3adf545843dff3bbd1961c747ec276aecc7f7a1908badd6e77a84fa940939d35a77807a006c74265d0248538a4b9437bbba91fbdb81da92f6982d3b331ff4df75bf54a6eb75f74e16496b71883e320852f9ed5636c27e0e74c17efe79b1a66309fcfdde8b11904ce94aa0f88e32dedc54b77793c5862ca5c593262dd7bf897589e9128a68a05179692e5da24f5545d7796e72f54bd67e65cefddf4f22c246cd155f251a9f07bfba8886b66856182b6210164ad7e6ebbf77e26b8600fb106d64b0c05705840f872d3fdaebdccdb4a1ca252ddf6c3d3b4a46750d71b78db8f2923235ca941f8e965605fa3ec8d45ce759c80b862234c33e5662ecdbac11db75b7aa6aeba5e5159ce04fc196ae485f9c47e9e4a853bf4c423e97df1d71c6b3f77788b4284011cd2e17ad094b56df7b167a247ac5305f57c9ce883ca06b061721e10fe6bf3704535d8dce7cbe0951db60f509e40687aeff9a45b6df8ebf47a08a6b24259565f8ebd507e970c7aac070c881c96096184ace7d6944c16ac7f34730f5650a44b24a0e3de21bb5384718d9cbeb61082fc3ba35bd514b0e213a6cb041f182f3ec035da18043fb1968e3ed185442acaa66d084a9612e2cff20607e8bd94ad75c5ad1e7a1c137eff36e2c749f198c25eca6773219ead731b31c56a1a4bc90a087c090a8844dc1dd65b3d5224ba854ceae3edfed314b6dcf1a8957488b17645bcffb29cef2d85ae63e4033b278929bddf347a94c44b83b2bb1355db2217afb60b41db029c5274eeef0a16c70c837397fc42919a2f2925127efdd095baa78994498af920e5ec6e2379aaa4fda8711c148adfc2d75f67aaca6f6f85a3b033c34a3ff2a8bc4ae3a575e17a6d6ab6e0b77321cc725f1a6c1bc826d6b5cb3f94323f949da9784bff4db6b8d14f412887fecb0f7061f3425a1337a48f16c670db941aab5ae1b39b283d49bb680aa789eb993ea704923c5dbb0f4047a18e294947b5e3faa88f1e214f54a78cdf7af925d672e014ff01f57144786ca152045ecfd15a37537760f17849354068f566babe67b36ff137c0c6727e91cbebdb5d5986918bdb3f4c8dde7adecd3f48583df6f74ee277ba5a7e1158e69bac66d3e3b441fdc425b35f9cbb8d371f716168e021254eca02840215beb730c9c5c5fa72f25635b696f4a5849a83849974c66b7b166420341a5cbbae3564db528cf1247bc2b4f3ebb2c3452e24312d6ca6e3ca540b9d84b26184b52ead806ecd2367c896c89a2e6942b5b5cd8f220be6ec6cdc44bd7ca73689ebe793aee4e8d7d170cf91a0c346a8fd26f2f0a7392b26faf39524348c703c326b13c5c1ad4f739b32976c74b030addb880d5420e9be39965cc24d8525d1644bed6c2d3c05f7e3a0ce394ebf7c352cd3845023b2e95f6623c035c391fb7e976aba5fb3144d5d5de6327c9c21cecd8fe2aec16d9ade86ae53527a0a2eeecabc46819c44d8649db18d314e6026a49bec584d5778f83d7c558ae359ab3db5dac022f01ac2be5a2aba2ab336c30a7cfe58c27e9d1cadf3934ea020f34ca7acdb72a18ad29467af3a618b2d5bd003c7da75e11a0f588d62ea79b671046f934bdeb1caf73dd9f26fc4e017ca39a586233d3acdb36fb7bb0ff54dac2d8e9fa35c1db65585574ffcb8471e55da3d71ff55064b8004d508899b430c517c25cd3a21df5b23ccf9ca500ed3e5966a8938d4684fca6c2503c000a552b55515aff2136577a3cf97fa5c6e9cf576606d028d8d195800f8d986d4792b53aeac720d8a77476af03c53e653660cfc871ab2d6fc447d8f9932c59c035e3c7a97095e3d24261d580c36e740fdcb55edd6e5f4d093537694aeb6ff00ba6617c9454e5cbc37860d277c01575f5cfa3ca5d8f6dcf7a87b0f0002139a611c4b078f7b132029e17162306e4a0a3f539f1c955f3a7b7e5cc33928b6b1ee18a11f467c69a9d35b52d742aa52204b8810b173fe96e09a54c8a1911004651a83f957398f465180aa5adac4fd3fcedfd91e6efbd9cb13a69070e5d902a4aafb19e1c37141cbd4c15553d61f8910984ba31a6d54edd00d75e7e8723e1d922e78fb1e0b7d6b8ac950be94d6692ab14f1153b1507f72761d2dbc689c31ceca698565898e7a73d1d34cb1b00a245fd1ecd07d35c95203252f6c13be4dcde058172f448d8c8133f78aafd70b78b4a9c1f4568b5da09db005c9a0baa1d456bb3394343b61d7799f7433b84265c924ead08c131c3cc06e0b6a0387ab7ba3bb3a0af0517b02364992d9992ca089a3f9967acc635d8559985575ad9fbc5bb04ef2130d0b67da3215baf8a1a485ad3b9df57f385e22e115acf809aaf8338207632f02af77b4704e2dc9898a3a45827e8c5142f48fed425371e3b9f98843a4d7c91dbfae5bec7701f23a79fc16f3481db15ba43f8d9f8190fdd2cce93091591bb0957a2a9794307d57dea45101d58b3450efd8895c42ed7dc06d8345030634b803a3e864aed90ec145cd1e93abbd6fc4a9f8245fc0c56241d588d9bc00bea115006fdfd6c1e906c10c6e54a145294dd01d29142500f9a48c5076ca5203e8bb73c88f15e6f8269c02f343152b79a2de075c0a8adb8e80a9fedcefffe14645cf7f1135d3ba12e79568141ca7ec110212b31eab665ee6a4e10f22c0ad9c7028e5073382d9305866abc1c43f6ed3dab3e269084b28fa4df923201ffca0fd8247d923c03cac6e49089908dee24656572fc98f3eef2069fed4aeacf3f6c06671e2b0918e9e64dd659c2849d2ecf6da2379c517083757b9edaf8b83a74164f57a63b68146680d82482ebec81d678ca04493789bc602b5b5a2a845a46bfebf3eb5ca771c545554e31d559a26fd06bf03ff6dd109a54362c84dcd480a9b10d0c5342c9338c75ea32f69a298d383916d9b016494c0ae10f81b89dc565baeec6bca993dab7bedbf478d101ef521f7db402b1098bf14ae89ce373ab9770b85796032d7e24f1fd616640041180f1472beb33c93065ff3cef322b43748a0f77b393c03ffcf4fe0a366c285a3642172332a4b5d638ba1a9a0f5772fcbb6174971da091f9e8c9839243bdf5d25bfd09cbf8420693fe8010e0ea0c8bf8a75d8f70448f5ce01c2d374b939ef81e4f10ae83fdd9ffd170b96aa38095ad83aeaf5b0af589a96867f2a14191b346321b7d1a14e9ff3197b27af5476b5a05bb529345bc0170274e3c69aebcad8a23d7a22f6637df578f9743848f36d9759e4c05fa90c0aa7003747a435aa1764f1ceb4b4df4a35151cf7b87c3a54847b9e20cefb4396b6508aae3c6a704556183b9fbfba49ae2a433d7da01461fc6bc63893c00d9cc58f7b2043215550c2c886fe7d00497accd8a41d0be037a6f9080a6634c5a369d4ad4c6ac3eb341b5063aed9e4ad3e09bd55cfea813d4daf6d09b79bd38f47f081f90d8c4f362eff7a28c6dc7f4667c91a8c86f572c26c93e443af176deddfbead7cbf7566af0f672233e26adba72feded03ac3516d02485e2201f88c636d6003db"}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002580)='/dev/vcsu\x00', 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000002700)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002600)={0x88, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x8001, 0xffffff4d, 0x7fff, 0x0, 0x2]}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, [], 0x1}}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x18000000}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) socketpair(0x10, 0x800, 0xfffffffb, &(0x7f0000002740)) 23:44:42 executing program 0: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000001880)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000002e00)=[{&(0x7f0000002a00)=""/249, 0xf9}, {0x0}], 0x2, 0x0) 23:44:42 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x99, 0x0, 0xfffa, 0x0, "98936076db007b0dce83f056f8afe1d1ec828b1d4dfee4eea0e056a8192ff970"}) 23:44:42 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000f40)='/dev/input/event#\x00', 0x0, 0x0) dup2(r0, r1) 23:44:42 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) readlinkat(r1, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_getneigh={0x28, 0x1e, 0x209, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', r4, 0x29, 0x7, 0xb7, 0x15, 0x56, @remote, @local, 0x40, 0x29a117a0120a4ba0, 0x8, 0x9}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=@deltaction={0xb0, 0x31, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe00000}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44000}, 0xdad0de08165550aa) keyctl$read(0xb, r0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000000280)=0x8001) 23:44:42 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x8002, 0x4) 23:44:42 executing program 4: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$read(0x3, r0, 0x0, 0x0) 23:44:42 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) readlinkat(r1, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_getneigh={0x28, 0x1e, 0x209, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', r4, 0x29, 0x7, 0xb7, 0x15, 0x56, @remote, @local, 0x40, 0x29a117a0120a4ba0, 0x8, 0x9}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=@deltaction={0xb0, 0x31, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe00000}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44000}, 0xdad0de08165550aa) keyctl$read(0xb, r0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000000280)=0x8001) 23:44:43 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 23:44:43 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000f40)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, 0x0) 23:44:43 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:43 executing program 0: socketpair(0xa, 0x2, 0x0, &(0x7f0000002740)) 23:44:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$read(0x5, r0, 0x0, 0x0) 23:44:43 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) readlinkat(r1, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_getneigh={0x28, 0x1e, 0x209, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', r4, 0x29, 0x7, 0xb7, 0x15, 0x56, @remote, @local, 0x40, 0x29a117a0120a4ba0, 0x8, 0x9}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=@deltaction={0xb0, 0x31, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe00000}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44000}, 0xdad0de08165550aa) keyctl$read(0xb, r0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000000280)=0x8001) 23:44:43 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) 23:44:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 23:44:43 executing program 5: socketpair(0x0, 0xd, 0x0, &(0x7f0000000380)) 23:44:43 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000440)=ANY=[]) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x0, 0xffffffff}) 23:44:43 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 23:44:43 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:43 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x10) [ 448.754142][T24099] loop4: detected capacity change from 0 to 264192 23:44:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 23:44:43 executing program 5: fanotify_mark(0xffffffffffffffff, 0x21, 0x40000018, 0xffffffffffffff9c, 0x0) 23:44:43 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={0x0}}, 0x0) [ 448.805325][T24099] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:44:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa2000, 0x2, &(0x7f0000000240)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000007000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0008000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}], 0x7, &(0x7f0000000000)) 23:44:43 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSBRKP(r0, 0x4b30, 0x0) 23:44:43 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 23:44:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSBRKP(r0, 0x40049409, 0x0) 23:44:43 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 23:44:43 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x34e, 0x0, 0x0) 23:44:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000000100)=""/189, 0xbd) [ 448.938742][T24121] loop5: detected capacity change from 0 to 1296 [ 448.972602][T24121] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 23:44:43 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x34e, 0x5400, 0x0) 23:44:43 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x9, &(0x7f0000000240)={0x0}, 0x10) 23:44:43 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) [ 449.005261][T24121] EXT4-fs error (device loop5): ext4_get_journal_inode:5224: comm syz-executor.5: inode #2048: comm syz-executor.5: iget: illegal inode # [ 449.021577][T24121] EXT4-fs (loop5): no journal found 23:44:43 executing program 4: openat$cgroup_root(0xffffff9c, &(0x7f0000000d40)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = openat$khugepaged_scan(0xffffff9c, &(0x7f0000000d80)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f0000000e00)='1000000\x00', 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80)='ethtool\x00', 0xffffffffffffffff) openat$vcsu(0xffffff9c, &(0x7f0000001240)='/dev/vcsu\x00', 0x0, 0x0) openat$nvram(0xffffff9c, &(0x7f0000001280)='/dev/nvram\x00', 0x400, 0x0) [ 449.100835][T24121] loop5: detected capacity change from 0 to 1296 [ 449.111935][T24121] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 23:44:43 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000005d00)=@framed, &(0x7f0000005d80)='GPL\x00', 0x0, 0xf7, &(0x7f0000005dc0)=""/247, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 449.176574][T24121] EXT4-fs error (device loop5): ext4_get_journal_inode:5224: comm syz-executor.5: inode #2048: comm syz-executor.5: iget: illegal inode # [ 449.243082][T24121] EXT4-fs (loop5): no journal found 23:44:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa2000, 0x2, &(0x7f0000000240)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000007000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0008000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}], 0x7, &(0x7f0000000000)) 23:44:44 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x0, 0x2000005a, 0x0, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) 23:44:44 executing program 4: openat$cgroup_root(0xffffff9c, &(0x7f0000000d40)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = openat$khugepaged_scan(0xffffff9c, &(0x7f0000000d80)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f0000000e00)='1000000\x00', 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80)='ethtool\x00', 0xffffffffffffffff) openat$vcsu(0xffffff9c, &(0x7f0000001240)='/dev/vcsu\x00', 0x0, 0x0) openat$nvram(0xffffff9c, &(0x7f0000001280)='/dev/nvram\x00', 0x400, 0x0) 23:44:44 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f0000005d00)=@framed={{}, [@call]}, &(0x7f0000005d80)='GPL\x00', 0x1, 0xf7, &(0x7f0000005dc0)=""/247, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 23:44:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000440)={0x0, 0x0, 0x0}) 23:44:44 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x4, 0x0) 23:44:44 executing program 3: r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)={@host}) 23:44:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000180)) 23:44:44 executing program 4: openat$cgroup_root(0xffffff9c, &(0x7f0000000d40)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = openat$khugepaged_scan(0xffffff9c, &(0x7f0000000d80)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f0000000e00)='1000000\x00', 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80)='ethtool\x00', 0xffffffffffffffff) openat$vcsu(0xffffff9c, &(0x7f0000001240)='/dev/vcsu\x00', 0x0, 0x0) openat$nvram(0xffffff9c, &(0x7f0000001280)='/dev/nvram\x00', 0x400, 0x0) 23:44:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) [ 449.389360][T24186] loop5: detected capacity change from 0 to 1296 [ 449.398545][T24186] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 449.418509][T24186] EXT4-fs error (device loop5): ext4_get_journal_inode:5224: comm syz-executor.5: inode #2048: comm syz-executor.5: iget: illegal inode # 23:44:44 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x24, 0x0) [ 449.434652][T24186] EXT4-fs (loop5): no journal found 23:44:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) 23:44:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa2000, 0x2, &(0x7f0000000240)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000007000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0008000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}], 0x7, &(0x7f0000000000)) 23:44:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSBRKP(r0, 0x5433, 0x0) 23:44:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) 23:44:44 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 23:44:44 executing program 4: openat$cgroup_root(0xffffff9c, &(0x7f0000000d40)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = openat$khugepaged_scan(0xffffff9c, &(0x7f0000000d80)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f0000000e00)='1000000\x00', 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80)='ethtool\x00', 0xffffffffffffffff) openat$vcsu(0xffffff9c, &(0x7f0000001240)='/dev/vcsu\x00', 0x0, 0x0) openat$nvram(0xffffff9c, &(0x7f0000001280)='/dev/nvram\x00', 0x400, 0x0) 23:44:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) 23:44:44 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) 23:44:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)) [ 449.569611][T24215] loop5: detected capacity change from 0 to 1296 [ 449.605814][T24215] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 23:44:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x40) 23:44:44 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x24, 0x0) 23:44:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) [ 449.665264][T24215] EXT4-fs error (device loop5): ext4_get_journal_inode:5224: comm syz-executor.5: inode #2048: comm syz-executor.5: iget: illegal inode # 23:44:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSBRKP(r0, 0x540e, 0x0) [ 449.753866][T24215] EXT4-fs (loop5): no journal found 23:44:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa2000, 0x2, &(0x7f0000000240)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000007000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0008000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}], 0x7, &(0x7f0000000000)) 23:44:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 23:44:44 executing program 3: syz_mount_image$romfs(&(0x7f00000000c0)='romfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}], 0x0, &(0x7f0000000300)) 23:44:44 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@mcast2}, 0x14) 23:44:44 executing program 0: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "1df264e6b47fb69b"}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000080)) 23:44:44 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x8}}, 0x24, 0x0) 23:44:44 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) 23:44:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={0x0}}, 0x8000) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff) sync() sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x839}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}]}}]}, 0xd4}}, 0x20044000) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000240)=@target_default='target default\x00', 0xf) [ 449.881306][T24255] loop5: detected capacity change from 0 to 1296 [ 449.887826][T24253] loop3: detected capacity change from 0 to 1 [ 449.900361][T24253] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 449.911957][T24255] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 23:44:44 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f00000002c0)) [ 449.931096][T24255] EXT4-fs error (device loop5): ext4_get_journal_inode:5224: comm syz-executor.5: inode #2048: comm syz-executor.5: iget: illegal inode # [ 449.961704][T24255] EXT4-fs (loop5): no journal found 23:44:44 executing program 0: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:44:44 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', 0x0, &(0x7f0000000640)={{}, {0x8}}, 0x24, 0x0) 23:44:44 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x82282, 0x0) write$FUSE_GETXATTR(r0, 0x0, 0x0) [ 449.978203][T24253] loop3: detected capacity change from 0 to 1 [ 449.985919][T24253] MTD: Attempt to mount non-MTD device "/dev/loop3" 23:44:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSBRKP(r0, 0xc0189436, 0x0) 23:44:44 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x13, &(0x7f0000000240)={0x0}, 0x10) 23:44:44 executing program 3: syz_mount_image$romfs(&(0x7f00000000c0)='romfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}], 0x0, &(0x7f0000000300)) 23:44:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSBRKP(r0, 0x5428, 0x0) 23:44:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x1f, 0x1e, 0x1a7, 0x0}) 23:44:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSBRKP(r0, 0x4b6a, 0x0) 23:44:44 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x1d, &(0x7f0000000240)={0x0}, 0x10) 23:44:44 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', 0x0, &(0x7f0000000640)={{}, {0x8}}, 0x24, 0x0) 23:44:44 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, "b6b1bd48c78f83d187225e55cae5e6db598aea"}) 23:44:44 executing program 4: openat$ptmx(0xffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x4081, 0x0) 23:44:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000080)={0x0, "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"}) 23:44:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x8) [ 450.189246][T24296] loop3: detected capacity change from 0 to 1 [ 450.196860][T24296] MTD: Attempt to mount non-MTD device "/dev/loop3" 23:44:44 executing program 3: syz_mount_image$romfs(&(0x7f00000000c0)='romfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}], 0x0, &(0x7f0000000300)) 23:44:44 executing program 0: syz_mount_image$romfs(&(0x7f00000000c0)='romfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)) 23:44:45 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x8}, &(0x7f0000000100)={0x0, r0/1000+10000}) 23:44:45 executing program 5: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080), &(0x7f0000000100)={0x0, r0/1000+10000}) r1 = socket$inet(0x2, 0x0, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000340)) 23:44:45 executing program 4: clock_gettime(0x0, &(0x7f0000000440)) pselect6(0x40, &(0x7f0000000380), &(0x7f00000003c0)={0x6}, 0x0, 0x0, 0x0) 23:44:45 executing program 4: pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x7}, 0x0, 0x0, 0x0) 23:44:45 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', 0x0, &(0x7f0000000640)={{}, {0x8}}, 0x24, 0x0) [ 450.315837][T24316] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 450.322608][T24318] loop3: detected capacity change from 0 to 1 [ 450.335055][T24316] VFS: Can't find a romfs filesystem on dev loop0. [ 450.335055][T24316] [ 450.345622][T24318] MTD: Attempt to mount non-MTD device "/dev/loop3" 23:44:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) 23:44:45 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 23:44:45 executing program 3: syz_mount_image$romfs(&(0x7f00000000c0)='romfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}], 0x0, &(0x7f0000000300)) 23:44:45 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x4040, 0x0) 23:44:45 executing program 1: io_setup(0x0, &(0x7f0000000100)=0x0) io_getevents(r0, 0x1, 0x1, &(0x7f0000000140)=[{}], &(0x7f0000000200)={0x0, 0x3938700}) 23:44:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r0, &(0x7f0000005a80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 450.442986][T24316] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 450.466801][T24316] VFS: Can't find a romfs filesystem on dev loop0. [ 450.466801][T24316] 23:44:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000040)=0xc) 23:44:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0}}], 0x1, 0x0) 23:44:45 executing program 5: io_setup(0x0, &(0x7f0000000040)=0x0) io_getevents(r0, 0x0, 0x1, &(0x7f0000000080)=[{}], &(0x7f00000001c0)={0x0, 0x3938700}) [ 450.527390][T24350] loop3: detected capacity change from 0 to 1 [ 450.534592][T24350] MTD: Attempt to mount non-MTD device "/dev/loop3" 23:44:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x3, 0x0, 0x0) 23:44:45 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setsockopt$inet_mreqsrc(r0, 0x0, 0x0, 0x0, 0x0) 23:44:45 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 23:44:45 executing program 1: timer_create(0x0, 0x0, &(0x7f00000033c0)) 23:44:45 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/zero\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) 23:44:45 executing program 3: pselect6(0x40, &(0x7f0000000080), &(0x7f0000000180)={0x5}, &(0x7f00000001c0)={0x3}, 0x0, &(0x7f0000000280)={0x0}) 23:44:45 executing program 0: r0 = eventfd2(0x1, 0x801) read$eventfd(r0, &(0x7f0000000000), 0x8) 23:44:45 executing program 5: r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@empty, @multicast2}, 0xc) 23:44:45 executing program 1: syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001c40)={'wlan0\x00'}) 23:44:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f00000001c0)) 23:44:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000700)) 23:44:45 executing program 5: getresuid(&(0x7f0000002780), &(0x7f00000027c0), &(0x7f0000002800)) 23:44:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000001c00)={@rand_addr, @multicast1}, 0x10) 23:44:45 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 23:44:45 executing program 4: syz_open_procfs$userns(0x0, &(0x7f0000001900)='ns/user\x00') 23:44:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000080)='i', 0x1, 0x0, 0x0, 0x0) 23:44:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x4004, 0x0, 0xffffff99) 23:44:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:44:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000100)="04", 0x1, 0x20004001, 0x0, 0x57) 23:44:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:44:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x4880, 0x0, 0x0) 23:44:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) recvfrom$unix(r1, &(0x7f00000000c0)=""/91, 0x5b, 0x40, 0x0, 0x0) 23:44:45 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0xa14b076ea90cc35d, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe59) 23:44:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd/4\x00') 23:44:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) getpeername$unix(r2, 0x0, &(0x7f0000000000)) 23:44:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_ENTRY(r0, 0x0, 0x0) 23:44:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) write$FUSE_OPEN(r2, 0x0, 0x0) 23:44:45 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000101, &(0x7f0000008d00)={0x0, 0x989680}) 23:44:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000180)="f8", 0x1, 0x30008090, 0x0, 0x0) 23:44:45 executing program 5: r0 = epoll_create(0xff) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000440)) 23:44:45 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x0) 23:44:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x57) 23:44:45 executing program 3: r0 = epoll_create(0xff) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 23:44:45 executing program 4: r0 = epoll_create(0x100) fstat(r0, &(0x7f00000000c0)) 23:44:45 executing program 1: mbind(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2, &(0x7f0000000740)=0x1, 0x40000000000004, 0x2) 23:44:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x4000, 0x0, 0x0) 23:44:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000080), 0x0, 0x4000, 0x0, 0x0) 23:44:45 executing program 2: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x5) 23:44:45 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000080), 0x3, 0x0) 23:44:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000080), 0x0, 0x4, 0x0, 0x0) 23:44:46 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 23:44:46 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 23:44:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x8000) 23:44:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001280)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0xfe77}, 0x0) 23:44:46 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x4eb23aa32b8cadcb, 0x0) 23:44:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 23:44:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x10, &(0x7f0000001240)=@l2={0x1f, 0x0, @fixed}, 0x80) 23:44:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f00000000c0)='@', 0x1, 0x4010, 0x0, 0x0) 23:44:46 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x200c0, 0x0) read$char_usb(r0, 0x0, 0xc) 23:44:46 executing program 5: r0 = epoll_create(0xff) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 23:44:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x4c811, 0x0, 0x0) 23:44:46 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_type(r0, 0x0, 0xffffff88) 23:44:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000240), 0x0, 0x10, 0x0, 0x0) 23:44:46 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) 23:44:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000240)='l', 0x1, 0x10, &(0x7f0000001240)=@l2={0x1f, 0x0, @fixed}, 0x80) 23:44:46 executing program 5: r0 = eventfd(0x3) read$eventfd(r0, &(0x7f0000000000), 0x8) 23:44:46 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) r1 = dup2(r0, r0) write$FUSE_NOTIFY_STORE(r1, 0x0, 0x0) 23:44:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) sendto(r1, &(0x7f00000000c0)='@', 0x1, 0x0, 0x0, 0x0) 23:44:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) recvfrom$unix(r1, &(0x7f00000000c0)=""/91, 0x5b, 0x0, 0x0, 0x0) 23:44:46 executing program 4: r0 = epoll_create(0xff) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 23:44:46 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7, 0x12, r0, 0x0) 23:44:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000040)='8', 0x1, 0x4004, 0x0, 0x0) 23:44:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000002580)=@ieee802154={0x24, @long}, 0x80) 23:44:46 executing program 3: r0 = epoll_create(0xff) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000440)) 23:44:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 23:44:46 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) write$cgroup_type(r0, 0x0, 0xffffffffffffff29) 23:44:46 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 23:44:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getpeername(r0, 0x0, &(0x7f0000000c00)) 23:44:46 executing program 0: r0 = epoll_create(0xff) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 23:44:46 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000140)={0x3, @bcast}) 23:44:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000080)="fb", 0x1, 0x4000, 0x0, 0x0) 23:44:46 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x127c40, 0xc1) 23:44:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000100)="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", 0xfffffd8c, 0x20044081, 0x0, 0x0) 23:44:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000240), 0x0, 0x10, &(0x7f0000001240)=@l2={0x1f, 0x0, @fixed}, 0x80) 23:44:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x4000) 23:44:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000240)='l', 0x1, 0x0, 0x0, 0x0) 23:44:46 executing program 1: syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 23:44:46 executing program 3: syz_open_dev$evdev(&(0x7f00000013c0)='/dev/input/event#\x00', 0x0, 0x0) [ 451.770913][ T36] audit: type=1800 audit(1615938286.490:55): pid=24551 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=13888 res=0 errno=0 23:44:46 executing program 2: syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x5, 0x0) syz_open_dev$evdev(&(0x7f0000000580)='/dev/input/event#\x00', 0x8, 0x0) 23:44:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x1, 0x0, 0xfce7) 23:44:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) write$FUSE_NOTIFY_POLL(r2, 0x0, 0x0) [ 451.855126][ T36] audit: type=1800 audit(1615938286.490:56): pid=24551 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=13888 res=0 errno=0 23:44:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) 23:44:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0xec4, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0xead, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x4}, @generic="c009a6d441e9ca3b18eb10acfca5bdc41625180caed3e6111278a6da3326f710d11d5dd44e00120996083cd93d2280", @generic="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"]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x90}, 0x24000000) 23:44:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10021) 23:44:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x16, 0x0, 0x15, 0x9, 0x20}, 0x40) 23:44:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003280)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) 23:44:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) 23:44:46 executing program 5: sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20008040) pipe(&(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00', 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40)='nl80211\x00', 0xffffffffffffffff) [ 452.117268][ T9710] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 452.527418][ T9710] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 452.738040][ T9710] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 452.747276][ T9710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.755309][ T9710] usb 2-1: Product: syz [ 452.759603][ T9710] usb 2-1: Manufacturer: syz [ 452.764375][ T9710] usb 2-1: SerialNumber: syz [ 452.807751][ T9710] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 453.008541][ T8021] usb 2-1: USB disconnect, device number 82 [ 453.777211][ T9711] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 454.137226][ T9711] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 454.307424][ T9711] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 454.316574][ T9711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.325252][ T9711] usb 2-1: Product: syz [ 454.329661][ T9711] usb 2-1: Manufacturer: syz [ 454.334276][ T9711] usb 2-1: SerialNumber: syz [ 454.377672][ T9711] cdc_ether: probe of 2-1:1.0 failed with error -22 23:44:49 executing program 0: r0 = epoll_create1(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x10000001}) 23:44:49 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) 23:44:49 executing program 4: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00', 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x104000, 0x0, 0x13, r0, 0x0) 23:44:49 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="02000000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fcff070000282c8b000000340002800800070008000000060007804e2000060000000005000000f25700000005000d004000000006000f00d9000000080004000200000085324d2aeb9ffac39646666c711948"], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) connect$vsock_stream(r4, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) listen(0xffffffffffffffff, 0x20) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x1) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r5, &(0x7f0000000000)=""/187, 0xbb, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f", 0x8}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x1, 0x10, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 23:44:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001140)={0x30, 0xd, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x30}}, 0x0) 23:44:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000f80)=[{0x0}, {&(0x7f0000000c80)="fd", 0x1}], 0x2}}], 0x1, 0x0) [ 454.597009][ T9544] usb 2-1: USB disconnect, device number 83 23:44:49 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0xd0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0x9}}}, {{@ipv6={@ipv4={[], [], @local}, @loopback, [], [], 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x180, 0x1c8, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x0, 0x2}}, @common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @remote, @mcast2}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) 23:44:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000100)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c, 0x0}, 0x4000000) 23:44:49 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f00000003c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x104000, 0x0, 0x13, r0, 0x0) 23:44:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x16, 0x0, 0x1a, 0x9}, 0x40) 23:44:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x34, r1, 0x5, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}}, 0x0) 23:44:49 executing program 2: socketpair(0x11, 0x3, 0x100, &(0x7f0000000180)) [ 454.687645][T24644] x_tables: duplicate underflow at hook 2 23:44:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 23:44:49 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003640)={&(0x7f00000033c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x0, 0x0, 0x2}}, &(0x7f0000003540)=""/246, 0x1a, 0xf6, 0x1}, 0x20) [ 454.740343][T24646] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 23:44:49 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15, 0x10, 0x3, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) 23:44:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003840)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000003880)=@abs={0x1}, 0x6e) 23:44:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x34, r1, 0x5, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}}, 0x0) 23:44:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x16, 0xb000000, 0x0, 0x9}, 0x40) 23:44:50 executing program 2: r0 = epoll_create1(0x80000) ioctl$FIONCLEX(r0, 0x5450) 23:44:50 executing program 3: r0 = epoll_create(0x200) splice(r0, &(0x7f0000001100), 0xffffffffffffffff, &(0x7f0000001140), 0x0, 0x2) 23:44:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0xd, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}]}, 0x1c}}, 0x0) 23:44:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f000000b240)={0x0, 0x0, &(0x7f000000b200)={&(0x7f0000002ac0)=@delchain={0xec4, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x678, 0x2, [@TCA_CGROUP_EMATCHES={0x84, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x80, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x400, 0x3, 0xff}, {0xffffff01}}}, @TCF_EM_IPT={0x50, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_DATA={0x6, 0x5, "db2f"}, @TCA_EM_IPT_MATCH_DATA={0x39, 0x5, "d58f766bb434bc2437c711161b9570c1089f9492b3c52f910c5e5c72c917da2c8dd8cdf2df9d146d5306b88c87c74b834bb7ae4a96"}]}}]}]}, @TCA_CGROUP_POLICE={0x41c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x2, 0x3, 0x7f, 0x2, 0xff, 0x0, 0x7fc, 0xe86, 0x0, 0x45, 0x7ff, 0xe6, 0x8000, 0xf7a7, 0x20, 0xff, 0x35, 0x2, 0x800, 0x10000, 0x46d6, 0x3, 0x3, 0x9, 0xfffff000, 0x2, 0x48da3115, 0x8, 0x0, 0x9, 0x2631, 0x8000, 0x8, 0x5, 0x6, 0x0, 0x20, 0xba, 0x1, 0x8c, 0xfffffff7, 0x21e, 0x4, 0x4ff, 0x4, 0x5, 0x0, 0x0, 0x4, 0x3, 0x100, 0xbcea, 0x7, 0x2, 0x6, 0x846b, 0x100, 0xfffffff9, 0xbc3, 0x6, 0x1, 0x8, 0x80000001, 0x8874, 0xf440, 0x726d, 0x101, 0x8001, 0x0, 0x1, 0x2, 0x4, 0x0, 0x4, 0x8, 0x1, 0x90, 0xd3c7, 0x1, 0x8001, 0x8, 0xbac, 0x6, 0x405b2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd, 0x0, 0xa9, 0x8, 0x4, 0x0, 0xa87d, 0x400, 0x7f, 0x2, 0x8, 0x8, 0x8000, 0x2, 0x0, 0xedd, 0x4, 0x9, 0xff, 0x2, 0x8, 0xf4, 0x3, 0x0, 0x4cfa, 0x10000, 0x2, 0x0, 0xac53, 0x9, 0xffffffff, 0xfffffff9, 0x0, 0x3, 0x401, 0x9, 0x7, 0x80000000, 0x7fff, 0x0, 0x3, 0x6, 0xa49, 0x0, 0x0, 0xffffffff, 0x8c6, 0x9, 0x4, 0x100, 0xd6c, 0x9, 0x1, 0x8001, 0x10000, 0xc1, 0x8000, 0x7, 0x3, 0x6, 0xfff, 0x80000000, 0x1ff, 0x89, 0x5, 0x8001, 0x1536, 0x1, 0x5, 0x8, 0x7, 0x4, 0x7, 0xbc, 0x8, 0x5, 0x1, 0x8, 0x2, 0x101, 0xb0b, 0x8, 0xdf8, 0x10001, 0x9, 0x1000, 0x10000, 0x0, 0x7, 0x7f, 0x3, 0x7, 0x3, 0x9, 0x0, 0xf9, 0x2, 0x6, 0x5, 0x200, 0x400, 0x1f, 0xe0a5, 0x7, 0x40, 0x1, 0x8000, 0x4, 0x4, 0x0, 0x4, 0x6, 0x7ff, 0x4, 0x9, 0x7, 0x8, 0x2119, 0x100, 0x8437, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x5, 0x6, 0x81, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7fff}]}, @TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_EMATCHES={0x1b8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x84, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x80, 0x2, 0x0, 0x0, {{0xfff, 0x0, 0x4}, "5a308ee5f00ba70ddc17134cf7945aee45002b41cedcc08cc845a821b8c7463e55f6566d8f302e3f533ff7755b090a9691e0f6327bab23c359193c8802102079d2a07ad72e242a82885ed0872b7757866ecb7674969f86e90fc272f2ca58391824c5d6e4bbd99bdc655278b1d932a90a5fda12"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x128, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x3008, 0x3, 0x8000}, {0xfffffff8, 0x4, 0x0, 0x5}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x80, 0x8, 0x8000}, {0x2, 0x0, 0x1}}}, @TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xc}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0x2}, {0x7, 0x5, 0x3, 0x6}}}, @TCF_EM_META={0xb4, 0x2, 0x0, 0x0, {{0x101}, [@TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="0f60", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="df52"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1000, 0xf1}, {0x1, 0x5, 0x2}}}, @TCA_EM_META_LVALUE={0x4, 0x2, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="03", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="d8358424a9", @TCF_META_TYPE_VAR="d60db0c4e85d255dcd"]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="5b81c5", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR='.A']}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x1f, 0x1}, {0x81}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2, 0x2}, {0x1, 0xe1, 0x2}}}, @TCA_EM_META_RVALUE={0x27, 0x3, [@TCF_META_TYPE_VAR="8f3bf5624f84af91e313", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="178a94aaebae9f57", @TCF_META_TYPE_VAR="efe36b582b"]}]}}]}]}]}}, @filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x810, 0x2, [@TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8d, 0x1000, 0xb7b1, 0x81, 0x2, 0x1000, 0x101, 0x9, 0xfffffffc, 0x1, 0x4, 0x2, 0x2, 0x10c5, 0x6, 0x2, 0x1, 0x0, 0x3f, 0x0, 0x6, 0xffff, 0x4, 0xb92e, 0xc0, 0x5, 0x0, 0x1, 0x3a8d43b0, 0x1, 0x7ff, 0x1, 0x6, 0x64be5a14]}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0xec4}, 0x1, 0x0, 0x0, 0x800}, 0x0) 23:44:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000f80)=[{0x0}, {0x0}, {&(0x7f0000000cc0)="e8", 0x1}], 0x3}}], 0x1, 0x0) 23:44:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x34, r1, 0x5, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}}, 0x0) 23:44:50 executing program 4: unshare(0x6c060000) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x1, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0xe, 0xfffffefffbfbbfbe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) shutdown(r0, 0x1) 23:44:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x30, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x30}}, 0x0) 23:44:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x24}}, 0x0) 23:44:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001580)={0x18, 0x0, 0x2, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) 23:44:50 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) 23:44:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x34, r1, 0x5, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}}, 0x0) 23:44:50 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003640)={&(0x7f00000033c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x0, 0x0, 0x0, 0x7, 0x74}]}}, &(0x7f0000003540)=""/246, 0x26, 0xf6, 0x1}, 0x20) 23:44:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x6, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 23:44:50 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@rights={{0x10}}], 0x10}, 0x0) 23:44:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0xc, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 23:44:50 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={0x0, 0x0, 0x8}, 0x10) [ 455.700630][T24716] IPVS: ftp: loaded support on port[0] = 21 23:44:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001a40)=[{{&(0x7f0000000000)={0x2, 0x4e24}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000040)="311fa2fcaf46", 0x6}, {0x0}, {&(0x7f00000001c0)="af", 0x1}], 0x3}}], 0x1, 0x8080) 23:44:50 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "cc489a", 0x0, 0x0, 0x0, @remote, @local={0xfe, 0x80, [0x3]}}}}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket$inet6(0xa, 0x80003, 0xff) getsockopt$inet6_int(r6, 0x29, 0x7, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) sendmmsg(r2, &(0x7f0000006a80)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)="1fc3ce60d6a4f308ac37679f1d9abc3f70888d9a08a0369868cf078e24de14dcbc369536872bdca0f367be7e1ad1119eeb8d473766e5a91ffecbb89a6ad8c4b3f2397beeb7799680b91c604a5d51cc3cbb428031005f4ea97eecd2b54b029b244a635deea8a3d7f474cd9ada402f6f5ff85e3a58ebe3a3eb1067baa9672c0ce1253c9ac2127ba7f795cfb3bb95539baa49658cda9f8608cdce9939fc1b879011066c1e670058aca5bec3f13633a35ef814478ec1709bb2b2c64441102f0d002dde8aec4c13c61ce2968001c33dc849fd20d364737d040900241c53862f16921cfb3ad26d99d01c9fc9df9089205bacb2e9c30c5bae1f92253b6c1d85e0", 0xfd}, {&(0x7f0000000080)="f4081dd87a1232a39a4be2090fcc0b73cb034bc873df02d19ffe10db5610fac98deed147770d3f63017277c310594955b03bd75de127cd8a9461e65f130c56d863823aa17d8e0e1660f8fbbea858181770b0d696dfc829a803b36f4d9ecbf6caa8ad922ab3ebf17ad636df9c46c2bb36d76fdfe8d27bb599affc620675bd7bda", 0x80}, {&(0x7f00000002c0)="a31ef34ab67a64c3e4f8b76facdbfa123df8ae0079706df2c235d04f4c1aff86d63f0d8c9e3e515f3c28708e44e772dde8b4d1f4ef8a44e2cf24b028053d3274000b6826fddf98229302a983a032de42709dd6c6a3e6732fb7b8e750bdf7cb3f89433aa651199c21420cfd628bf8cabb42c14afaaceea2849e2b33fb25009e823b9035e342ec33e289ae93b28ac3e675db5e54ee05ea79", 0x97}], 0x3, &(0x7f0000000680)=[{0x1010, 0x11, 0x5, "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"}, {0x48, 0x111, 0x21, "65ed5c3df50eab096dd439346b2c2cd70a5b6907a75e03495ac30017f8791aca85a5f15adb53d148d25b4c4f7f582fa26a"}, {0x40, 0x100, 0xfffffffd, "32b9c332325a599d01df5525586b03a6707a798a6a0f7683fa5bf5161f420e28febec07b69f30b0020cb66"}], 0x1098}}, {{&(0x7f0000000380)=@l2={0x1f, 0x7f, @none, 0x7, 0x1}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000400)="c300f7a232014d49b0255442cdbe16e3bf02e623f9d956af61960d07e71fed496ad0ea46192e15253478a4d90d54f7d1f3f78b87b1d04d9785f98516ad368ebad6c7ae681e0f6ecb1471cd9d90a00d76dedf8eecf0f27d91198c55987d", 0x5d}, {&(0x7f0000000480)="f439b2fac0282d3e7de41d1bad768a15335978f4b45e", 0x16}, {&(0x7f00000004c0)="3e5e27c08a45669b7b233fd3f770e0a83152c067b3e8f29cb4c6ddef9564bf5034acd2c7a8d83b650622d60a77434beebe0e0d44b71882079cbc53439da30f69e4b0b88b005f9c1f294b347c56fa78093c6ae720fd4b7fec166d62419c88", 0x5e}, {&(0x7f0000000540)="617b815c0913126c6d2c2522dbfb7bdce0bc5c57f47a94f80b7a6eacde6282bad35a421e7437fa86bf4249495ba49eff8f1d682190074659cf8ad78641bb89fda81c853c9b9f88a88ebf781711bd3ef4cd63667ed308dd1b643d867006172e9bad3f70f03971be9a16ecdc539774610018c2ea9dac589a048c32404488dba5ab7b59efe494fceff159d43cba88a61666058d99069458fdb495", 0x99}, {&(0x7f0000001740)="b7c0f1aec390375fabbba9a5813e2b4ba0f0b65ffd2a15ca6d56a04c7bcdea419096c3b1899fc6111a2014dc007ed9c7237a22326e3a908968e91e94943bbe8299533e6eeba68ea9bf8b40e1e5f913a13491a4b6d85bf37606af376cc6102b60e9d3b13618d8485e707de5da73ab574f4891623bd296e6ad89e01e6dd674d4842624553fdcf7b4d571be0039e96555c27d2734dd0723da9b4e17a2a721487959f60605d6d7bb4f21e4c239a1b36d8bb6dc6614f5004e8d00b62609971e12bad30d27dd8002f662253f4f71d026655d52d70c6b754939a21e034d79342cbc6a273e093461d9ca55", 0xe7}, {&(0x7f0000001840)="5992a6bf338e8d3901faed481706c854fed61453ae9369ea3d246decad874fff28e7faafd8b80ceb399687d1e42e309fb3342c320e79e325ea3c75aa61a485441d4fb499dc580ca507914f193fd387f900a3c9f17157583d0677cbeb67fca05c22d18f5464ebc117375c89991d19be", 0x6f}], 0x6, &(0x7f0000001940)=[{0x48, 0x10b, 0x1000, "dda12b5bab99089b40910503f67f8b31500d31abb86241bb0e98c60e0d993fbee9eee74043e0eb17cf14e3644c20afcd57795abc8c2c03f9"}, {0x50, 0x119, 0xfffffff8, "eddc9d9e73d2004370bdf8b89ba1d1d9a703f40a14ab43ff757082aa9614c89376c3443596cf8804bd3c5e4d569fd3477c4b95113bb559c73fd08b571756fed3"}, {0x100, 0xff, 0x60, "e59f41c8291d7e45744a1736a9177385b3a551fc8d958c6bbf50a8df0b88d46b808f2d1b8c258120dfd03b87e6d5f8c21e9fee3aca210986a5ee452602ff60470dfd2048aa81f5dd6534b25082ea3ffed4d076eb597705acf9fd6fa40b0565f2fc549d11b87b313c1bacb3c5faecc0f8c8d4689866f701e5f7dcd4f2cd2df363538e7eeea62895db993104438ea2bd91a65165e932299229653631cb34489e23a7a807837c7c0263856a0d82cf0adbca6f59985a3fb5a0cd388a769ee44189092aea6fd907fd07fe884783365b480656281986ac4c525a4352a50e7fd20c572f3477323569eb98c85bba25"}], 0x198}}, {{&(0x7f0000001b00)=@can={0x1d, r5}, 0x80, &(0x7f0000000600)=[{&(0x7f0000001b80)="660e912f78cd9c12679ae90d8c8aad30e59e174344e6cf193293f9259019a1535cd8796013af49145d647f5f07033d8704a1137d692542ec88c659b3a5f9a7ac44ce557eee35a9c993d1", 0x4a}], 0x1, &(0x7f0000001c00)=[{0x98, 0x108, 0xff, "f557555cacb41fc282ca1e55b2e6e1ac0c21853cb921cc666ef221a5890e2fd959cf1f9eb7bee05abb73e7cb8823b5c8f9e5018d7af59de9d29aa7a4d254dd09ecb410e47e1f70aab104c942de67f61333fdaa126824d83a5c99c730ce13090ca5a98a3a0eee14931d74305b83b145d5a72d196712790d87b97b59cfd7a0a71277910fbe1ea6"}, {0x68, 0x110, 0x7, "817c82d7f994f8fcf94471450cb94f5bd6ee3dce3603f9074e0e50198405a17bd928f2e8991fc5f1e16c8bd13c2f54a678ae020bff6e5869c1ef6eaf539c42265feb8241d88882fd958334961f7b4cdd2c5450"}, {0xd8, 0x108, 0x90, "0650a003bfaacb9f2c496b9e733db6a4ee149a1cf7b8c958dce887bd77b532203bcb53e8b8a06f842fa9381664be9ec14516f85a22afeb49af56d483abb2f5d8f60915b4f30dc030a800f8df5aecfe20206699260d32a5b9f155c0a14cb6a507c043d3f7bf509ae7fa8b550d8c3d0e3630ef28d911d9ce0003dae8f0ce7ec7360a4cd1bc721b75981231b2c28c5316578e5dee7c278064a6a6d19ca141a875453ec9a1d7f435dc13e78fcc087994051919d8b73ca634b23f228fa733a3ce3fa68a8b575d34"}, {0x100, 0x104, 0x6, "a1edeefa52e684013f14ab1265cfdecfdc63252e89c192f456625dd34f34febf3e1450e9e3ee7da2f6031d2fe0c3323d8b045fa5d5afa466364ae09f701c675861d293da4d33a448e2e370303ab7a5d1b0c97f2d3c6f539142b9f097d0d1d519b18042cf916fbd42820199cf7a03ed85f874eb0f9f06667e40c89e8c7e4c3e83d1ceac5b81d59e8ed54df8afdb97e1e255767c124e45cfb56fd74707a782f9c3c78dfcfcf4c425be8d089f14643c6597dd55cea7e6ba6c9441e7cf620ca69677ad3898c7c6595bed103fb704069f963fca6772dc0decd232686fe9af049855db72ef5031c6af2f9275da"}, {0x108, 0x1e8, 0x1, "9ed16bbb777ab4a28a6df949f87cb0ab0da1f323a5b9cfbaa0243bad050cfa07397cae8a3f703e9b755c9a87803bc1ec497edbea76e7674829e92f1e092bc9d395a8cfb7f374876465a41297408153bb2dfa122586b46eb5ad608f5e1d80b2d57f9c95d91481b168433412f7340533c21b57136d53c6b797b84bc6e019d949fe504ef7ab82e6129da88c3cc30489216faf1a2ba03dbb1fb89623194d85d16a11990a060e2892585e047f5db51afe93e1e5b49533aaee3641b57823db26ddf44e28c996a5b64498bc520dbe9b6f6db64e4cbad41a8b961037965ef39eb65f300098e940928b24be308afcba3e5c9cb5c348f0"}, {0x1010, 0x10d, 0x7fff, "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"}, {0x18, 0x117, 0x8a64, "026b27"}, {0x98, 0x11, 0x70, "e2a416413c9d5be3fcd51a00788ae84c4468dec4daa754b12432d830b7c4fcd75308a5d4da3b889354f291078fc05ae4dc1779eb5b726f82f27736b7959cb971f877d5cba2f3488aa8b6b3a31bb33e7a358f9203c9b5c4254d5cf17d598a1354a4fe12b8bfa08423f2949618ac97c4cd1e73446b7a1d537a614dce516903b48f4e82"}], 0x14a0}}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f00000030c0)="8b0308166cfa77178e5911c34572e97043c31c83b97d58aa511f249c0c76e610234ede7c2d50f528377a669f30c9448cd15d29a4efb01b683851fd3d16e05406c3b3679f8bea9c514b1a6d23b8780df2a390287911fcf1fac0ab068785d747ab4ce1ff5764164cf9bbc634c43bf3a728d795f5151d9c3e5dbf8e8a47e5888b82f6", 0x81}], 0x1, &(0x7f00000031c0)=[{0x78, 0x10a, 0xfa9, "17b88fe5f0c4b7a90c51a397968f1f9b49f133c00cb710d3a7756c70177f8e3477902b11f4e434fdea91f29624b86fdd07f0e79892ff13ee61bf66af0f87e500ca4f06b121cdcfc42e5711b8bb24ef425e366cede869b69424cd3a1ca329d9bb56e7"}, {0xa0, 0x101, 0x2, "cae0388158e0c2554dc03c7e2ad3ed5c40c3eca34fa1ea2adfd04f56cb128c93bdf30898a41b6b9e086204178455ead7a6b758a2a52ef8fec56d7ddf2df05b429d75f83e55801a9575588a895276836042ca4b69e8d97d60a74026b5eb5d1d8b390e854460fe8a9c0b1b5edef8e4a89ace8d0307787fe353fe2ea1521af4cdac0790ab02756d2821a21fe06e"}, {0x50, 0x1, 0x0, "8707ea2eba30493264a8a76a4e6e2d7ac989062616d8adb84adb364fd23712a66127e719cf85bec4b2202a9d11793f048e2fe2d7e7376912bf13"}, {0x28, 0x29, 0x1, "e1b704a2fc040bf384bb1acbc791996d1137a2f2"}], 0x190}}, {{&(0x7f0000003380)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x2, 0x3, 0x4, 0x1}}, 0x80, &(0x7f0000003540)=[{&(0x7f0000003400)="a210de22e8b6d15f79230cff4b17e7cfd7806b2da0450a57f14dc6027b42429fc9d9", 0x22}, {&(0x7f0000003440)="847537904f99c49d935dce4c1406de7d2849c6d1a2d32dc22e20162a005f06950b0f8723c567461a9ea9a7a91e3836a65a4e1a63001fb4470f0e8f8b9f239c94113c7098e3a759596616978bd147a7ac68b73a1849c34135bb01598a54efba8ce055843ac7d4ebee9296a79b3338a9c46880f7316cea49ad4f79b0338a3cabc7b7eb70b487c591e04421ab0cc631a66c445b9993db8d9dfe87caa08111e6967e4ecdeec6b940a836bb0555476df97daf01ca6e25303a63d552e8dd8da2a3b2", 0xbf}, {&(0x7f0000003500)="01240f66e08b6d145fb4a263db5692d0d735d7a70d238e125cba9b4d9b55ca3bdda80a7dea12", 0x26}], 0x3, &(0x7f0000003580)=[{0x78, 0x10c, 0x10000000, "61aacbbd58ac81f289432a30739d172b988fb2ca1fb8d93f4e99e709ae38519097f48a30b182dfaf695a5a15975f85b9b94a952081ea31bba17b6bd35369626eef32bb7550fad2c9b190b2ff4f37eb58ddaaf694be2c028af825531ae1e48f3c2995e4d26b8d4344"}], 0x78}}, {{&(0x7f0000003600)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000005840)=[{&(0x7f0000003680)="327973d2acc5421007b1c78caa62c8e66bb50b9aeaa7d35831368683d9389e3339f8493c5bcd66698f2cb45126379627b7924fc273292fb7adede5d28bd255de31e3ee0a86f0f9", 0x47}, {&(0x7f0000003700)}, {&(0x7f0000003740)="5ee81895ff8926c56bfc5036e3f07292a07fc2bcd7057288a9807097fa83d27df238ed", 0x23}, {&(0x7f0000003780)="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", 0x1000}, {&(0x7f0000004780)="491bcbc8a7a95dc3e2bf54851daf9c01e671513e49e978beeb42b7d702709b388cdd3daa93187c67a828149924867666116ea4f00efadace065a5ab34ca289ce0956f9735b15f250f91f97c70126a3e6636b1531ebdba7be5a819b3d05d23f48a10c270b813b43092f29e89d7ad2ecdf7d4d6714288aba7930122dc0ca8efe58e5bdb5b7ce43b4199af0e287e515f04c06a0c9821562f6aa721af9050443980e4744f99106faeb318edae54020314c7a393e33151906", 0xb6}, {&(0x7f0000004840)="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", 0x1000}], 0x6, &(0x7f00000058c0)=[{0x80, 0x10e, 0x0, "1faf697d93a69d1f5844b05eaf37232a529d47d25c6ff3b30bfc5d0d8c5cd05dfb6877e35d4d91049052488dfc311fa9c58008bac2f83ed63ae59de6fe48abbf953e94ec9014f3ce53ff5d1973ae82e8e00772a4e38ba25213d2791b27a39eca4aec391250c823752a72"}, {0x80, 0x102, 0x3, "a975ee41d4818ace83352c938a65d364457643d9ebe4bd05d11b27f612e4d92966b086fa87a9a1fb77d69bec10d399e1dd4343e4ff4bdfdbbaacc4af6e6107dfc140e824d42af66e443c3ae2de072f4905d05137bfd5b9853fd1388ed205b652a3b1d446599b3bc3bc37f0e58acf"}, {0x60, 0x1, 0x3, "36108af67d34c4ca503954432c4e2a9da72cbb212a3508ab5da1ab82ff4ddbfe135d60e5bfffc12bb7eaf9f16806e8abdcf6762c5aaffd6f1ea2fd234f9221656cde3e89352250d6049a94ed"}, {0x38, 0x11, 0x1, "259e171e6445ce18a14c6a463c188a0a89b5bb00a6ad9ec621afc1efe896f598352dbfe7c8ff99"}, {0x40, 0x113, 0x40, "8e00a54153bb78b1537f44b92bebff8f762ca4dd42662e8b2bf28a9459f8f21fdc1ab1f1da1a13a6e9bb9a57d2dd16"}, {0xe0, 0x10f, 0x7fe00000, "4bb83f45d96e05b762c64faecd9452d4f3b5308435467a3777dcad8c677521bb60a3194808876976d21d9783998fe988b3a4dcaf62b95d5cfdd0ad7b93f1602ad5cb9d58e27f2405e064ed51955450db1edb9cf03b7cd4aaf3610c9166caad099bc1f3f6fbdc2a76b51b13e65e8364d0b498e6cc10bb9a2439e1bbaf6d0ae7acff3704b43a615ab32fb055f78dc624e1a9ae97a79f7273f0961268cb40e851624dd3386306c28e707c00d474b05cc8f4871d5b591ffff24f25d1e7e4193b333d6a919db29bd3fbf6cb16"}, {0xa0, 0x100, 0x80000000, "f889e1b7a9d1fd44c4c1e6aef7cd4c66897a29657737ea87c82946890713aa6eb04ff48dc129d19ca2c977c0a25780c70018b6eea6c0765be2e7dd9b8162bb03e0792a13b51174ebd116439c2b1fc609c70405fb12d920f1daf51fa6195c21f46b277ca339be79ac73c3b11a5462aaea63ff5774a74868a4c4f90cb30ee13de2cb04e09a10b10004b557bbdf1b85140f"}, {0xf0, 0x110, 0x6, "53a091452dbbb2e3fcf4ec4c7531881b225849bb126a57d6e8f618ab94f7d9d8dbb6830d4159aa98ff66c1dfee0afae9acfae7ecebccc09d8e3e3e24ed6a1d590dab74e3e606106a6f8f5e3459705c891f3e07554a8805dafa02c75e1174ea31ac89349ad6eb651c5c38f594d5c369aeb6eaa50aaec8fd0c7139b56197416be95ffdcc5c121b7f2ac793acb44f759152df0189aec14935d2ffb67daabfc735d8f736a76a5619858a11311ef2b5df5e8e0f0c298108fc579bf1dc6734562d16bd15d21358c3a34b2e3291260463b44bd3e83f82340e13ce863a238df4"}, {0x60, 0x104, 0x8, "852a037820b83e166e0fb24bf9e84f42992ecb3049dd4652d8a80deb6451cb8e471ea8c7c405bd9500327f6ce99acd97328401937886dc5eb93cc0fe07ac7570c654a69572ab9df422"}], 0x4a8}}, {{&(0x7f0000005d80)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f0000006100)=[{&(0x7f0000005e00)="ea2368bf76b3ff9bd0a5ee9a74b81a01a170c0107dc5858376bdb7be401021060a1810e5ac3fbbb5b13468f821ea69b03d6efc309e94ccb12f825af9a5125d4d92447c21b9931eda05", 0x49}, {&(0x7f0000005e80)="a3b9bc9860d31fa18cfb2b9b075d101769196f3a5aa8adb3985aa3e69a97e5f3049f6a94e8433d520f51a0667dac3913bf459985cdbc12018538529bad64781aeefd6b0da060bf4c1e7594aac8118c2cdd915cef532da2be63c314fb4c5e91fb9af6117bbdc7cf90623c18a939961320fe4bab33aeb4eb2fbbc3418042bdc818691c45390a2b5a92924c1abaa1e4f7988b1fd999c90a8e39beae283a51f1324f226b561461b196d86f1dc84ddeda5061ee2e63b3594c48586a3f250d9db75ae996a1f8e0cefe33108a90eb9de344eac077c759ac47cf2c72f479ba72d0ebee40d963686ac11d8268bb", 0xe9}, {&(0x7f0000006080)="5c9ba98ee28635706febe40a3392a48d5c31998c7a2f3358b0a3a0daeaf3f633424615675ef7f50c32f9ac4aa87d99627017368d48bc622aa780fe3b4ef27675b0534be52731c68ab2e4c45c736ca89bf768a23d87f1bfe3a102ed8cd4205db307a13c5757f5917f0146881f0d7dc28e6290a18bddf249470e9f", 0x7a}], 0x3, &(0x7f0000006140)=[{0x50, 0x10d, 0x3, "1db918554c16b51ec3c2830c9d3ea22cd277fd462e499ec0e75b0b89540839a2810f9d6e2ff038eef7ee8e4bc70f32334914288bff2a663e2615fc"}], 0x50}}, {{&(0x7f00000061c0)=@rc={0x1f, @fixed={[], 0x11}, 0x20}, 0x80, &(0x7f00000069c0)=[{&(0x7f0000006240)="4d0d2db3d9dd408c8fb9511aed1b5570a5514c3177d4c862b28a70958120d3f41e14c1a65ca7b1778e65ed825d591b1ccf7f193def0a1cd5281087d84aa5c8b6b32db4fc744fd8de", 0x48}, {&(0x7f00000062c0)="2c1fc649edf9959a396509cc90fc4dd44e260d1f305d232bfc6c13d3aec322ae0ffc6685af0982d05f297d5529cefd9ba4506757d3276a3eaef31464886af59bb3c818dc5cc7e6ecae049b7a0afad7ceae4bd0af0450ed35c8f871e62d507f12094673281da954cbef76295c7a20e4d5d3b86a33c8aed7a5a92f68c264fd3f94495d867489d16a5dae71fa04", 0x8c}, {&(0x7f0000006380)="e6b96004c42c51706adbd0788f668893c0fe54a28f9e8ec1345c23db8edd56d42ac7d55d3151d53e5578c3aae78722a016d6c52eed254493b312b728d778f642348f92d22395cebdd86bb03367ae00c6014726e49a659a2b3a877aedd36a5da247429dd0c752b8bef58bedfd63f28adfc1caa3f746716a4c1894d2f23d3170665732ede5a489adfe2edda4d968285ed46c320d1eded56008e5dd9c67e471cbb51cca", 0xa2}, {&(0x7f0000006440)="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", 0xfc}, {&(0x7f0000006540)="13fde921ae41854ddf73d7b93879242d8bccedce64639aeea020c34c50d623f43c8bf37308e9c01876394a4630a1dd2be969229ba127e06e8bcc0b255e6439c6723b0529f8a3f219409778f2950ac14a59a7526e07b99836166d0969101a645c521c50eb21272d7b606eaf68534534177931fd786dfbce49daa8e3624d460e5df7d4b3a8a288e93fc05872093265111abb93f2092adc8b722a5dd9c0567c6133d928c20fd4bad3f1466be99e789bdbee7bd1cf813933f7b56b72d66a38f8418d61a5a39d19be413206b3e9fd4ae2b309f8bb70c2824e407c956abd9049de951bab", 0xe1}, {&(0x7f0000006640)="0783d52abdb3289a295d2533e6842733abb71a498b750f1e50121671d82308b365e1d9191a3ce1b41690d2ed46ae2823a9282f58b73d161ffbd64aeb80448ae35a5161fde02a008416f3ce6a65a6d70b07dadbfe49e69fa1791e8781b59768517846004997e9a077576c83189bd343eb07940bd68b0c4c95bda879beb80ecdc7fdd8848fe8dce596e73ca03d", 0x8c}, {&(0x7f0000006700)="c55d62c0ce3d1b72317e3541a4a47999be4f0ff59d072bb8228ef387eb3ff5d1ea87e81abd9604de", 0x28}, {&(0x7f0000006740)="0fafea593a81240cc92a7ff8c9a4bd5bfb5519869cf628ea92d7ab130c66bab2b746040890c6b30803a5c0ff11d0a8e6eac653d47e331672514825fddd089b3c809da636f7d62599fe7d7180ec818749ee100615ab7df7366643d4c8e267efa24f26980a0fe9305c302a7c10f4a65c19476aa50b61f57b0880056f57886ec590eaff9cd4d4538896e143421dbf1f57e52ff59fb7d34a0d9d88f285647d977c5cb30efee53fd7fd78ed5bcb33a820e5c761dccc909198f72ab23c644ab80a65aa4d971685f5f12d8ce1eb4a63c5850fe1d5058aa6dd322b97c725b0ac28356c0b30dcc8168431ae1d7b36088762a2d35b612a0ec7153be530", 0xf8}, {&(0x7f0000006840)="12511787c8bafa26441ec98e79025b540ff77489264368563dc8413bbc43e0978962dabe22b74d726971bd1e5565f3465b7b5faceeca31770181fec18252dd4ea4615f16b643e19a077d21bc00b211a197060f6eac563c31984021b3b00c29db4a4043fde87dc839c925", 0x6a}, {&(0x7f00000068c0)="28adafbd675a02cb90cbf7678b481d28119b9d537b2d9e9da6a81049a87ab3bc3b86b95855d251799ae3bb0c9757a1c81376adffad09fded01da769243dbcee3c846a5aefea6f5a28f9a922518ea8f18c279d0db52f833fb393a00d443f679d144cd7946ffcf9b379894453fa89e1a5ce598286082c15c5acd564a148938838c94a74fb0303f283b759583a0218c0b8a1cc41da728dcc15add16c277198d81e67a166a0b8aa8830be155ce6a30265e9a4f8e68a1a5b51c02e4fc762404c51ac04b2cbc7d1f49175f5fda5e", 0xcb}], 0xa}}], 0x8, 0x18001) 23:44:50 executing program 0: pipe(0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000002580)='batadv\x00', 0xffffffffffffffff) 23:44:50 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x16, 0x0, 0x1e00, 0x9}, 0x40) 23:44:50 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000d40)="a154de4e7c5b75", 0x7}, {&(0x7f0000000d80)="c3429bec9f8ac0d3dc", 0x9}], 0x2}}, {{&(0x7f00000014c0)={0x2, 0x0, @loopback}, 0x10, 0x0}}], 0x2, 0x0) 23:44:50 executing program 2: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4000031, 0xffffffffffffffff, 0x0) 23:44:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x38, r1, 0x5, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x38}}, 0x0) 23:44:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) pipe(&(0x7f0000000a40)) 23:44:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="970900000000000000000f00003f08000300", @ANYRES32=r3], 0x24}}, 0x0) 23:44:50 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b40)={'team0\x00'}) 23:44:50 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 23:44:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 23:44:50 executing program 1: socketpair(0x25, 0x3, 0x8, &(0x7f00000004c0)) 23:44:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELRULE={0x49c, 0x8, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x46c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@byteorder={{0xe, 0x1, 'byteorder\x00'}, @void}]}, {0x4c, 0x1, 0x0, 0x1, [@hash={{0x9, 0x1, 'hash\x00'}, @void}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8}]}}, @dup={{0x8, 0x1, 'dup\x00'}, @void}]}, {0x3c, 0x1, 0x0, 0x1, [@xfrm={{0x9, 0x1, 'xfrm\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_DREG={0x8}]}}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @void}]}, {0x3cc, 0x1, 0x0, 0x1, [@lookup={{0xb, 0x1, 'lookup\x00'}, @void}, @bitwise={{0xc, 0x1, 'bitwise\x00'}, @val={0x374, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8}, @NFTA_BITWISE_XOR={0x288, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xfd, 0x1, "e1e9afc06ad3fa4db28e0eb3601472194cb982a931e2f5559ff773057838fa41d2fa9c88a0edf9f24a364e6754684b47e44474d5ed424538d4ce663a6dfb38095e86ccd21fba0c077ce0f98b650669f6f9d67170c1f5ab5faee8e1961e32f35d73c912948285734afb1eff3e01d0168eac888c1c62662ae63a8b65db184718939d829ebd18229374db410776170d290122944c7c8e33c8bdde72fc0b67084ea2be9d2da513bb32bca82eb70b04bbc3c187335965ddf52bee6571a31a0c6b691b1f16edc007f1dede52bd6eb1e0b1eb5e857390073510b23ba2b10443920fd932994ac7c9426727ec24654d7ea054f1e1b040048ea2e5393ad7"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xed, 0x1, "8874407a92ba62f454c7f9bcd98d93a5c553134969b11081bca783f05f32606c9ff5325c555a2b9977782fcba705f9e45d49a5d1366af86e8666c44095d2e46b1eae006c13af745d9509e5aa82b43707c301a1baced2e011b2a4b19e691ff90909ca515271bf6eb844251ae4f4bba410618e4868c53c2035d73505e24225d029dfd344c8bcc4182209b63365829466836b1e798a62f70e56186702003e903e57995f3e52ec8d13c30c99d832d9cbeebf35800dbcf0ba41ee20846907c60ea71e9c81933d84132de14a817ed34906c97d6d67039d48f385d93120510ac7be029a426c2bfec9000bf3e0"}]}, @NFTA_BITWISE_MASK={0xd8, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_BITWISE_SREG={0x8}]}}, @rt={{0x7, 0x1, 'rt\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8}]}}, @masq={{0x9, 0x1, 'masq\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8}, @NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8}]}}]}]}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_HANDLE={0xc}, @NFTA_RULE_HANDLE={0xc}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8}]}, @NFT_MSG_DELRULE={0x9a8, 0x8, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x994, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@rt={{0x7, 0x1, 'rt\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8}]}}, @redir={{0xa, 0x1, 'redir\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8}]}}]}, {0x938, 0x1, 0x0, 0x1, [@bitwise={{0xc, 0x1, 'bitwise\x00'}, @val={0x928, 0x2, 0x0, 0x1, [@NFTA_BITWISE_MASK={0x924, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3d, 0x1, "a5cbeb5e98594e1f22bad29393b3af0296bda3354bd20b4986531e1fa5368e070de68a039d7dea4098a010c1fa0ab6e74c2560ed224048477c"}, @NFTA_DATA_VALUE={0xe1, 0x1, "d86c8ff1c36c8f42bcaf0d7f432d538eddf52dcebca349eee58d634204ddf2b2a1e8e58d5972ba3eca8848e948f515f0c056302f38c087c98b5a69ce112a33fe60fd41933c03cb08370e9397fee01f9d4975aefa67fe98fe795d594cdbf489f3974f9125b1ef8191add53d66aeeef8fc21f5a271486e5f605aa26095b364d8877616da1d3e47801578f50584dbac7035c4048893284be24f30c1eaf3607566ada0865c3eeb703ca1e5c0cebe7b307ad96839863debf9cbbc60631b50fa52176550806aab120eb4d388038314f811435d6fb924e5b4ad2593286d2c4810"}, @NFTA_DATA_VALUE={0xa1, 0x1, "807adad201b946a93c98e39f93807086150a1eb2ae79535af59cc219aa1537147650edbc534ba1ebbf737300508f06dbe0441fb07f39ddae942339ff10a52e611091e57a2440862b98391bbd300fb766ef128c70863b657157c88950cfd36ddddda5d130dbfd459ce345afd310d28d9e15b8b3060f322569fa8090b7eb5007c2d710db5bf2e4c9d78af829e59fcfd2c09eaf411c9483f10f73af852c45"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4d, 0x1, "97aa7afb95f5bec4fa2e4165d35317dbbee3d2ef6e684baa695a06e364eff4bef32041a8dfa536c513508a5b9088b6a5a0cbf236c53d9c0205f11b3b17f3f4948ece22fb1394eed2e6"}, @NFTA_DATA_VALUE={0x91, 0x1, "0321878f135fc966ecb6ebee8532d40fa69f83c62bc63d88b733837026653f5f5ee9e854fa02fef24412ec8cb02be1dc345c7839aa96e50499ca761432a51fa5c1cd8da2a688b29d3280451c58a3edea3ef114b5255abdf462196056ebc21d1b620195fa2e587462138e7552bd895d85e4b90cab0cc6f668bf34e8a7ca3c9a11ca2c28457add7aca647ecce624"}, @NFTA_DATA_VALUE={0x62d, 0x1, "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"}]}]}}]}]}]}], {0x14}}, 0xec4}}, 0x0) 23:44:50 executing program 3: sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x0) [ 455.992071][T24773] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 456.022678][T24783] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000c40)="7f", 0x1}, {&(0x7f0000000c80)="fd", 0x1}], 0x2, &(0x7f0000001000)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x1, 0xc000) 23:44:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003280)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000980)={0xa, 0x4e24, 0x0, @private1}, 0x1c, 0x0}}], 0x2, 0x0) 23:44:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000180), 0x4) 23:44:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x16, 0x0, 0x2100, 0x9}, 0x40) 23:44:50 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003280)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=[@dstopts={{0x18}}, @hoplimit_2292={{0x14}}, @dstopts={{0x18}}], 0x48}}, {{&(0x7f0000000980)={0xa, 0x4e24, 0x0, @private1, 0x7}, 0x1c, 0x0}}], 0x2, 0x0) 23:44:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 23:44:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}]}, 0x24}}, 0x0) 23:44:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0)='SEG6\x00', 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r1, 0x1}, 0x14}}, 0x0) 23:44:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000c40)="7f", 0x1}, {&(0x7f0000000c80)="fd", 0x1}, {&(0x7f0000000cc0)="e8", 0x1}], 0x3, &(0x7f0000001000)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x1, 0x0) 23:44:50 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0xd0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0x0, 0x1}}}}, {{@ipv6={@ipv4={[], [], @local}, @loopback, [], [], 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x180, 0x1c8, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}}, @common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @remote, @mcast2}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) 23:44:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 23:44:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000880)={'batadv0\x00'}) 23:44:51 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='GPL\x00', 0x6, 0xda, &(0x7f0000000080)=""/218, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:44:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000c40)="7f", 0x1}, {&(0x7f0000000c80)="fd", 0x1}, {&(0x7f0000000cc0)="e8", 0x1}], 0x3, &(0x7f0000001000)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x1, 0xc000) 23:44:51 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003640)={&(0x7f00000033c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0x14}}, &(0x7f0000003540)=""/246, 0x1a, 0xf6, 0x1}, 0x20) [ 456.278679][T24812] x_tables: duplicate underflow at hook 2 23:44:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003280)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=[@dstopts={{0x18}}, @hoplimit_2292={{0x14}}, @dstopts={{0x18}}], 0x48}}, {{&(0x7f0000000980)={0xa, 0x4e24, 0x0, @private1, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=[@dontfrag={{0x14, 0x29, 0x3e, 0xd30b}}], 0x18}}], 0x2, 0x0) 23:44:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003280)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 23:44:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 23:44:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 23:44:51 executing program 1: socketpair(0x10, 0x3, 0x0, &(0x7f0000000340)) 23:44:51 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x2, &(0x7f0000000240)=@raw=[@map_val], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:44:51 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003640)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {0x1}, {}]}]}}, &(0x7f0000003540)=""/246, 0x3e, 0xf6, 0x1}, 0x20) 23:44:51 executing program 0: bpf$BPF_BTF_LOAD(0x3, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 23:44:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001a40)=[{{&(0x7f0000000000)={0x2, 0x4e24}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f00000000c0)="91", 0x1}, {&(0x7f00000001c0)="af", 0x1}], 0x3}}], 0x1, 0x8080) 23:44:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000c40)="7f", 0x1}, {&(0x7f0000000c80)="fd", 0x1}], 0x2, &(0x7f0000001000)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x1, 0x0) 23:44:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 23:44:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x6, 0x6, 0x3}, 0x14}}, 0x0) 23:44:51 executing program 4: bpf$BPF_BTF_LOAD(0x14, 0x0, 0x0) 23:44:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'macvtap0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x0, 0xffff}}) 23:44:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) 23:44:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310900000000facf08c91d6a9047fd7d364fba6b3b01000000001b0000000800010070636900110002300010000008000b00000000000e0001006e657464657673696d0000000f0002"], 0x60}}, 0x0) 23:44:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001140)={0x38, 0xd, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}}, 0x0) 23:44:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e21, 0x5, @remote, 0x7}}, 0x0, 0x0, 0x2d, 0x0, "d530c342b818be70f07cfae1c4213e749e0db2af178d4bb65446bf0d6039309a0f7af8a49c7b357dfcb12dfdfe6ff361605f8c51f48fb04a9d77cb0c9ee3c199e834fbce36b9c756e3db6179dbdb4818"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x3d, 0x0, "a3cc25cd8b71fce55c57f9175e48ffc428397f4a9dbd18410dfb81c120bfd02561190478d6fbfdc53ddf937aaf10b37198d6b03d74d942046c39507f84990c0678099971f64ac90a954914b81f9c1ecb"}, 0xd8) close(r0) 23:44:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000040)={'veth0_to_team\x00', @ifru_hwaddr=@local}) 23:44:51 executing program 2: socket(0xa, 0x1, 0x1f) 23:44:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001140)={0x38, 0xd, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}}, 0x0) 23:44:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0xd0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}, {{@ipv6={@ipv4={[], [], @local}, @loopback, [], [], 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x180, 0x1c8, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}}, @common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @remote, @mcast2}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) 23:44:51 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xeb, &(0x7f0000000080)=""/235, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:44:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x0) 23:44:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e21, 0x5, @remote, 0x7}}, 0x0, 0x0, 0x2d, 0x0, "d530c342b818be70f07cfae1c4213e749e0db2af178d4bb65446bf0d6039309a0f7af8a49c7b357dfcb12dfdfe6ff361605f8c51f48fb04a9d77cb0c9ee3c199e834fbce36b9c756e3db6179dbdb4818"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x3d, 0x0, "a3cc25cd8b71fce55c57f9175e48ffc428397f4a9dbd18410dfb81c120bfd02561190478d6fbfdc53ddf937aaf10b37198d6b03d74d942046c39507f84990c0678099971f64ac90a954914b81f9c1ecb"}, 0xd8) close(r0) 23:44:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 23:44:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001140)={0x38, 0xd, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}}, 0x0) [ 456.797867][T24884] x_tables: duplicate underflow at hook 2 23:44:51 executing program 5: r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000040)="24000000520001000000f4f9002304000a04f51108000100020000000801000000e1ee41", 0x24) 23:44:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x6, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 23:44:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e21, 0x5, @remote, 0x7}}, 0x0, 0x0, 0x2d, 0x0, "d530c342b818be70f07cfae1c4213e749e0db2af178d4bb65446bf0d6039309a0f7af8a49c7b357dfcb12dfdfe6ff361605f8c51f48fb04a9d77cb0c9ee3c199e834fbce36b9c756e3db6179dbdb4818"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x3d, 0x0, "a3cc25cd8b71fce55c57f9175e48ffc428397f4a9dbd18410dfb81c120bfd02561190478d6fbfdc53ddf937aaf10b37198d6b03d74d942046c39507f84990c0678099971f64ac90a954914b81f9c1ecb"}, 0xd8) close(r0) 23:44:51 executing program 1: socketpair(0x26, 0x0, 0x0, &(0x7f0000000200)) 23:44:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001140)={0x38, 0xd, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}}, 0x0) 23:44:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x60, r1, 0x931, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x60}}, 0x0) [ 456.891463][T24895] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 23:44:51 executing program 2: connect(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x44) 23:44:51 executing program 5: r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000040)="24000000520001000000f4f9002304000a04f51108000100020000000801000000e1ee41", 0x24) 23:44:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e21, 0x5, @remote, 0x7}}, 0x0, 0x0, 0x2d, 0x0, "d530c342b818be70f07cfae1c4213e749e0db2af178d4bb65446bf0d6039309a0f7af8a49c7b357dfcb12dfdfe6ff361605f8c51f48fb04a9d77cb0c9ee3c199e834fbce36b9c756e3db6179dbdb4818"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x3d, 0x0, "a3cc25cd8b71fce55c57f9175e48ffc428397f4a9dbd18410dfb81c120bfd02561190478d6fbfdc53ddf937aaf10b37198d6b03d74d942046c39507f84990c0678099971f64ac90a954914b81f9c1ecb"}, 0xd8) close(r0) 23:44:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000080)) 23:44:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x6) 23:44:51 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) write$P9_RRENAME(r0, 0x0, 0x0) [ 457.036743][T24915] sock: sock_set_timeout: `syz-executor.2' (pid 24915) tries to set negative timeout [ 457.056149][T24919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 23:44:51 executing program 3: r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 23:44:51 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$cgroup_pid(r0, 0x0, 0xfffffffffffffe07) 23:44:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 23:44:51 executing program 5: r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000040)="24000000520001000000f4f9002304000a04f51108000100020000000801000000e1ee41", 0x24) [ 457.086915][T24923] sock: sock_set_timeout: `syz-executor.2' (pid 24923) tries to set negative timeout 23:44:51 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r0, 0x0, 0xfffffffffffffcc3) 23:44:51 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETATTR(r0, 0xffffffffffffffff, 0x0) 23:44:51 executing program 3: socket(0x11, 0x2, 0x2) 23:44:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) write$P9_RWRITE(r0, 0x0, 0x0) 23:44:51 executing program 0: r0 = socket(0xa, 0x1, 0x0) write$P9_RLERRORu(r0, 0x0, 0x0) [ 457.212596][T24936] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 23:44:52 executing program 2: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 23:44:52 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc0, 0x0) 23:44:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 23:44:52 executing program 5: r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000040)="24000000520001000000f4f9002304000a04f51108000100020000000801000000e1ee41", 0x24) 23:44:52 executing program 1: r0 = socket(0xa, 0x2, 0x0) write$nbd(r0, 0x0, 0x5b) 23:44:52 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x20) 23:44:52 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x0, 0x0, 0x25) 23:44:52 executing program 2: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)) 23:44:52 executing program 4: r0 = socket(0xa, 0x1, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) [ 457.376007][T24953] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 23:44:52 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x1008}, 0xd70c0}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:52 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$cgroup_freezer_state(r0, 0x0, 0x0) 23:44:52 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) write$cgroup_freezer_state(r0, 0x0, 0x0) 23:44:52 executing program 3: r0 = socket(0x10, 0x2, 0x0) bind(r0, 0x0, 0x0) 23:44:52 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) write$P9_RRENAME(r0, 0x0, 0x0) 23:44:52 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) 23:44:52 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000003800)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') 23:44:52 executing program 0: stat(&(0x7f0000000140)='.\x00', &(0x7f0000000280)) 23:44:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x40) 23:44:52 executing program 2: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) readv(r1, &(0x7f0000000480)=[{0x0}], 0x1) 23:44:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x4) 23:44:52 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x4) 23:44:52 executing program 1: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x25003f1cf942335f) write$P9_RRENAMEAT(r0, &(0x7f0000000240)={0x7}, 0x7) 23:44:52 executing program 3: memfd_create(&(0x7f0000000000)='.\x00', 0x3) 23:44:52 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r0, &(0x7f0000000040), 0x0) 23:44:52 executing program 1: setrlimit(0x7, &(0x7f0000000000)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) 23:44:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}}], 0x1, 0x0) 23:44:52 executing program 4: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x25003f1cf942335f) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 23:44:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, 0x0, 0x0, 0x8040) 23:44:52 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 23:44:52 executing program 1: setrlimit(0x7, &(0x7f0000000000)) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') 23:44:52 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x4) 23:44:52 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$FUSE_ATTR(r0, 0x0, 0xfffffffffffffdad) 23:44:52 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)) 23:44:52 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0xfffffcae) 23:44:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$P9_RMKNOD(r0, 0x0, 0x0) 23:44:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f0000000100), 0x0, 0x40) 23:44:52 executing program 3: setrlimit(0x9, &(0x7f0000000040)) 23:44:52 executing program 3: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000180)={0x14}, 0xfffffffffffffd79) 23:44:52 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x4) 23:44:52 executing program 2: select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x7}, 0x0, 0x0) 23:44:52 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) 23:44:52 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, 0x0, 0xfffffd3a) 23:44:52 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x71980, 0x0) 23:44:52 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x4) 23:44:52 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000001140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000014c0)='./file0\x00', 0x101000, 0x0) 23:44:52 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000001140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000014c0)='./file0\x00', 0x0, 0x8) 23:44:52 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000001140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000014c0)='./file0\x00', 0x101000, 0x8) 23:44:52 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0xfffffffffffffe9b) 23:44:52 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) r1 = dup(r0) shutdown(r1, 0x0) 23:44:52 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000005c0)={0x200, 0x0, &(0x7f00000001c0)="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"}) 23:44:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000005c0)={0x200, 0x0, &(0x7f00000001c0)="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"}) 23:44:52 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) ftruncate(r0, 0x208200) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000200)) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) 23:44:53 executing program 5: bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) ftruncate(r0, 0x208200) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000200)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) 23:44:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, 0x0, 0x0, 0x40) 23:44:53 executing program 2: rt_sigsuspend(&(0x7f0000000000)={[0x43e12bfd]}, 0x8) 23:44:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000a00)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) sendto$inet(r0, &(0x7f0000000740)="4d499c057e7f66d8e07b954bc32ec46ccffc7c5f1d2ea19f61564966007dae35d247c897a94b599090a25cb4076ac67919b498e559cfb5023ee78d9d1000cf14a6574979b486f543f034b9952ea9547dce57e902d3da94dbc7521a5add07dcd46c40e2930773e508cddb73d8acaf0972a19890d8cd8e8d8e474dca6283d9c6cced16e79275105ba9bd92b75194a8fbb97c8912bc5d2e68b4bf42413df979f6c77984eee8e1e118365729fcc753b42cc09b00ca15fbf033957189722e62211744957710", 0xc3, 0x4049054, &(0x7f00000005c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1}, 0x100) preadv(r0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f0000000040)=""/38, 0x26}, {&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f0000000380)=""/79, 0x4f}, {&(0x7f0000000400)=""/200, 0xc8}, {&(0x7f0000000500)=""/43, 0x2b}], 0x7, 0xb7a1e1c, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) 23:44:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb0600"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)) read(r0, &(0x7f0000001c40)=""/242, 0xf2) r2 = syz_open_pts(r0, 0x0) r3 = dup2(r2, r0) ioctl$TCXONC(r3, 0x540a, 0x0) 23:44:53 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="fbf4e32c3f61bbbbbbbbbbbb0806190108000604"], 0x0) 23:44:53 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffd28) truncate(&(0x7f0000000040)='./bus\x00', 0x4) lseek(r0, 0x0, 0x4) 23:44:53 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) utime(&(0x7f0000000180)='./file1\x00', 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file1\x00') 23:44:53 executing program 3: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x0) 23:44:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x1040c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)="e1", 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x7d}) [ 458.582745][T25087] syz-executor.5 (25087) used greatest stack depth: 9992 bytes left 23:44:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb0600"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)) read(r0, &(0x7f0000001c40)=""/242, 0xf2) r3 = syz_open_pts(r0, 0x0) r4 = dup2(r3, r0) ioctl$TCXONC(r4, 0x540a, 0x0) 23:44:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) 23:44:53 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000a00)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) shutdown(r0, 0x1) shutdown(r0, 0x1) 23:44:53 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @multicast1, @dev, @local}}}}, 0x0) 23:44:53 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}]) 23:44:53 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff8b}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x4) 23:44:53 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, &(0x7f0000000180)=[{0x0}, {&(0x7f00000000c0)="a0", 0x1}, {&(0x7f0000000140)='p', 0x1}], 0x3}, 0x0) 23:44:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x1040c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)="e1", 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x7d}) 23:44:53 executing program 1: socket$kcm(0x2b, 0x1, 0x0) r0 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000540)="2e0000001a008102e00f80ecdb4cb9020a000004a1dc5f09850569556a6c3255200e000200810040fb1200010004", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x14002, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0xc64f, 0x2d48, 0x80000001, 0x2, 0x0, 0x0, 0xffc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0xff00, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000001c0)="f4001100002b2c25e994efd18498d66205baa68754a3f5ffffff020000000000000000000000000021000000000000009d91409707a79498161c761a92f8f2e08d4af9a4f4ef306152c4355570b2f188fe398d", 0x53}], 0x1}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x28, &(0x7f0000000180)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r3, 0x96, 0x8}, 0xc) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x9, 0xfc, 0x0, 0x0, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f0000000300), 0x3}, 0xe03, 0xff, 0x4, 0x0, 0x1, 0x800000, 0x5}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89a0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000380), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='io_uring_queue_async_work\x00'}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000004c0)="f7379d1bf30b0d324192b5d33ac38c990bf9", 0x12}, {&(0x7f00000008c0)="c88bd9187279797d8f869f2193c17ebba82636118e3d539791f7385b0de0969b6019533fc556d5ee7046cb82949628ee137c1fb36bb0f6d67e804ee9916e101c512fcab675ad677da77916edb8f15734ba29b24294673c9bfd71c1c536e490b26a9b4a75d325225e5fb1d7b81338dedf7a5a4d75", 0x74}, {&(0x7f0000000940)="427ad7a068ef12dde4913a1b4b34a727646e73378bc2d3c3fdcd03793fd7d0384da1f225564cf2f03c52c551c11d8639a9a630e4a825065f8298e9e9dd0d3c924bcae3a67a28e7880948480f7e317a0030bd080c227cd4946973430e22e446ad954f3f4ce021ab5a30f321de08bd5f6d32f78dbacdfba504aa69d48e3ef4804a52390d732b78d18788ea4facf8ab89a8567e7ba9aaa27bbadd29cfbc14807149b8fd610775031c9978cd364764d1aba668c9266bdeaab412fc", 0xb9}, {&(0x7f0000000a00)="babf5799b87b7ad21d0eaa4450851f7b32de1e365b3df8f475fe39e63496089cbee8eeec87f0dc2af0ae9c2409fb6160e545f7e18188daeb7407f3a6002d6be73c431c195225e80e49ab39d4b580f93a1c75beb9c9eb62714e6bdd96cc0ed924fd93cbe59c070453397ab1e0d23b292bb6988ef7118e8abb9930640749c0efffb9e72213c57d739b16c26d9defe614bd83e37d28b837bf05cc1d6811bfa275ce6738111b9c8d8a6903facef731cbef272bc20df12f5ebae0062d9f0a8aa0ba8219431ec692263db1dc34ff30c3ae7ca5b285407e79ca4ee8a8c2825cfa2d8e91", 0xe0}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000000b00)="d1798e927c3b89e031fb3f0f3f50380f9f4e7c097bcf95a4c5d7b4765df8e1a1d1c3544261ce4311a0cc3454a08512a6aa3d150052c42151a95183fa6d58bd1a3814147fc58d05032c1d73bbf8998d6ce09ef8e4e662af8ddac1e2762edf700ae9831bb1829fe2461acf7c3a9b0ca8dae61c5ba1d6296ca7dbfbd677c7f208559396a2c3f8d08ab70fd775d3fb6c40bbb55c725af16731485d185aba35d38da10b8ab212177f8cce66b5fbd8ddb1956e5807ceea6c371c3973143cd6771329ea", 0xc0}], 0x6, &(0x7f0000000c40)=[{0x38, 0x102, 0x6, "107818ca0d17c1a75936a4ba204478ff8856c45abb5de894495d68a56cd52c8b07de7e"}, {0xa0, 0x104, 0xfff, "a94a8cc49dcd08614a1c3ec0115c722d3e5fd4502c6f2d3e225d3d3c2246db0f4d01b46f1c01ce85b380efc9b108ab4f8cbf5ecbd98e965054cd2b43da03b5a9b55a9477292c8c3d16811c3f26cd939cc61d4bdb349941867cbe9687e4d6b43bf727d8b049747a3943119ae97cca05e2accc9cc60fd0939db617d0d070a0922d55b6d125153371596edb78e8"}, {0x108, 0x1, 0x8, "7f2d7fe549b4a7fad0c3303d8be08b634793197dc921fb9ecca2aeb409e68e504921a120228d6dd4bce438a4960ac723b04e3359b429a4c84950d4682f25df3877071e748ca28a2855d178018c1965fbb5353e4f28ead6d4e2766052e3727c72c65725c1a1b730960324d67d5fc3d20c4114c7bf6f13acb2be76dfeeb04974f4d0478dc92d4cd0e8dfb323dcc32a73d64c20b3bdeb267e85af5efb710bd58ee7e60861015e98470b61231a0f614af70d8cbe51be38ee76697af3a667981792320bb6559a042dffe067cd9dacde1d55c22bbec2059ec88223e5f38c303777fec67df509d8b65fc0314063da8e6e6e896313f46cfa2870"}, {0x40, 0x10c, 0x8, "34c41e8f2c21396f941f2bb4ac76631d7644ba84e875d11bb5c85cbda96c7e84482ef5c80aa4e2dd15fa"}, {0x10, 0x1, 0x7f}], 0x230}, 0x4000010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/219, 0x2e, 0xdb, 0x8}, 0x20) 23:44:53 executing program 4: mkdir(&(0x7f0000006800)='./file0\x00', 0x0) 23:44:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x6) 23:44:54 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000003800)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 23:44:54 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e40)={0x18, 0x1, &(0x7f0000001d00)=@raw=[@exit], &(0x7f0000001d40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:44:54 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff8b}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x4) 23:44:54 executing program 4: perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x13) 23:44:54 executing program 2: bpf$BPF_PROG_TEST_RUN(0x13, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980), 0x0}, 0x48) 23:44:54 executing program 5: bpf$BPF_PROG_TEST_RUN(0x4, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980), 0x0}, 0x48) 23:44:54 executing program 1: socketpair(0x23, 0x0, 0x0, &(0x7f0000001780)) 23:44:54 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff8b}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x4) 23:44:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x1040c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)="e1", 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x7d}) 23:44:54 executing program 4: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x800, 0x0) 23:44:54 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x801, 0x0) 23:44:54 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff8b}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x4) 23:44:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r0, 0x0, 0x44000) 23:44:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x4c010) 23:44:54 executing program 2: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10) 23:44:54 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff8b}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x0) 23:44:54 executing program 1: socketpair(0x1, 0x0, 0x3, &(0x7f0000000000)) 23:44:54 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x258, 0x0, 0x5002004a, 0x0, 0x108, 0x0, 0x1c0, 0x3c8, 0x3c8, 0x1c0, 0x3c8, 0x3, 0x0, {[{{@ip={@empty, @rand_addr, 0x0, 0xffffffff, 'bond0\x00', 'veth0_to_bond\x00'}, 0x60, 0xa8, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38, 'connbytes\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@empty, @dev, 0x0, 0x0, 'wg2\x00', 'bridge0\x00'}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 23:44:54 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000200)=ANY=[], 0xb0) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000300)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) 23:44:54 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffffffbe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 459.831053][T25214] xt_connbytes: Forcing CT accounting to be enabled [ 459.848543][T25214] ipt_CLUSTERIP: Please specify destination IP 23:44:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x1040c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)="e1", 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x7d}) 23:44:54 executing program 1: open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000100)={0x1ff}, 0x0) 23:44:54 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff8b}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) socket$kcm(0x11, 0x200000000000002, 0x300) 23:44:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@in={0x2, 0x2}, 0xc, 0x0, 0x0, 0x0, 0x1128}, 0x0) 23:44:54 executing program 2: getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:44:54 executing program 1: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) 23:44:54 executing program 2: symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00') readlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/82, 0x52) 23:44:54 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff8b}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:44:54 executing program 1: shmctl$IPC_STAT(0x0, 0x2, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r0 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 23:44:54 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff8b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) [ 460.218088][ T24] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.314637][ T24] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.393830][ T24] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.501209][ T24] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 23:44:55 executing program 4: r0 = socket(0x2, 0x3, 0x8) bind$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 23:44:55 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = dup(r2) poll(&(0x7f0000000000)=[{r3, 0x40}], 0x1, 0x0) 23:44:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x4, [@struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @const]}, {0x0, [0x0, 0x0]}}, 0x0, 0x90}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:44:55 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:44:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)={0x0, 0xb, [], [@generic={0x0, 0x3e, "f004cb43fae47fb3ced17424b551432e5ea24fa840a80302d7f4fdb09cc0662c023a3b5e884e558ece34a08ba176245f0942a81d2c492920101722d8e715"}, @jumbo, @hao={0xc9, 0x10, @local}]}, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0xd0, 0x0, 0x1f8, 0x0, 0xd0, 0x2c0, 0x2f8, 0x2f8, 0x2f8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'netdevsim0\x00'}}}, {{@ipv6={@local, @dev, [], [], 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x2, 0x0, 0xc}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffffffbe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 460.936679][T25285] x_tables: duplicate underflow at hook 2 [ 461.703990][T25309] x_tables: duplicate underflow at hook 2 [ 461.750788][ T24] device hsr_slave_0 left promiscuous mode [ 461.757351][ T24] device hsr_slave_1 left promiscuous mode [ 461.763664][ T24] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.771537][ T24] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.779521][ T24] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.789878][ T24] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.799559][ T24] device bridge_slave_1 left promiscuous mode [ 461.811655][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.826450][ T24] device bridge_slave_0 left promiscuous mode [ 461.832746][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.841905][ T24] device veth1_macvtap left promiscuous mode [ 461.847988][ T24] device veth0_macvtap left promiscuous mode [ 461.854022][ T24] device veth1_vlan left promiscuous mode [ 461.859774][ T24] device veth0_vlan left promiscuous mode [ 462.750666][ T24] team0 (unregistering): Port device team_slave_1 removed [ 462.759736][ T24] team0 (unregistering): Port device team_slave_0 removed [ 462.768736][ T24] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.779707][ T24] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.805292][ T24] bond0 (unregistering): Released all slaves [ 463.766336][T25320] IPVS: ftp: loaded support on port[0] = 21 [ 463.855273][T25320] chnl_net:caif_netlink_parms(): no params data found [ 463.883792][T25320] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.891857][T25320] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.899555][T25320] device bridge_slave_0 entered promiscuous mode [ 463.907514][T25320] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.914553][T25320] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.922190][T25320] device bridge_slave_1 entered promiscuous mode [ 463.935828][T25320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.946555][T25320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.962644][T25320] team0: Port device team_slave_0 added [ 463.969978][T25320] team0: Port device team_slave_1 added [ 463.982766][T25320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.989724][T25320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.015648][T25320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.027305][T25320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.034236][T25320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.060158][T25320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.079629][T25320] device hsr_slave_0 entered promiscuous mode [ 464.086151][T25320] device hsr_slave_1 entered promiscuous mode [ 464.092498][T25320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.100074][T25320] Cannot create hsr debugfs directory [ 464.126251][T25320] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.133320][T25320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.140607][T25320] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.147641][T25320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.177302][T25320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.188939][ T9710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 464.197139][ T9710] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.204664][ T9710] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.213307][ T9710] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 464.223586][T25320] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.233550][ T9710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 464.242039][ T9710] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.249079][ T9710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.267418][ T9710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 464.275563][ T9710] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.282617][ T9710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.291372][ T9710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 464.300078][ T9710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 464.308868][ T9711] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 464.319480][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 464.331009][T25320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 464.342106][T25320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 464.351166][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 464.366898][ T9711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 464.374268][ T9711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 464.382894][T25320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.416960][ T9711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 464.431370][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 464.439880][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 464.447588][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 464.457042][T25320] device veth0_vlan entered promiscuous mode [ 464.466805][T25320] device veth1_vlan entered promiscuous mode [ 464.482623][ T9711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 464.490588][ T9711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 464.498897][ T9711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 464.508934][T25320] device veth0_macvtap entered promiscuous mode [ 464.517216][T25320] device veth1_macvtap entered promiscuous mode [ 464.529607][T25320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 464.540618][T25320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.550514][T25320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 464.561010][T25320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.570881][T25320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 464.581427][T25320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.591457][T25320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 464.591474][T25320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.592346][T25320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.619664][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 464.628892][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 464.638717][T25320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 464.649428][T25320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.659398][T25320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 464.670275][T25320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.680332][T25320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 464.691189][T25320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.701196][T25320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 464.711656][T25320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.721479][T25320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 464.731895][T25320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.742917][T25320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.751193][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 464.793841][ T3062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.803070][ T3062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.811306][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 464.831460][ T3062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 23:44:59 executing program 5: symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00') lstat(&(0x7f00000001c0)='./file0\x00', 0x0) 23:44:59 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 23:44:59 executing program 4: clock_nanosleep(0x400e8b47fa55b2ad, 0x0, &(0x7f0000000000)={0x77359400}, 0x0) 23:44:59 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:44:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000003f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x3002, &(0x7f0000003f80)={0x0, r1+10000000}) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000004380)=ANY=[@ANYBLOB="1c0000001c0001"], 0x1c}}, 0x0) 23:44:59 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001680)=[{0x0}], 0x1, 0x0, 0x0) [ 464.839528][ T3062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.847855][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 23:44:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001e000101"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 23:44:59 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:44:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) 23:44:59 executing program 1: move_pages(0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x0, 0x0) 23:44:59 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') sendfile(r0, r0, &(0x7f0000000000)=0xd838, 0x8000000200) 23:44:59 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) 23:44:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x9, 0x3, 0x238, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @private, 0x0, 0x0, 'vlan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x591}}}, {{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'ip6gre0\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1]}, {0xffffffffffffffff}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a38a6e40243753b) 23:44:59 executing program 3: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:44:59 executing program 4: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6ae332452bf0a489bd1b0f2558b9d52a16c7693720967409", "f599196fe2cace9c68befa7fc56ccfe820566ffd12b46a483658660eb9972d38"}}}}}}, 0x0) 23:44:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r1, r0, 0x0, 0xfff) 23:44:59 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') read(r0, &(0x7f0000002080)=""/56, 0x38) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 23:44:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000002080)='net/fib_triestat\x00') sendfile(r0, r0, &(0x7f0000000000)=0xd838, 0x8) 23:44:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[@ANYBLOB="1c0000001600bf79"], 0x1c}}, 0x0) 23:44:59 executing program 3: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:44:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="6dc4", 0x2}], 0x1}}], 0x1, 0x0) 23:44:59 executing program 2: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) [ 465.191982][T25591] x_tables: duplicate underflow at hook 3 23:45:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1\x00'}]}, 0x34}}, 0x0) 23:45:00 executing program 3: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:00 executing program 1: get_mempolicy(0x0, &(0x7f0000000040), 0x100000000, &(0x7f0000ffe000/0x1000)=nil, 0x4) 23:45:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 23:45:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) getsockname$netlink(r0, 0x0, &(0x7f0000000040)) 23:45:00 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000002840)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @mcast2}, 0x80, 0x0}}, {{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}}], 0x2, 0x0) 23:45:00 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff8b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x28}}, 0x0) 23:45:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:45:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket(0x2, 0x803, 0xff) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x2008000) r3 = dup(r1) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) setxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v2, 0x14, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) 23:45:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000700)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG={0x8}}}]}, 0x2c}}, 0x0) 23:45:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, 0x0, 0x2, 0x801, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) 23:45:00 executing program 1: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:45:00 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff8b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:00 executing program 0: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x7}) 23:45:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x408c885, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 465.589435][ T36] audit: type=1804 audit(1615938300.311:57): pid=25637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir356847325/syzkaller.3kpsJJ/5/bus" dev="sda1" ino=15438 res=1 errno=0 23:45:00 executing program 2: r0 = socket(0x2, 0x80001, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 23:45:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000140)) 23:45:00 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff8b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) [ 465.717064][ T36] audit: type=1804 audit(1615938300.371:58): pid=25647 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir356847325/syzkaller.3kpsJJ/5/bus" dev="sda1" ino=15438 res=1 errno=0 23:45:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000a00)='fou\x00', r1) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000180)={0x1, 'vlan0\x00', {}, 0x8}) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='gre0\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, &(0x7f0000000080)=0x74c5, 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000100), &(0x7f0000000140)=0x8) 23:45:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket(0x2, 0x803, 0xff) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x2008000) r3 = dup(r1) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) setxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v2, 0x14, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) 23:45:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="e4caa66adaa72245", 0x8}, {&(0x7f0000001100)="2d075ae1daa556ccedf3c1d5d26970321f82f563d34f612a3bd2e3fea130af614c85bd79f483f525b3c4813131cf07b800bf7b5f31bed3f8c41051e7f96af945922412835905751e630064de6d5bb7ef19d376e84a4e33f30c6250ea6c8a6f0c931c1502c86200d2", 0x68}], 0x2}, 0x0) 23:45:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x4, 0x598, 0xffffffff, 0x430, 0x310, 0x430, 0xffffffff, 0xffffffff, 0x500, 0x500, 0x500, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x2d0, 0x310, 0x0, {}, [@common=@unspec=@mac={{0x30, 'mac\x00'}, {@random="28c8a9da9879"}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}, {{@ip={@remote, @empty, 0x0, 0x0, 'ip6erspan0\x00', 'syzkaller1\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'wg2\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random='qC-_q<'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5f8) [ 465.765960][ T36] audit: type=1800 audit(1615938300.371:59): pid=25637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=15438 res=0 errno=0 23:45:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:45:00 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) [ 465.828469][ T36] audit: type=1804 audit(1615938300.391:60): pid=25637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir356847325/syzkaller.3kpsJJ/5/bus" dev="sda1" ino=15438 res=1 errno=0 [ 465.836521][ T8021] Bluetooth: hci5: command 0x0409 tx timeout 23:45:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 465.893398][T25668] x_tables: duplicate underflow at hook 2 23:45:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000000140)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @mcast2, 0x3}, 0x80, 0x0}}], 0x1, 0x0) 23:45:00 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') sendfile(r0, r0, &(0x7f00000000c0)=0xd878, 0x9) 23:45:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket(0x2, 0x803, 0xff) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x2008000) r3 = dup(r1) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) setxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v2, 0x14, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) [ 465.975861][ T36] audit: type=1804 audit(1615938300.401:61): pid=25648 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir356847325/syzkaller.3kpsJJ/5/bus" dev="sda1" ino=15438 res=1 errno=0 23:45:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x6131dfe35c49f543, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1}}, 0x1c}}, 0x0) [ 466.065766][ T36] audit: type=1800 audit(1615938300.401:62): pid=25637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=15438 res=0 errno=0 [ 466.090068][ T36] audit: type=1804 audit(1615938300.621:63): pid=25666 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir356847325/syzkaller.3kpsJJ/6/bus" dev="sda1" ino=15429 res=1 errno=0 23:45:00 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) 23:45:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp6\x00') sendfile(r0, r0, &(0x7f0000000000)=0x8000, 0x200) 23:45:00 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080)) 23:45:00 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00', r0) 23:45:00 executing program 2: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000ac0)='cgroup.clone_children\x00', 0x2, 0x0) r3 = dup3(r2, r0, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000040)='2', 0x1}, {&(0x7f0000000180)="cb", 0x1}], 0x2) [ 466.199470][ T36] audit: type=1804 audit(1615938300.681:64): pid=25677 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir356847325/syzkaller.3kpsJJ/6/bus" dev="sda1" ino=15429 res=1 errno=0 23:45:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}], 0x1, 0x8014) 23:45:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket(0x2, 0x803, 0xff) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x2008000) r3 = dup(r1) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) setxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v2, 0x14, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) 23:45:01 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:01 executing program 4: r0 = memfd_create(&(0x7f0000000080)='./\x91\xc8*\xc9\xe2\xa6\x98\xee\xfd\x83\xa1M\xdb\xde|\xcf\xaa@\x9d\x88\xb7\x88T\xa3\x04\xb3\xac\xf5\xa4\xc2\xb1\xd5a#\x1e%\xa8\xbfdJ\x18\xe1\xa4\xae\xf4q{\x90\x8c\xa3$4\x01\x00\x00\x00\xa6\xf0jd\xa7\xc6nz\xc8ZO\x98\xdb\xf0\xe8&/6n\xb6\xd0\x04z\x8a\xad\x9c\xccH\x85\x1eK\xc8p+\xdb\xfcJO\xa5\x1a\xe1=\xdbK\x8d.\xcfL\x80\xaf\x05_\xda$_7\xafo\xc7\vE\xa6\x02\x93\xe28\xbf66\xef\x86f\x1f*\xab\x95]\xe7M\xe6\xd7W&\xc4\x1d\a\xce\xcb\xc1\t\xf1\r\xa7\x83\xe6\xe2Q\xf1\x8f(\xf1o\x01\f^\x1bID\xdd\xb1\vPc\x90\x9f\xd6\xfb\x8aV\xf2\x01\xad\xf8[;\xb6\xf0ve\x8a=\xa8\xa5\x8fP\xbdj\xfaz\x1e\xc3}\x97`\xbbfM\xd3\xeeP\x01\x00\xea\xe2\xb6\tue\t\xc6\x9c\xe1\xe3%iVL\x155M\xbd\x8ak\xfb\xb5\xd0H>\xbaS\xf7Km\xcd@\xbaP\x1f\xab\x99\xf5\xd6\xe9%V\x13 R0* \x80m\xe3\n\xc3\xacT,\xcb60$v\x161 \xed\xd0,\a\x05W\xf0^|Y0\x06\xceq3bb\xcf\xdb\xb1\xc5)\xb8\xe4\xa0\xa1{e1\x16\xd1\xb0\xcdVS\xc1\xe9M\x81\xd7\xc2iy\xa6\xc9\xd5\xe5\x0e\xa3D_\xa4\xf9\xe6!s\x15j\xf3\x93\xd1\xf64\xa8\xaf\xa7\xb8G>2y4K`\xb6\x86\xc8\xc78|\x7f\xec\x17jg\x95\x8c\xe0\xa5\xa7\xe5\xdd:\az\x0fMu\xad5\a\xbcG\xe5\xb2\x15\v\xa5\x17e\xf1\xa3\x02\xbfyg\xff\xd1<\xa4\x1e\x87d\x18\x8e\xe0E[\x04\xb5Y\x10+k\x8e5]e^\xef\x1e\x8a\xb0\"\x173\x1d3/\x83{\xb2\x99\x1f\x15X\xf9\xb1R\x93N\xa3\x92C\xb9=n\t\x88\xde\xba0\xb9\t=\x8cw\xc7\xb7\xd3\xb8\x96\x7f\x89\xa3\x17V)\xcb\x9b\x8dre\x8e\xb7\x01K\xf6\xf8\xe8^\xa3\xea\xa4\xc6P\xd2\xba\xb8\xf8\\o~Ou\xed6', 0x4) sendfile(r0, r0, 0x0, 0x5) [ 466.313678][ T36] audit: type=1800 audit(1615938300.691:65): pid=25666 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=15429 res=0 errno=0 [ 466.338123][T25706] new mount options do not match the existing superblock, will be ignored 23:45:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x6131dfe35c49f543, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xa}}, 0x1c}}, 0x0) 23:45:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)=@ipv6_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x9}}]}, 0x28}}, 0x0) 23:45:01 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) [ 466.421144][T25706] new mount options do not match the existing superblock, will be ignored [ 466.430571][ T36] audit: type=1804 audit(1615938300.861:66): pid=25690 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir356847325/syzkaller.3kpsJJ/7/bus" dev="sda1" ino=15422 res=1 errno=0 23:45:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x6131dfe35c49f543, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) 23:45:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)=@ipv4_newaddr={0xb0, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x12}, @IFA_CACHEINFO={0x14}, @IFA_LABEL={0x14, 0x3, 'sit0\x00'}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'bond0\x00'}, @IFA_CACHEINFO={0x14}, @IFA_BROADCAST={0x8, 0x4, @dev}, @IFA_LOCAL={0x8, 0x2, @dev}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_CACHEINFO={0x14}]}, 0xb0}}, 0x0) 23:45:01 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 23:45:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='ip6tnl0\x00'}) 23:45:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000004240)={0x18, 0x0, r1}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r2, &(0x7f0000000000)=0xd838, 0x8) 23:45:01 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x30, 0x18, 0x6131dfe35c49f543, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8}}, @RTA_METRICS={0x8, 0x8, 0x0, 0x1, "105c8434"}]}, 0x30}}, 0x0) 23:45:01 executing program 2: r0 = socket(0x26, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 23:45:01 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000a060103000000000000000000000000050005000a0000000900020073797a30000000000500040000000000050001000600000015000300686173683a69702c706f72742c6e6574000000000c000780"], 0x5c}}, 0x0) 23:45:01 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0) fork() fork() r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 23:45:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x6131dfe35c49f543, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, @multicast1}]}, 0x24}}, 0x0) 23:45:01 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@ax25={{0x3, @null}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) 23:45:01 executing program 2: fanotify_mark(0xffffffffffffffff, 0x80, 0x40000002, 0xffffffffffffff9c, 0x0) 23:45:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x208, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'erspan0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 23:45:01 executing program 5: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 23:45:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0x118, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'erspan0\x00'}, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x40}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1}}}, {{@ip={@private, @remote, 0x0, 0x0, 'macsec0\x00', 'caif0\x00'}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "397c5ac1ddb37b8d0ff34c23a2f9d998464959f516b445786683be8ac9aa"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 23:45:01 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:01 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x8000000000001f4) 23:45:01 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x34, 0x1, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_ID={0x8}, @CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x34}}, 0x0) 23:45:01 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:01 executing program 0: mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000003) [ 466.918126][T25771] x_tables: duplicate underflow at hook 3 [ 466.947589][T25777] x_tables: duplicate underflow at hook 3 23:45:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x14, 0x4) 23:45:01 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:45:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:45:01 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 23:45:01 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:01 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x68, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 23:45:01 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_tables_matches\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0, 0x0) 23:45:01 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10001, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 23:45:01 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x8000000000001f4) 23:45:01 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:01 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 23:45:01 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000500), &(0x7f0000000540)) 23:45:02 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:02 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)) 23:45:02 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)) 23:45:02 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x8000000000001f4) 23:45:02 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a7"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:02 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 23:45:02 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 23:45:02 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x68, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 23:45:02 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x8000000000001f4) 23:45:02 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a7"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:02 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) quotactl(0x0, &(0x7f0000000200)='./file0\x00', 0xee00, 0x0) 23:45:02 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x8000000000001f4) 23:45:02 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000940)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000900)) r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) r1 = getpid() readv(r0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/231, 0xe7}], 0x1) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) tkill(r1, 0x800000015) 23:45:02 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a7"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 23:45:02 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 23:45:02 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:02 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x8000000000001f4) 23:45:02 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 23:45:02 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(0x0, r2, 0x0) setuid(r2) 23:45:02 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:02 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000940)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000900)) r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) r1 = getpid() readv(r0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/231, 0xe7}], 0x1) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) tkill(r1, 0x800000015) 23:45:02 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:02 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 23:45:02 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000080)) 23:45:02 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) 23:45:02 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x8000000000001f4) [ 467.999530][ T8021] Bluetooth: hci5: command 0x041b tx timeout 23:45:02 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:02 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) 23:45:02 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000940)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000900)) r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) r1 = getpid() readv(r0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/231, 0xe7}], 0x1) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) tkill(r1, 0x800000015) 23:45:02 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:02 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x68, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 23:45:02 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 23:45:03 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(0x0, r2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r4, 0x0, 0xffffffffffffffff) 23:45:03 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, &(0x7f00000002c0)=""/208, 0x26, 0xd0, 0x1}, 0x20) 23:45:03 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:03 executing program 1: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000780)={0x80000000}, 0x8) 23:45:03 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xf4240, &(0x7f0000000540)=@raw=[@jmp], &(0x7f0000000580)='GPL\x00', 0x0, 0xd2, &(0x7f00000005c0)=""/210, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:45:03 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000940)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000900)) r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) r1 = getpid() readv(r0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/231, 0xe7}], 0x1) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) tkill(r1, 0x800000015) 23:45:03 executing program 5: socketpair(0xa, 0x3, 0x8, &(0x7f0000000040)) 23:45:03 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:03 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000000)=@proc, 0x1f5ccfd40463db15) 23:45:03 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:03 executing program 0: r0 = socket(0x2, 0x8001, 0x0) fcntl$setown(r0, 0x6, 0xffffffffffffffff) 23:45:03 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@private0, @private0, @remote, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, r2}) 23:45:03 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xf4240, &(0x7f0000000540)=@raw=[@jmp], &(0x7f0000000580)='GPL\x00', 0x0, 0xd2, &(0x7f00000005c0)=""/210, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:45:03 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:03 executing program 1: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002040)=0xffffffffffffffff, 0x4) 23:45:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001980)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f00000019c0)=0x10) 23:45:03 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000940)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000900)) r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) getpid() readv(r0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/231, 0xe7}], 0x1) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 23:45:03 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000480), &(0x7f00000004c0)=0xe) 23:45:03 executing program 1: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 23:45:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000440)={'syz_tun\x00', @ifru_names}) 23:45:03 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefca"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:03 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@private0={0xfc, 0x0, [0x0, 0x0, 0xb]}, @private0, @remote, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, r2}) 23:45:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x8001, 0x4) bind$inet(r0, &(0x7f0000000a00)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1}, 0x100) 23:45:03 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefca"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@security={'security\x00', 0xe, 0x4, 0x4a8, 0xffffffff, 0x0, 0x0, 0xf8, 0xffffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2, [], [], 'vxcan1\x00', 'veth0_to_bond\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {"ca2c"}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0x120, 0x160, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@dst={{0x48, 'dst\x00'}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a01]}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "fb5d6b3b8db45aae973711b14a4c57bc41bac99a6681cad5ffeb0332e5c4"}}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}}, @common=@hbh={{0x48, 'hbh\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'wlan0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) [ 468.877786][T25966] syz_tun: mtu less than device minimum 23:45:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x25, 0x5, 0x9) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x11, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x104000001) socket$inet(0x2, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl(r4, 0x0, &(0x7f00000000c0)="359da7ed5ad7f23fc8a37fbe7b2080d4166b0df851719e81cead0e02c6c50263bdf09b8486ae053d7d01a24f1f0f4270") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x7ffff000}], 0x17, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 23:45:03 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefca"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@security={'security\x00', 0xe, 0x4, 0x298, 0xffffffff, 0xb0, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev, @multicast1, 0x0, 0x0, 'bond_slave_1\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "82465635681c3a727486389271976ff370e529bd7effe8007324087132ff"}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) [ 468.977149][T25977] x_tables: duplicate underflow at hook 2 [ 469.479246][ T4839] ================================================================== [ 469.487358][ T4839] BUG: KCSAN: data-race in dput / vfs_unlink [ 469.493334][ T4839] [ 469.495648][ T4839] write to 0xffff88810befdc00 of 4 bytes by task 25642 on cpu 0: [ 469.503337][ T4839] vfs_unlink+0x289/0x3e0 [ 469.507649][ T4839] do_unlinkat+0x29f/0x4f0 [ 469.512041][ T4839] __x64_sys_unlink+0x2c/0x30 [ 469.516695][ T4839] do_syscall_64+0x39/0x80 [ 469.521094][ T4839] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 469.526968][ T4839] [ 469.529272][ T4839] read to 0xffff88810befdc00 of 4 bytes by task 4839 on cpu 1: [ 469.536785][ T4839] dput+0x34/0x430 [ 469.540500][ T4839] path_put+0x1b/0x30 [ 469.544473][ T4839] do_readlinkat+0x188/0x200 [ 469.549042][ T4839] __x64_sys_readlink+0x43/0x50 [ 469.553869][ T4839] do_syscall_64+0x39/0x80 [ 469.558323][ T4839] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 469.564229][ T4839] [ 469.566533][ T4839] Reported by Kernel Concurrency Sanitizer on: 23:45:04 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000940)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000900)) r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) getpid() readv(r0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/231, 0xe7}], 0x1) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 23:45:04 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000001c0)=0x200060, 0x4) 23:45:04 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafa"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:04 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@private0, @private0, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x890c, &(0x7f0000000100)={@rand_addr=' \x01\x00'}) [ 469.572664][ T4839] CPU: 1 PID: 4839 Comm: systemd-udevd Not tainted 5.12.0-rc3-syzkaller #0 [ 469.581231][ T4839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.591413][ T4839] ================================================================== 23:45:04 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafa"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:04 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000a00)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) write(r0, &(0x7f0000000080)="e8", 0x1) close(r0) 23:45:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x8001, 0x4) bind$inet(r0, &(0x7f0000000a00)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1}, 0x100) 23:45:04 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x1, &(0x7f0000000540)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0}], &(0x7f0000000580)='GPL\x00', 0x1, 0xd2, &(0x7f00000005c0)=""/210, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:45:04 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafa"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) [ 470.075591][ T9544] Bluetooth: hci5: command 0x040f tx timeout 23:45:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001a40)=@security={'security\x00', 0xe, 0x4, 0x578, 0xffffffff, 0x0, 0x320, 0x320, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @mcast2, @ipv4={[], [], @dev}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@ipv6={@remote, @loopback, [], [], 'geneve1\x00', 'vlan0\x00'}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[], 0x0, 0x0, 0x1}}, @common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @private0, @remote, @empty}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ipv6={@rand_addr=' \x01\x00', @dev, [], [], 'team_slave_1\x00', 'veth1_to_bridge\x00'}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @private0, @local, @private0}}, @common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "4a81"}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) 23:45:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000054700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000024000705006dd399bca2a32005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300fdff00080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x0, 0x5}, [@TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}]}}]}]}]}}]}, 0x68}}, 0x0) 23:45:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x8) [ 470.131539][T25987] syz-executor.2 (25987) used greatest stack depth: 9216 bytes left [ 470.218182][T26046] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 470.248476][T26054] x_tables: duplicate underflow at hook 2 [ 470.249743][T26046] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:45:05 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000940)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000900)) r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) getpid() readv(r0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/231, 0xe7}], 0x1) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 23:45:05 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:05 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@empty, @local, @mcast2, 0x5, 0x8, 0x5, 0x500, 0x9, 0x2a00208}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@private0, @private0, @remote, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, r2}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @private0}}, 0x5c) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x890c, &(0x7f0000000100)={@rand_addr=' \x01\x00'}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000600)={0x0, "a48c72baeca647b44fbf7ccd6eb12fa0"}) 23:45:05 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00', 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x88, r0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x68, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44d7764a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdc8066e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf079}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x617f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16c03e42}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x88}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, 0x0, 0x2000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000400)={'wpan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) 23:45:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000054700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000024000705006dd399bca2a32005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300fdff00080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x0, 0x5}, [@TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}]}}]}]}]}}]}, 0x68}}, 0x0) 23:45:05 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) [ 470.593050][T26068] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:45:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x8001, 0x4) bind$inet(r0, &(0x7f0000000a00)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1}, 0x100) 23:45:05 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000a00)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 23:45:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000840), 0x8) 23:45:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000054700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000024000705006dd399bca2a32005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300fdff00080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x0, 0x5}, [@TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}]}}]}]}]}}]}, 0x68}}, 0x0) 23:45:05 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) [ 470.778917][T26091] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:45:06 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000940)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000900)) r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) r1 = getpid() readv(r0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/231, 0xe7}], 0x1) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) tkill(r1, 0x800000015) 23:45:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x8001, 0x4) bind$inet(r0, &(0x7f0000000a00)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1}, 0x100) 23:45:06 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000980)={0x30, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x30}}, 0x0) 23:45:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000054700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000024000705006dd399bca2a32005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300fdff00080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x0, 0x5}, [@TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}]}}]}]}]}}]}, 0x68}}, 0x0) 23:45:06 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000a00)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 23:45:06 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:06 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001180)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x0) [ 471.474998][T26125] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:45:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) 23:45:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000300)=@buf={0x40, &(0x7f0000000200)="e4f8d7506ad886e86df3db69c0387e290cbd6d66e75f9e1beebd36caef4ee3a223b77ba6bd5bed44dbe2498b980aa6118d88964aa1785d3373385be748c70c04"}) 23:45:06 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:06 executing program 0: r0 = socket$nl_route(0x2c, 0x3, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x8903, 0x0) [ 472.155173][ T9544] Bluetooth: hci5: command 0x0419 tx timeout 23:45:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, &(0x7f0000000280)) 23:45:09 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2a00208}) 23:45:09 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000940)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000900)) r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) r1 = getpid() readv(r0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/231, 0xe7}], 0x1) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) tkill(r1, 0x800000015) 23:45:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', r0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00', r0) 23:45:09 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x8001, 0x4) bind$inet(r0, &(0x7f0000000a00)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1}, 0x100) 23:45:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001a40)=@security={'security\x00', 0xe, 0x4, 0x578, 0xffffffff, 0x0, 0x320, 0x320, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @mcast2, @ipv4={[], [], @dev}, [], [0x0, 0x0, 0x0, 0xff]}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@ipv6={@remote, @loopback, [], [], 'geneve1\x00', 'vlan0\x00'}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[], 0x0, 0x0, 0x1}}, @common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @private0, @remote, @empty, [0x0, 0x0, 0x0, 0xffffffff]}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ipv6={@rand_addr=' \x01\x00', @dev, [], [0x0, 0xff000000], 'team_slave_1\x00', 'veth1_to_bridge\x00'}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @private0, @local, @private0}}, @common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "4a81"}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x7}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) 23:45:09 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:09 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000200)) 23:45:09 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000000)={@empty, @local, @mcast2, 0x5, 0x8, 0x5, 0x500, 0x9, 0x2a00208}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@private0, @private0, @remote, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, r2}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @private0}}, 0x5c) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x890c, &(0x7f0000000100)={@rand_addr=' \x01\x00'}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000600)={0x0, "a48c72baeca647b44fbf7ccd6eb12fa0"}) 23:45:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff8b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 23:45:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff8b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 23:45:09 executing program 1: socketpair(0x11, 0xa, 0x3f, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42000}, 0x40000c1) r1 = socket(0x11, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40801) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000606010400000000000000000c0000050900030073797a32000000000535"], 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}], {0x14}}, 0x3c}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, &(0x7f0000000580)) 23:45:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff8b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) [ 474.621851][T26186] x_tables: duplicate underflow at hook 2 [ 474.709767][T26198] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 474.728035][T26200] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 23:45:12 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getpeername(r0, 0x0, &(0x7f0000000180)) 23:45:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x0, 0x5, 0x9) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x11, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x104000001) socket$inet(0x2, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl(r4, 0x0, &(0x7f00000000c0)="359da7ed5ad7f23fc8a37fbe7b2080d4166b0df851719e81cead0e02c6c50263bdf09b8486ae053d7d01a24f1f0f4270") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x7ffff000}], 0x17, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 23:45:12 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000940)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000900)) r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) r1 = getpid() readv(r0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/231, 0xe7}], 0x1) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) tkill(r1, 0x800000015) 23:45:12 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000a00)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 23:45:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff8b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x8001, 0x4) bind$inet(r0, &(0x7f0000000a00)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1}, 0x100) 23:45:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff8b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, &(0x7f00000004c0)) 23:45:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001a40)=@security={'security\x00', 0xe, 0x4, 0x578, 0xffffffff, 0x0, 0x320, 0x320, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @mcast2, @ipv4={[], [], @dev}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0xff000000], [], 'geneve1\x00', 'vlan0\x00'}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @private0, @remote, @empty}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4}}}}, {{@ipv6={@rand_addr=' \x01\x00', @dev, [], [0x0, 0xff000000], 'team_slave_1\x00', 'veth1_to_bridge\x00'}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x80, 0x0, 0x0, @private0, @local, @private0}}, @common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "4a81"}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) 23:45:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff8b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x16, 0x34000, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008864638877fbac141421e9", 0x0, 0x31}, 0x28) 23:45:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bond0\x00', &(0x7f0000000100)=@ethtool_sset_info={0x1b}}) 23:45:12 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000580)='GPL\x00', 0x1, 0xd2, &(0x7f00000005c0)=""/210, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 477.666890][T26235] x_tables: duplicate underflow at hook 2 [ 477.688359][T26241] x_tables: duplicate underflow at hook 2 23:45:12 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000038000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0a000000850000000d000000b700000000000000950000000000000023b5922c90d1db26e58a72e306a78bbaf158fce7df486c60f7ae965121eddcd904d19ef8883600dd6f214a4a764f17b5fd74d49fefcafaf4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff8b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x48) [ 477.791631][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 477.791644][ T36] audit: type=1804 audit(1615938312.513:79): pid=26228 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir197630251/syzkaller.XKIprB/710/cgroup.controllers" dev="sda1" ino=15520 res=1 errno=0 [ 478.017785][ T36] audit: type=1804 audit(1615938312.743:80): pid=26237 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir197630251/syzkaller.XKIprB/710/cgroup.controllers" dev="sda1" ino=15520 res=1 errno=0 23:45:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x0, 0x5, 0x9) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x11, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x104000001) socket$inet(0x2, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl(r4, 0x0, &(0x7f00000000c0)="359da7ed5ad7f23fc8a37fbe7b2080d4166b0df851719e81cead0e02c6c50263bdf09b8486ae053d7d01a24f1f0f4270") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x7ffff000}], 0x17, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) [ 478.320211][ T36] audit: type=1804 audit(1615938313.043:81): pid=26269 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir197630251/syzkaller.XKIprB/711/cgroup.controllers" dev="sda1" ino=15507 res=1 errno=0 [ 478.486639][ T36] audit: type=1804 audit(1615938313.213:82): pid=26269 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir197630251/syzkaller.XKIprB/711/memory.events" dev="sda1" ino=15283 res=1 errno=0 [ 479.036843][T26269] syz-executor.2 (26269) used greatest stack depth: 8568 bytes left