executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x5, 0x3, 0x80}) [ 708.748979][ T25] usb 5-1: Using ep0 maxpacket: 16 17:55:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x80, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}, 0x48) [ 708.882855][ T25] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 708.893939][ T25] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 708.904331][ T25] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 708.915478][ T25] usb 5-1: config 1 interface 1 has no altsetting 0 [ 708.972137][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 709.103368][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.114668][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.114845][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 709.114980][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.164772][ T3548] usb 3-1: config 0 descriptor?? [ 709.213573][ T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 709.213725][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.213842][ T25] usb 5-1: Product: syz [ 709.213937][ T25] usb 5-1: Manufacturer: syz [ 709.214031][ T25] usb 5-1: SerialNumber: syz [ 709.547673][ T25] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 709.632613][T12556] UDC core: couldn't find an available UDC or it's busy: -16 [ 709.640142][T12556] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 709.682793][ T25] usb 5-1: USB disconnect, device number 74 [ 709.693956][T12556] UDC core: couldn't find an available UDC or it's busy: -16 [ 709.701481][T12556] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 709.747024][ T3548] hid (null): bogus close delimiter [ 709.782998][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0010/input/input38 [ 709.889528][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0010/input/input39 [ 709.971441][ T3548] kye 0003:0458:5019.0010: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 709.988913][ T3548] usb 3-1: USB disconnect, device number 103 17:55:07 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x80, 0x81, [{{0x9, 0x4, 0x0, 0x1f, 0x0, 0x7, 0x1, 0x0, 0x73, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xff, 0xff, 0x3}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x0, 0x1, 0x77}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0xd, 0x3}]}, 0x1, [{0x42, &(0x7f0000000280)=@string={0x42, 0x3, "16f552bf04fb9af69beed9e2bc12a73682cc67fd13e02bd7863bcd1ed6993f0a104590451de4d59afab89779aa661bdee93b315fb236adf47ba4865ef834bdf0"}}]}) syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x0, 0x5}]}, 0x2, [{0x73, &(0x7f00000001c0)=@string={0x73, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f700c0d88d694a6a3be9f91f721e488fd7ba7dbccb471e448df83343cea5772d33665c062fb02954327c2eabc5f6d7118f97a4399070218b84967fe7c2d5cf571bbea70f8a05942a65d9d7939aa589ebad1ac82303"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:55:07 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000480)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x10, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?'}}, @in={0x2, 0x0, @multicast2}}}, 0x118) 17:55:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_NAN_FUNC={0x12c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}, @NL80211_NAN_FUNC_SERVICE_INFO={0xed, 0xb, "0b830ca96e413b9a739e71c05165ec12cc1cf9dae1640afb18cecaed7bc9e73c2d4659cf0ee15594aa5fa73b98cb38e8afb1e9c0845387251b041d3f1c24ae641f0ec550d9e58a7465f05fb2f1fa9bb18907e3f2cec0dac90a432ab633b8dde8596274f60ca6d58506fd28d8696049cd77bb880d53914fafb34d98fdda71e1e4a120135c5fcf82b07ac40476a0e16c01ba46053d991c390ac495dc69acd1f46942c34bedfd5ae64d13a09d6cf040d304201b1bb837d49fc11fb7af0895ca26bc7a2611e6c64363392387cbcd4dbe808c617d166d632bbc971577652667d0dddd78c591c32f24734cdb"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "bf24ea835c66"}]}, @NL80211_ATTR_NAN_FUNC={0x414, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0x101, 0xb, "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"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x2fc, 0xe, 0x0, 0x1, [{0x4}, {0xa1, 0x0, "76c76036c45053dd9ec2bfb37dd0bf0c93238f3971d114658fb1e175c47d7a98eb2b3ecb490211839c52a220b5d459f30427bc441155e47187e9e343b88001804d60bdc4048cee9ab7672c1bf749c0284959f84b69d79f492dfb77acf2b654c4c033453bf8cea3161d36c9d8aa84f77315d68ce9599583ff837b3a6620a76840978bd75fa84e96419919605186334e4b004a1b753c0e5361ed4c00efc0"}, {0x35, 0x0, "bfab63c50de280163481f88f054758ed361b97bb69bee70c2e195084f34c6b63c226e5d6eebd4625fc0cca7207e14b5e7b"}, {0xc9, 0x0, "001fe41914c41a6d3a319b00333e40d1edae50897b08d88a2dda1da6a166daf9379c17dcb5c51df11796e26e1c9bb63d8c52e4d32b682ad84576a3287c0f75b33925d9e5a09dea0ce921fca1f688b16ab891d2da54e02ad82dd68a6eed94e002366f050080f803847ee03852a2b8bb5b6f2b4398923a600b8cf0e2d565985951aa25d91bcc0ad165e6bab554cf596b39ecf2ea9a423ca93ca56a9ba6078b7b73b60f09595c2f2471ff7c3318944552cd73b7750307bd7a4ee6f60c066a8ace434f57adc16a"}, {0x45, 0x0, "360acf513c7a9de89e27395c7f6d254e994db18420ac33bd2d215886484b1019caf52fecb95ee2b75f1605ba37d69bfaa22d39f93e617bc1c8f6dca8bcde4fdc6c"}, {0x101, 0x0, "3088ed2151dbf397a8fb437699f112534e13f1836b1496b28cdefb485c4ce11f82647767307a8eb51d05c7d2be915f79591ccf9d706364832327807ab82ea667a996ca14cfb9ecfb5595b4d4c24e50cb08aebef3e93d9ca35187c714cd117e5ba561f7e9888126b96fcfbdbd4371f5992a350802c041514136b2035a190527f599285f2e619e578ccaba5f0a4caeb07064332d68e707ef6dad2aa3de1d936ce4624c6156e1b611d1178a1c2f36112b377684551e3713eb83fba121f2fb5e47a06de9b335209f42ea4fc66f31817c43f2cf62a9d16d75544d113c6bd0178a2fa5a3a6d304ad42e0dece109d462f950d60c6234febee6462856ddd93bb8d"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x5ec, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x5dc, 0xd, 0x0, 0x1, [{0xd2, 0x0, "cfda29565f64a3da4cedcfcb5cd1803b672d19bc2b1daddc31487ad713bf7b6db0374e0054ec2e93d586c1719fd94610874820c45b4345b862c04b6a295a116a7fe9011f6495d60a85fa499656c8c59360e04837e579be4628b6943fdf0c9537136b17839af982526ccac2dd818bc5455d0695be925d5b420aa6158d996d645b50e6d4c1ef6373d046779f6154c3c9b1e460ab28f6c0e994fb739d2038636c77ba181bdb5497baa931a81d7466de350b0be576d810fb549db7de8727938801d2cb45032976f97314626abae60a10"}, {0xe9, 0x0, "7169f0f8acd60be43840db8cef15ec2402610c67bb990ab338307f36811a7d606b64073ed82edecbc71d5f86b7c46502d3bc6ce741f4f430d47f1d71e5d595612dfb5f460885e60d2cd793483144d6d59a7bf91952001babd64348698f02124298fde8720a6e78d4c4eded3794f35db777e8214000be0d2c89abbf88d2b0638fd4819a9ddd448ca80fb0e59430d044acba09a13ec0e0e53aa688a3604be225037eef8e37262f1812a88939833847443261e4e52256d7b893e83ecf5c44d967fb7a5e33318d89e994fb7ff9d2b3a5a2fc6a2c73ecef1479c415d18ccca51cb673681e5219b3"}, {0xcd, 0x0, "116374f2ed6646be26f87cd572f40bf6d56329acfb14fb8e838f43987be61e8195bda3d4b1bd686d0a11eaa7355385a5298fc10fb42e0e52277b993d154da607932807ee8fd2ad7da0720fefb80d716ac4328a650646e0a1cc092d708a01909ba36c5dd33af7e69bd8f3019510667edc9e555b4496bba0cb2cc3d3c9beae426f9c288b700051fb3e8864ccb58962771d8359174e7b09099333e6487634aa929b7a8e62fc06c3f4785ce78bac0fe97a8feb4dc24a8c70ca68e5d3873ab7f9fa22f654989ae37af0ad83"}, {0xf1, 0x0, "99c1cc590b9f75a79c47e2a141e1eef9a94e4646f8cc905069b92cd71f3f5dc01259b3fbdc877628729ba3835358d1ab089f38bda0516ceb70bee3765bd759aa106f6909b080c3a100309e91620b6170512649fe6eea786f5ec907e3facfa9e733791d4ffca77e5201058587c76db6f21ce4a7dceb08c5c8fb5823b7b17b2bdb139e0d7ec7a0ce021a585196164b96733d8f788d8f7c3f54b62f73e8579512f820400a2fb8ab61d69384ca0c7a48a65a698e6a4768991dad33e85cdd7df7dfc1a51e4208d16bb6027d6192aa815080d7a33b1d7c514ec6757b75db3ca6092ab00d5f64f85d34be54be656c72b9"}, {0x99, 0x0, "2027ebc38238d3a2e68e3d428c8656abdc7c78d81f8dd337bd65a5d9272eb42911828797e89c06f0cecb8cad827cfeaad6cd4e2bee47fdb87f2ef04354432af7a897901767337b89befae0740c54825dc01e40fb2297eefc890360932d49b7ae3c1264a9c3560856254b4a31cc96ffb1f9e949aca0ec52f078f54fa3bae61fbf4b67d3f13ef01afe4cdd3e42bec2015e4f532717e1"}, {0x41, 0x0, "8891fbe40d5ef4fa972dc38b21416bd6663c73a28a0ac2e3f9c8efce7516a7b5c315bbec21196be87e2b005fffedd0ea2a9d1e7676eb4528cd26712b23"}, {0xd5, 0x0, "db7ee856758c504ab8f2bb440a2ea024c332ef937fa8e5653e37a4cd1d6b339eef44cf9647c0fa7cd83819606333612853c1f218865502925128fdda6a17f657fcd8ba003deb435c99358229323e7c2f331b16bb7e30133b9a6166073ce578056dca45aa127af40da2fabddb90178db76772ff76eaee6d3382b91dd7c9a4ee65d8b1cbc460e1808eb475f3fa54faa3c24eb1ba00f1a6f84a371345f38013dcf87d8a3ab365ccc37130d5b661fd6de2fb47c28f468de2746e561e8847e2f77fa1afbc3e98d6c5253151df4157ada891427c"}, {0x99, 0x0, "2890cfec9192921f64aa5e1bfa698ceaddc3bf785d4a21d21211636a731b716d06f36d16f10ab5910789273c3ee69d4b84d8ed57fe1311f72bd472aa8103afc62367954e65f8d482bc30a10286a5c2f3913dfb502fc40d279aeb4a501b631b12cd74c57f9382eecd7bc9c1716e2601e3327f8a30eaa3f8ad20c7c2b2db3762cf96c4ad1a0c266450bbce7df99191305a6cba44c411"}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x180, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5}, @NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_SERVICE_INFO={0xf5, 0xb, "594f1a280923b445d649a29df896c715c4c1c76f7ebdb2c6cbb528fa638543a020190ba527648a93d8d9f67a096b33683793959b645540bff0b86130c4c1ae35b2736fa16457cd55e05272b52def4edb191e5e2892d15e93a7c79a56dedb55b90e1b173040925e78375cb20b8b6c53d0ac59b0ccb6f057dc4e54209574c50a6f34953c9ba2f310e2d09e7b9adc89ae89d7ba3b5e10f65ebbabc5699f8ae35fb311f8e58822e3870c63bc04e147122c73b34f7dac8cecf140acb696f327545ea289a2d350057ffc46ab0950c4b3194fb6685e165405747e006d8c103a16c0aaf1e9922edf9a3ecc1b0ac267c40afbc5e763"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x6f, 0xb, "bdd6b051e27dbf9966c154764ca39c51c7d79590b27376828158a53957cf5b91c8d2b03330287ccbfeace8842a7d0b76c8a3ef71273e5efcaa2233deccfd924ec3e5e73ceeec860e5c398aca2df18bb51843b053762428adc8694426a57f0fe14318ae782661200c9e7205"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x1d8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "2de46fb9912f"}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1c4, 0xe, 0x0, 0x1, [{0x1e, 0x0, "694c5bc3bb547ab51552547c4ea2d7105b19b89b3446f17f7e2d"}, {0x69, 0x0, "bd040fb415132e7f9354e278ff42b5a09db4ca7bd9f1a6c8afb816e71aaf9d1c6133981035158187134f03cb54bbfb21ae9f567985881d376dde79917ec0457ae5b23944240c74ddf76ca0092fdb1267629214e21b39ff7ed4b3966e593dcc7f9de7d21373"}, {0x131, 0x0, "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"}]}]}]}, 0xf}}, 0x0) 17:55:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 17:55:07 executing program 5: getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89a1, &(0x7f0000000040)) socketpair(0x0, 0x800, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gretap0\x00', 0x0}) 17:55:07 executing program 4: syz_usb_connect$uac1(0x0, 0x99, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x0, 0x1, "4b1b6e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x6, 0x3f, {0x7}}}}}}}]}}, 0x0) 17:55:07 executing program 0: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 17:55:07 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) pipe2(&(0x7f00000001c0), 0x0) 17:55:07 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10d001) 17:55:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 710.852991][ T3548] usb 5-1: new high-speed USB device number 75 using dummy_hcd 17:55:08 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="03"], 0x20}}, 0x0) [ 711.062240][ T121] usb 3-1: new high-speed USB device number 104 using dummy_hcd 17:55:08 executing program 5: socketpair(0x22, 0x0, 0x4, &(0x7f0000000380)) [ 711.122238][ T3548] usb 5-1: Using ep0 maxpacket: 16 [ 711.242727][ T3548] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 711.256863][ T3548] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 711.267594][ T3548] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 711.278741][ T3548] usb 5-1: config 1 interface 1 has no altsetting 0 [ 711.333198][ T121] usb 3-1: Using ep0 maxpacket: 16 [ 711.462345][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.474028][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.484156][ T121] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 711.494036][ T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.588511][ T3548] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 711.598017][ T3548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.606587][ T3548] usb 5-1: Product: syz [ 711.610900][ T3548] usb 5-1: Manufacturer: syz [ 711.615734][ T3548] usb 5-1: SerialNumber: syz [ 711.632286][ T121] usb 3-1: config 0 descriptor?? [ 711.967572][ T3548] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 712.033020][ T3548] usb 5-1: USB disconnect, device number 75 [ 712.084123][T12585] UDC core: couldn't find an available UDC or it's busy: -16 [ 712.092014][T12585] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 712.121348][T12180] udevd[12180]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 712.121898][T12585] UDC core: couldn't find an available UDC or it's busy: -16 [ 712.145292][T12585] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 712.177701][ T121] hid (null): bogus close delimiter [ 712.212585][ T121] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0011/input/input40 [ 712.296801][ T121] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0011/input/input41 [ 712.367531][ T121] kye 0003:0458:5019.0011: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 712.400125][ T121] usb 3-1: USB disconnect, device number 104 17:55:09 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x0, 0x1, 0x77}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0xd, 0x3}]}, 0x1, [{0x42, &(0x7f0000000280)=@string={0x42, 0x3, "16f552bf04fb9af69beed9e2bc12a73682cc67fd13e02bd7863bcd1ed6993f0a104590451de4d59afab89779aa661bdee93b315fb236adf47ba4865ef834bdf0"}}]}) syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x0, 0x5}]}, 0x2, [{0x73, &(0x7f00000001c0)=@string={0x73, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f700c0d88d694a6a3be9f91f721e488fd7ba7dbccb471e448df83343cea5772d33665c062fb02954327c2eabc5f6d7118f97a4399070218b84967fe7c2d5cf571bbea70f8a05942a65d9d7939aa589ebad1ac82303"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:55:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) 17:55:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@ipv4_newaddr={0x18, 0x14, 0x229}, 0x18}}, 0x0) 17:55:10 executing program 3: syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xb3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x48, 0x4, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x1, 0xd6, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0x85}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x8, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x2, 0xff, 0x1}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x4, 0x1, 0x9, 0x10, 0x7f}, 0x23, &(0x7f00000000c0)={0x5, 0xf, 0x23, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x1, 0x7fff}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "343fcdf0d368a4f01ad03ffb109ae664"}]}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44b}}, {0xe4, &(0x7f0000000180)=@string={0xe4, 0x3, "221af8d1aca4c1a71850f8b843706410456468c0c9bf7cf3e0bcd2a989052c04f6c4b4afb1e581f75eeb4421731fdf2a3a04c81573cee001563a16397339bb76beb0f0559bbc8248b7dd7be555b367cd64e4d1eecbdf3e5092bd003f2ad61651e522fb0f735bef1fc4fb02ec2ff154c49a25fd204ae3ed46231416e3f8645ad0536b643dacda39bafc43f5c391edaf2ca1a9a09f0f1746e5e5b2ab494ec3a077d5d852f9865aaff7d6793616e79e782cc126432b756f18e620b238dd15f13cf12197da2f93897b8cf87c295c89cf407f875fb188676d77011a2316bcdb8ddb0b625b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x445}}, {0xb2, &(0x7f00000002c0)=@string={0xb2, 0x3, "6a222b7fdbf7344c32db2dc290f2884d073bc3547137b1d231835c00f1386c215c53b9534e418d640f641ec928b94377fa9998f8d96d5e3f4ce2efaad8d91e8148e258a4418bd264eb29feaba6fe9b1787f15a7581ca1c615708526b1c6ff1a95bf5061874edd3f460fe457741641d60d1fc7068210a46cd3bfc1e16cea247df236cb9abcc19ff7d1604605fde5b02196f745804b298762deec8566d26d7821cb863e0159761c0b32133d57827d1661c"}}]}) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x5421, 0x0) 17:55:10 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) 17:55:10 executing program 4: syz_usb_connect$uac1(0x0, 0xa0, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x0, 0x1, "4b1b6e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x6, 0x3f, {0x7}}}}}}}]}}, 0x0) 17:55:10 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 17:55:10 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)) syz_mount_image$tmpfs(&(0x7f0000006ac0), &(0x7f0000006b00)='./file0\x00', 0x0, 0x0, 0x0, 0xa0000, &(0x7f0000006c00)=ANY=[]) 17:55:10 executing program 5: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x3}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000000c0)=@string={0x2}}, {0x0, 0x0}]}) [ 713.273682][ T121] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 713.331873][ T3548] usb 4-1: new high-speed USB device number 16 using dummy_hcd 17:55:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x90}}, 0x0) 17:55:10 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x930, 0x2000004, 0x10, r0, 0x0) [ 713.451122][ T3633] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 713.512294][ T121] usb 5-1: Using ep0 maxpacket: 16 [ 713.572034][ T3548] usb 4-1: Using ep0 maxpacket: 16 17:55:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x90}}, 0x0) [ 713.633723][ T121] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 713.645119][ T121] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 713.655323][ T121] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 713.666507][ T121] usb 5-1: config 1 interface 1 has no altsetting 0 [ 713.682755][ T3547] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 713.712256][ T3633] usb 3-1: Using ep0 maxpacket: 16 [ 713.792974][ T3548] usb 4-1: config 1 interface 0 has no altsetting 0 [ 713.853672][ T121] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 713.855224][ T3633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.863188][ T121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.874472][ T3633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.874642][ T3633] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 713.882775][ T121] usb 5-1: Product: syz [ 713.892497][ T3633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.901600][ T121] usb 5-1: Manufacturer: syz [ 713.921513][ T121] usb 5-1: SerialNumber: syz [ 713.962752][ T3547] usb 6-1: Using ep0 maxpacket: 32 [ 714.003578][ T3548] usb 4-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.40 [ 714.009230][ T3633] usb 3-1: config 0 descriptor?? [ 714.012953][ T3548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.013066][ T3548] usb 4-1: Product: ᨢ퇸꒬ꟁ倘룸灃ၤ摅쁨뿉볠꧒։Ь쓶꾴⅄έ⫟кᗈ칳Ǡ㩖㤖㥳皻낾嗰벛䢂덕쵧倾붒㼀혪儖⋥࿻孳`﯄쑔▚⃽䛭ᐣ擸큚歓㵤먹䏼쏵ⲯꦡ龠ᜏ닥䦫썎瞠勒媆秖ᘶ黧ⱸ⛁⭃潵눠霡⿚覓豻糸尩쾉罀徇袱浧ŷ⌚밖跛௛孢 [ 714.013241][ T3548] usb 4-1: Manufacturer: ы [ 714.013330][ T3548] usb 4-1: SerialNumber: х [ 714.132953][ T3547] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 714.182441][ T3547] usb 6-1: language id specifier not provided by device, defaulting to English [ 714.442473][ T121] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 714.451172][ T121] usb 5-1: found format II with max.bitrate = 0, frame size=0 [ 714.459413][ T121] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 714.468126][ T121] usb 5-1: found format II with max.bitrate = 0, frame size=0 [ 714.544963][T12612] UDC core: couldn't find an available UDC or it's busy: -16 [ 714.552950][T12612] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 714.560772][ T3547] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 714.568271][ T3548] usbhid 4-1:1.0: can't add hid device: -71 [ 714.570382][ T3547] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.576259][ T3548] usbhid: probe of 4-1:1.0 failed with error -71 [ 714.584136][ T3547] usb 6-1: Product: syz [ 714.584231][ T3547] usb 6-1: SerialNumber: syz [ 714.637838][ T3633] hid (null): global environment stack underflow [ 714.660627][ T121] usb 5-1: USB disconnect, device number 76 [ 714.733526][ T3633] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0012/input/input42 [ 714.793535][ T3548] usb 4-1: USB disconnect, device number 16 [ 714.821368][ T3633] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0012/input/input43 [ 714.878717][ T3542] usb 6-1: USB disconnect, device number 20 [ 714.895595][ T3633] kye 0003:0458:5019.0012: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 715.000635][T12073] udevd[12073]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 715.003302][ T3633] usb 3-1: USB disconnect, device number 105 17:55:12 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x0, 0x1, 0x77}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0xd, 0x3}]}, 0x1, [{0x42, &(0x7f0000000280)=@string={0x42, 0x3, "16f552bf04fb9af69beed9e2bc12a73682cc67fd13e02bd7863bcd1ed6993f0a104590451de4d59afab89779aa661bdee93b315fb236adf47ba4865ef834bdf0"}}]}) syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x0, 0x5}]}, 0x2, [{0x73, &(0x7f00000001c0)=@string={0x73, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f700c0d88d694a6a3be9f91f721e488fd7ba7dbccb471e448df83343cea5772d33665c062fb02954327c2eabc5f6d7118f97a4399070218b84967fe7c2d5cf571bbea70f8a05942a65d9d7939aa589ebad1ac82303"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:55:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) 17:55:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x90}}, 0x0) 17:55:12 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "06a8e8a1c9f2cf375773bc27fa51766682302dbb2eb59ac9b3eea19cdcb4b9c12fec5fc2364f3625bf4a7eb1192bae210e2e5eaaf3f9acfaeccb0a74fc6e31", 0x1a}, 0x60) 17:55:12 executing program 4: syz_usb_connect$uac1(0x0, 0xa0, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x0, 0x1, "4b1b6e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x6, 0x3f, {0x7}}}}}}}]}}, 0x0) 17:55:12 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x4c, 0x0, &(0x7f0000000400)) 17:55:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x7}}) 17:55:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x4c, 0x0, 0x20) 17:55:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x90}}, 0x0) [ 715.773379][ T121] usb 5-1: new high-speed USB device number 77 using dummy_hcd 17:55:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x1, 0x201}, 0x14}}, 0x0) 17:55:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) [ 715.962039][ T3542] usb 3-1: new high-speed USB device number 106 using dummy_hcd 17:55:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000400)) [ 716.012428][ T121] usb 5-1: Using ep0 maxpacket: 16 [ 716.132721][ T121] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 716.144216][ T121] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 716.154259][ T121] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 716.168919][ T121] usb 5-1: config 1 interface 1 has no altsetting 0 [ 716.212551][ T3542] usb 3-1: Using ep0 maxpacket: 16 [ 716.342944][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.354962][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.365054][ T3542] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 716.374357][ T3542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.432736][ T121] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 716.442594][ T121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.450761][ T121] usb 5-1: Product: syz [ 716.455332][ T121] usb 5-1: Manufacturer: syz [ 716.460067][ T121] usb 5-1: SerialNumber: syz [ 716.509543][ T3542] usb 3-1: config 0 descriptor?? [ 716.842438][ T121] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 716.851154][ T121] usb 5-1: found format II with max.bitrate = 0, frame size=0 [ 716.859187][ T121] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 716.867896][ T121] usb 5-1: found format II with max.bitrate = 0, frame size=0 [ 716.973056][ T121] usb 5-1: USB disconnect, device number 77 [ 717.007998][T12634] UDC core: couldn't find an available UDC or it's busy: -16 [ 717.015793][T12634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 717.085858][ T3542] hid (null): global environment stack underflow [ 717.123831][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0013/input/input44 [ 717.127496][T12150] udevd[12150]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 717.232412][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0013/input/input45 [ 717.376229][ T3542] kye 0003:0458:5019.0013: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 717.407965][ T3542] usb 3-1: USB disconnect, device number 106 17:55:14 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x0, 0x1, 0x77}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0xd, 0x3}]}, 0x1, [{0x42, &(0x7f0000000280)=@string={0x42, 0x3, "16f552bf04fb9af69beed9e2bc12a73682cc67fd13e02bd7863bcd1ed6993f0a104590451de4d59afab89779aa661bdee93b315fb236adf47ba4865ef834bdf0"}}]}) syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x0, 0x5}]}, 0x2, [{0x73, &(0x7f00000001c0)=@string={0x73, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f700c0d88d694a6a3be9f91f721e488fd7ba7dbccb471e448df83343cea5772d33665c062fb02954327c2eabc5f6d7118f97a4399070218b84967fe7c2d5cf571bbea70f8a05942a65d9d7939aa589ebad1ac82303"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:55:14 executing program 1: syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) 17:55:14 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@rand_addr=' \x01\x00'}, 0x14) 17:55:14 executing program 0: socketpair(0x37, 0x80000, 0x0, &(0x7f0000000000)) 17:55:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getroute={0xc0}, 0x14}}, 0x0) 17:55:14 executing program 4: syz_usb_connect$uac1(0x0, 0xa0, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x0, 0x1, "4b1b6e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x6, 0x3f, {0x7}}}}}}}]}}, 0x0) 17:55:15 executing program 1: bpf$BPF_PROG_QUERY(0x21, &(0x7f0000000180)={0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0}, 0x20) 17:55:15 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x9000) 17:55:15 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@rand_addr=' \x01\x00'}, 0x14) 17:55:15 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3a, 0x0, &(0x7f0000000400)) [ 718.192429][ T121] usb 5-1: new high-speed USB device number 78 using dummy_hcd 17:55:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file1\x00'}, 0x6e) [ 718.302146][ T3548] usb 3-1: new high-speed USB device number 107 using dummy_hcd 17:55:15 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "06a8e8a1c9f2cf375773bc27fa51766682302dbb2eb59ac9b3eea19cdcb4b9c12fec5fc2364f3625bf4a7eb1192bae210e2e5eaaf3f9acfaeccb0a74fc6e31", 0x1a}, 0x60) sendmmsg$nfc_llcp(r0, &(0x7f0000001f80)=[{&(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "896f1a6c5ab907d3a0a90761644e7a56e8ed100755be30b1131146fc4589e2d155624502101ee6a49a62b588f4d1dab5b46267bf8d9f23b059c80e6b4f21e5"}, 0x60, 0x0}], 0x1, 0x0) [ 718.432341][ T121] usb 5-1: Using ep0 maxpacket: 16 [ 718.542694][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 718.554127][ T121] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 718.565416][ T121] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 718.575463][ T121] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 718.586754][ T121] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 718.596770][ T121] usb 5-1: config 1 interface 1 has no altsetting 0 [ 718.702746][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.714461][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.727721][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 718.737546][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.782571][ T121] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 718.792167][ T121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.800335][ T121] usb 5-1: Product: syz [ 718.804833][ T121] usb 5-1: Manufacturer: syz [ 718.809576][ T121] usb 5-1: SerialNumber: syz [ 718.891892][ T3548] usb 3-1: config 0 descriptor?? [ 719.265694][ T121] usb 5-1: USB disconnect, device number 78 [ 719.345971][T12076] udevd[12076]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 719.354282][T12660] UDC core: couldn't find an available UDC or it's busy: -16 [ 719.369952][T12660] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 719.395615][ T3548] hid (null): global environment stack underflow [ 719.423831][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0014/input/input46 [ 719.509552][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0014/input/input47 [ 719.589257][ T3548] kye 0003:0458:5019.0014: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 719.619638][ T3548] usb 3-1: USB disconnect, device number 107 17:55:17 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x80, 0x81, [{{0x9, 0x4, 0x0, 0x1f, 0x0, 0x7, 0x1, 0x0, 0x73, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xff, 0xff, 0x3}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x0, 0x1, 0x77}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0xd, 0x3}]}, 0x1, [{0x42, &(0x7f0000000280)=@string={0x42, 0x3, "16f552bf04fb9af69beed9e2bc12a73682cc67fd13e02bd7863bcd1ed6993f0a104590451de4d59afab89779aa661bdee93b315fb236adf47ba4865ef834bdf0"}}]}) syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x0, 0x5}]}, 0x2, [{0x73, &(0x7f00000001c0)=@string={0x73, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f700c0d88d694a6a3be9f91f721e488fd7ba7dbccb471e448df83343cea5772d33665c062fb02954327c2eabc5f6d7118f97a4399070218b84967fe7c2d5cf571bbea70f8a05942a65d9d7939aa589ebad1ac82303"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:55:17 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0x68, 0x0, &(0x7f0000000280)) 17:55:17 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@rand_addr=' \x01\x00'}, 0x14) 17:55:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x84, 0x76, 0x0, &(0x7f0000000400)) 17:55:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001540)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001500)=[@rights={{0x10}}], 0x10}, 0x1) 17:55:17 executing program 4: syz_usb_connect$uac1(0x0, 0xa0, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x0, 0x1, "4b1b6e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x6, 0x3f, {0x7}}}}}}}]}}, 0x0) 17:55:17 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001200)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x3, 0x1000, &(0x7f0000000140)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[0xffffffffffffffff]}, 0x80) 17:55:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x4, 0x1, 0x401}, 0x14}}, 0x0) 17:55:17 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x9, &(0x7f0000000440)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x7}, @func, @map_val, @map_idx_val, @cb_func], &(0x7f00000000c0)='GPL\x00', 0x5, 0xfb, &(0x7f0000000100)=""/251, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:55:17 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@rand_addr=' \x01\x00'}, 0x14) [ 720.532524][ T121] usb 5-1: new high-speed USB device number 79 using dummy_hcd 17:55:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x22}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) 17:55:17 executing program 3: setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@rand_addr=' \x01\x00'}, 0x14) [ 720.762685][ T3633] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 720.773563][ T121] usb 5-1: Using ep0 maxpacket: 16 [ 720.893479][ T121] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 720.904582][ T121] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 720.914593][ T121] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 720.925749][ T121] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 720.935822][ T121] usb 5-1: config 1 interface 1 has no altsetting 0 [ 721.012316][ T3633] usb 3-1: Using ep0 maxpacket: 16 [ 721.133883][ T3633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.145065][ T3633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.155140][ T3633] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 721.164446][ T3633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.186674][ T121] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 721.196195][ T121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.204499][ T121] usb 5-1: Product: syz [ 721.208800][ T121] usb 5-1: Manufacturer: syz [ 721.213844][ T121] usb 5-1: SerialNumber: syz [ 721.276499][ T3633] usb 3-1: config 0 descriptor?? [ 721.622139][ T121] usb 5-1: USB disconnect, device number 79 [ 721.686649][T12180] udevd[12180]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 721.743657][T12684] UDC core: couldn't find an available UDC or it's busy: -16 [ 721.751191][T12684] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 721.763673][T12684] UDC core: couldn't find an available UDC or it's busy: -16 [ 721.771345][T12684] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 721.814191][ T3633] hid (null): bogus close delimiter [ 721.832760][ T3633] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0015/input/input48 [ 721.916853][ T3633] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0015/input/input49 [ 721.994134][ T3633] kye 0003:0458:5019.0015: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 722.052287][ T3633] usb 3-1: USB disconnect, device number 108 17:55:19 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x81, [{{0x9, 0x4, 0x0, 0x1f, 0x0, 0x7, 0x1, 0x0, 0x73, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xff, 0xff, 0x3}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x0, 0x1, 0x77}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0xd, 0x3}]}, 0x1, [{0x42, &(0x7f0000000280)=@string={0x42, 0x3, "16f552bf04fb9af69beed9e2bc12a73682cc67fd13e02bd7863bcd1ed6993f0a104590451de4d59afab89779aa661bdee93b315fb236adf47ba4865ef834bdf0"}}]}) syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x0, 0x5}]}, 0x2, [{0x73, &(0x7f00000001c0)=@string={0x73, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f700c0d88d694a6a3be9f91f721e488fd7ba7dbccb471e448df83343cea5772d33665c062fb02954327c2eabc5f6d7118f97a4399070218b84967fe7c2d5cf571bbea70f8a05942a65d9d7939aa589ebad1ac82303"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:55:19 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40002020, 0x0, 0x0) 17:55:19 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x4d, 0x0, &(0x7f0000000400)) 17:55:19 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000032c0)={0x0, 0x3938700}) 17:55:19 executing program 3: setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@rand_addr=' \x01\x00'}, 0x14) 17:55:19 executing program 4: syz_usb_connect$uac1(0x0, 0xa0, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x0, 0x1, "4b1b6e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x6, 0x3f, {0x7}}}}}}}]}}, 0x0) 17:55:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc) 17:55:19 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 17:55:19 executing program 3: setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@rand_addr=' \x01\x00'}, 0x14) 17:55:19 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x84, 0x71, 0x0, &(0x7f0000000400)) [ 722.932095][ T121] usb 5-1: new high-speed USB device number 80 using dummy_hcd 17:55:20 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) 17:55:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@rand_addr=' \x01\x00'}, 0x14) [ 723.132790][ T3548] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 723.192101][ T121] usb 5-1: Using ep0 maxpacket: 16 [ 723.322881][ T121] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 723.337138][ T121] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 723.347699][ T121] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 723.358848][ T121] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 723.370379][ T121] usb 5-1: config 1 interface 1 has no altsetting 0 [ 723.422240][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 723.543632][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.554894][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.565612][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 723.574922][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.602665][ T121] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 723.612735][ T121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.620901][ T121] usb 5-1: Product: syz [ 723.625359][ T121] usb 5-1: Manufacturer: syz [ 723.630107][ T121] usb 5-1: SerialNumber: syz [ 723.683187][ T3548] usb 3-1: config 0 descriptor?? [ 724.076016][ T121] usb 5-1: USB disconnect, device number 80 [ 724.105088][T12076] udevd[12076]: setting owner of /dev/bus/usb/005/080 to uid=0, gid=0 failed: No such file or directory [ 724.162634][T12708] UDC core: couldn't find an available UDC or it's busy: -16 [ 724.164769][T12076] udevd[12076]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 724.170228][T12708] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 724.227447][T12708] UDC core: couldn't find an available UDC or it's busy: -16 [ 724.235101][T12708] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 724.264333][ T3548] hid (null): bogus close delimiter [ 724.284193][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0016/input/input50 [ 724.377947][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0016/input/input51 [ 724.450290][ T3548] kye 0003:0458:5019.0016: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 724.499394][ T3548] usb 3-1: USB disconnect, device number 109 17:55:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x6, 0x0, &(0x7f0000000400)) 17:55:22 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x40086602, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 17:55:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newneigh={0x1c, 0x1c, 0x401, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 17:55:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@rand_addr=' \x01\x00'}, 0x14) 17:55:22 executing program 4: syz_usb_connect$uac1(0x0, 0xa0, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x0, 0x1, "4b1b6e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x3f, {0x7}}}}}}}]}}, 0x0) 17:55:22 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0x1f, 0x0, 0x7, 0x1, 0x0, 0x73, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xff, 0xff, 0x3}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x0, 0x1, 0x77}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0xd, 0x3}]}, 0x1, [{0x42, &(0x7f0000000280)=@string={0x42, 0x3, "16f552bf04fb9af69beed9e2bc12a73682cc67fd13e02bd7863bcd1ed6993f0a104590451de4d59afab89779aa661bdee93b315fb236adf47ba4865ef834bdf0"}}]}) syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x0, 0x5}]}, 0x2, [{0x73, &(0x7f00000001c0)=@string={0x73, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f700c0d88d694a6a3be9f91f721e488fd7ba7dbccb471e448df83343cea5772d33665c062fb02954327c2eabc5f6d7118f97a4399070218b84967fe7c2d5cf571bbea70f8a05942a65d9d7939aa589ebad1ac82303"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:55:22 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x84, 0x9, 0x0, &(0x7f0000000400)) 17:55:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) 17:55:22 executing program 1: r0 = epoll_create1(0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000340)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)) [ 725.343265][ T3548] usb 5-1: new high-speed USB device number 81 using dummy_hcd 17:55:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@rand_addr=' \x01\x00'}, 0x14) 17:55:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}}, 0x0) [ 725.623025][ T3548] usb 5-1: Using ep0 maxpacket: 16 [ 725.642663][ T121] usb 3-1: new high-speed USB device number 110 using dummy_hcd 17:55:22 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040), 0x4) [ 725.753339][ T3548] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 725.764492][ T3548] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 725.774486][ T3548] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 725.785640][ T3548] usb 5-1: config 1 interface 1 has no altsetting 0 [ 725.923352][ T121] usb 3-1: Using ep0 maxpacket: 16 [ 726.043338][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.054848][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.065105][ T121] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 726.074933][ T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.084669][ T3548] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 726.097065][ T3548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.106169][ T3548] usb 5-1: Product: syz [ 726.110465][ T3548] usb 5-1: Manufacturer: syz [ 726.115380][ T3548] usb 5-1: SerialNumber: syz [ 726.229048][ T121] usb 3-1: config 0 descriptor?? [ 726.552486][ T3548] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 726.561117][ T3548] usb 5-1: found format II with max.bitrate = 0, frame size=0 [ 726.569756][ T3548] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 726.578523][ T3548] usb 5-1: found format II with max.bitrate = 0, frame size=0 [ 726.696621][T12738] UDC core: couldn't find an available UDC or it's busy: -16 [ 726.704356][T12738] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 726.720902][ T3548] usb 5-1: USB disconnect, device number 81 [ 726.731414][T12738] UDC core: couldn't find an available UDC or it's busy: -16 [ 726.739867][T12738] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 726.774747][ T121] hid (null): bogus close delimiter [ 726.853513][T12150] udevd[12150]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 726.867367][ T121] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0017/input/input52 [ 726.957535][ T121] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0017/input/input53 [ 727.049838][ T121] kye 0003:0458:5019.0017: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 727.083414][ T121] usb 3-1: USB disconnect, device number 110 17:55:24 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000300)={@private2, @remote, @ipv4={'\x00', '\xff\xff', @private}}) 17:55:24 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48) 17:55:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x2, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 17:55:24 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@rand_addr=' \x01\x00'}, 0x14) 17:55:24 executing program 4: syz_usb_connect$uac1(0x0, 0xa0, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x0, 0x1, "4b1b6e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:55:24 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1f, 0x0, 0x7, 0x1, 0x0, 0x73, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xff, 0xff, 0x3}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x0, 0x1, 0x77}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0xd, 0x3}]}, 0x1, [{0x42, &(0x7f0000000280)=@string={0x42, 0x3, "16f552bf04fb9af69beed9e2bc12a73682cc67fd13e02bd7863bcd1ed6993f0a104590451de4d59afab89779aa661bdee93b315fb236adf47ba4865ef834bdf0"}}]}) syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x0, 0x5}]}, 0x2, [{0x73, &(0x7f00000001c0)=@string={0x73, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f700c0d88d694a6a3be9f91f721e488fd7ba7dbccb471e448df83343cea5772d33665c062fb02954327c2eabc5f6d7118f97a4399070218b84967fe7c2d5cf571bbea70f8a05942a65d9d7939aa589ebad1ac82303"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:55:24 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@rand_addr=' \x01\x00'}, 0x14) 17:55:24 executing program 0: r0 = socket(0x28, 0x5, 0x0) sendmmsg$unix(r0, &(0x7f0000001200)=[{{&(0x7f0000000100)=@abs, 0x6e, 0x0}}], 0x1, 0x0) 17:55:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x18, 0x1, 0x2, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) 17:55:24 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x48000, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x20) [ 727.912746][ T3548] usb 5-1: new high-speed USB device number 82 using dummy_hcd 17:55:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8914, &(0x7f0000000100)={'gre0\x00', 0x0}) 17:55:25 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@rand_addr=' \x01\x00'}, 0x14) [ 728.072441][T10966] usb 3-1: new high-speed USB device number 111 using dummy_hcd 17:55:25 executing program 1: r0 = socket(0x28, 0x5, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) 17:55:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 728.163520][ T3548] usb 5-1: Using ep0 maxpacket: 16 [ 728.283022][ T3548] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 728.294617][ T3548] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 728.304626][ T3548] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 728.315807][ T3548] usb 5-1: config 1 interface 1 has no altsetting 0 [ 728.323484][T10966] usb 3-1: Using ep0 maxpacket: 16 [ 728.442681][T10966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.457184][T10966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.467877][T10966] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 728.477232][T10966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:55:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f00000000c0)={@rand_addr=' \x01\x00'}, 0x14) [ 728.585429][T10966] usb 3-1: config 0 descriptor?? 17:55:25 executing program 1: r0 = socket(0x2a, 0x2, 0x0) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "9ac2fa0dd606f832dc722fce95720c09b652bfcf78054d242fff72ee2bdebec1f5ea42dae2b6c50f901c6051877201d516862cc78aaeb9fae3317eb2ad92b7"}, 0x60) [ 728.643234][ T3548] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 728.652647][ T3548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.663921][ T3548] usb 5-1: Product: syz [ 728.668250][ T3548] usb 5-1: Manufacturer: syz [ 728.673939][ T3548] usb 5-1: SerialNumber: syz [ 729.055940][T12766] UDC core: couldn't find an available UDC or it's busy: -16 [ 729.067094][T12766] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 729.112597][ T3548] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 729.121499][ T3548] usb 5-1: found format II with max.bitrate = 0, frame size=0 [ 729.130406][ T3548] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 729.139208][ T3548] usb 5-1: found format II with max.bitrate = 0, frame size=0 [ 729.154351][T12766] UDC core: couldn't find an available UDC or it's busy: -16 [ 729.162443][T12766] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 729.245003][T10966] hid (null): bogus close delimiter [ 729.281646][T10966] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0018/input/input54 [ 729.376138][T10966] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0018/input/input55 [ 729.446672][ T3548] usb 5-1: USB disconnect, device number 82 [ 729.527930][T10966] kye 0003:0458:5019.0018: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 729.530761][T12088] udevd[12088]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 729.549097][T10966] usb 3-1: USB disconnect, device number 111 17:55:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f00000000c0)={@rand_addr=' \x01\x00'}, 0x14) 17:55:27 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cbc-camellia-asm,sha384-generic)\x00'}, 0x38) 17:55:27 executing program 0: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x18, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 17:55:27 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 17:55:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f00000000c0)={@rand_addr=' \x01\x00'}, 0x14) 17:55:27 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x73, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xff, 0xff, 0x3}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x0, 0x1, 0x77}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0xd, 0x3}]}, 0x1, [{0x42, &(0x7f0000000280)=@string={0x42, 0x3, "16f552bf04fb9af69beed9e2bc12a73682cc67fd13e02bd7863bcd1ed6993f0a104590451de4d59afab89779aa661bdee93b315fb236adf47ba4865ef834bdf0"}}]}) syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x0, 0x5}]}, 0x2, [{0x73, &(0x7f00000001c0)=@string={0x73, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f700c0d88d694a6a3be9f91f721e488fd7ba7dbccb471e448df83343cea5772d33665c062fb02954327c2eabc5f6d7118f97a4399070218b84967fe7c2d5cf571bbea70f8a05942a65d9d7939aa589ebad1ac82303"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:55:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8954, 0x0) 17:55:27 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getqdisc={0x24}, 0x24}}, 0x0) 17:55:27 executing program 0: r0 = socket(0x23, 0x2, 0x0) bind$unix(r0, &(0x7f0000000140)=@abs, 0x6e) 17:55:27 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, "be2af28318ddfb49271115d58da0c7c5bd4bf4e46e9662fb1c5f32a302c2054145397f40a811b24da35451013b7bf2c847a21d6af5bfb92a31e97bf1c4966f"}, 0x60, &(0x7f0000000080)=[{&(0x7f0000000140)='\\', 0x1}], 0x1, &(0x7f00000002c0)={0x10}, 0x2}, 0x0) 17:55:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) [ 730.572510][ T3542] usb 3-1: new high-speed USB device number 112 using dummy_hcd 17:55:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000060a01"], 0xb8}}, 0x0) 17:55:27 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) [ 730.841975][ T3542] usb 3-1: Using ep0 maxpacket: 16 17:55:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14}, 0x48) 17:55:28 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) 17:55:28 executing program 0: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0) [ 730.962737][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.974307][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.984383][ T3542] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 730.993715][ T3542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.108908][T12817] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.4'. 17:55:28 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) [ 731.241326][ T3542] usb 3-1: config 0 descriptor?? [ 731.704362][T12801] UDC core: couldn't find an available UDC or it's busy: -16 [ 731.712080][T12801] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 731.722897][T12801] UDC core: couldn't find an available UDC or it's busy: -16 [ 731.733484][T12801] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 731.754286][ T3542] hid (null): bogus close delimiter [ 731.778846][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0019/input/input56 [ 731.867041][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0019/input/input57 [ 731.886014][ T3542] kye 0003:0458:5019.0019: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 731.958471][T10966] usb 3-1: USB disconnect, device number 112 17:55:29 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xff, 0xff, 0x3}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x0, 0x1, 0x77}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0xd, 0x3}]}, 0x1, [{0x42, &(0x7f0000000280)=@string={0x42, 0x3, "16f552bf04fb9af69beed9e2bc12a73682cc67fd13e02bd7863bcd1ed6993f0a104590451de4d59afab89779aa661bdee93b315fb236adf47ba4865ef834bdf0"}}]}) syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x0, 0x5}]}, 0x2, [{0x73, &(0x7f00000001c0)=@string={0x73, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f700c0d88d694a6a3be9f91f721e488fd7ba7dbccb471e448df83343cea5772d33665c062fb02954327c2eabc5f6d7118f97a4399070218b84967fe7c2d5cf571bbea70f8a05942a65d9d7939aa589ebad1ac82303"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:55:29 executing program 0: r0 = socket(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, @in, 0x0, 0x0, 0x100}, 0x98) 17:55:29 executing program 1: write$nbd(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cbc-camellia-asm,sha384-generic)\x00'}, 0x58) 17:55:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) 17:55:29 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x7, &(0x7f0000000000)=@framed={{}, [@jmp, @map_val={0x18, 0x0, 0x2, 0x0, r0}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x6, 0xe3, &(0x7f0000000640)=""/227, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:55:29 executing program 3: r0 = socket(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x3a) 17:55:29 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40002041) 17:55:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002600)={&(0x7f00000000c0)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000025c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20}, 0x0) 17:55:29 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)) lsetxattr$trusted_overlay_origin(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), 0x0, 0x0, 0x0) 17:55:29 executing program 4: socket$inet(0x2, 0x0, 0x0) getrusage(0x0, &(0x7f0000000500)) 17:55:30 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={'trans=tcp,', {}, 0x2c, {[{@msize}]}}) [ 733.064154][T10966] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 733.077136][T12843] 9pnet_fd: p9_fd_create_tcp (12843): problem connecting socket to 127.0.0.1 17:55:30 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000140)=@raw=[@btf_id, @cb_func={0x18, 0x1, 0x4, 0x0, 0x5}], &(0x7f0000000180)='syzkaller\x00', 0x7, 0xd2, &(0x7f00000001c0)=""/210, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), 0x8, 0x10, 0x0}, 0x80) [ 733.342395][T10966] usb 3-1: Using ep0 maxpacket: 16 [ 733.474799][T10966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.486851][T10966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.496979][T10966] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 733.506391][T10966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.711054][T10966] usb 3-1: config 0 descriptor?? [ 734.187402][T12837] UDC core: couldn't find an available UDC or it's busy: -16 [ 734.195144][T12837] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 734.206082][T12837] UDC core: couldn't find an available UDC or it's busy: -16 [ 734.213950][T12837] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 734.244206][T10966] hid (null): bogus close delimiter [ 734.262843][T10966] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001A/input/input58 [ 734.347873][T10966] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001A/input/input59 [ 734.420781][T10966] kye 0003:0458:5019.001A: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 734.459845][ T3542] usb 3-1: USB disconnect, device number 113 17:55:32 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff, 0x3}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x0, 0x1, 0x77}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0xd, 0x3}]}, 0x1, [{0x42, &(0x7f0000000280)=@string={0x42, 0x3, "16f552bf04fb9af69beed9e2bc12a73682cc67fd13e02bd7863bcd1ed6993f0a104590451de4d59afab89779aa661bdee93b315fb236adf47ba4865ef834bdf0"}}]}) syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x0, 0x5}]}, 0x2, [{0x73, &(0x7f00000001c0)=@string={0x73, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f700c0d88d694a6a3be9f91f721e488fd7ba7dbccb471e448df83343cea5772d33665c062fb02954327c2eabc5f6d7118f97a4399070218b84967fe7c2d5cf571bbea70f8a05942a65d9d7939aa589ebad1ac82303"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:55:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002780), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000008000030000f70b00050000000000000000000c00050000000000000000002c2ba4c500d6e52523d1d7a02e2471e4e38d6d5884a7afc9aa1a6aa7ccd52c02bea6f92ced5342b0ead7699e0fc689c8cbd403c6f3785e5e25cc85baee535f0a8100f13c3fa1201f0db532a16b090d48f9f6535a7031b470692d3f804c6fa65eb3593f1bd0ec993a"], 0x2c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) 17:55:32 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x350, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}) 17:55:32 executing program 0: r0 = getpgrp(0x0) r1 = syz_open_dev$mouse(&(0x7f00000013c0), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, r1, 0x0, 0x0, 0x0}, 0x30) 17:55:32 executing program 4: add_key$fscrypt_provisioning(&(0x7f0000000500), 0x0, 0x0, 0x0, 0xfffffffffffffff9) 17:55:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)) [ 735.079740][T12867] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 17:55:32 executing program 5: clock_gettime(0x0, &(0x7f0000004b00)) 17:55:32 executing program 4: openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 17:55:32 executing program 0: waitid(0x2, 0x0, 0x0, 0x20000000, 0x0) pipe2(&(0x7f0000000100), 0x0) syz_read_part_table(0x4, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10001}]) 17:55:32 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)) syz_genetlink_get_family_id$tipc(&(0x7f0000000e80), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) [ 735.362398][ T3542] usb 2-1: new high-speed USB device number 13 using dummy_hcd 17:55:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 17:55:32 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2, &(0x7f0000000240)=@raw=[@map_idx], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket(0x0, 0x0, 0x0) [ 735.533811][T12878] 9pnet_fd: p9_fd_create_tcp (12878): problem connecting socket to 127.0.0.1 [ 735.592395][T10966] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 735.612526][ T3542] usb 2-1: Using ep0 maxpacket: 16 [ 735.817298][ T3542] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 735.853512][T10966] usb 3-1: Using ep0 maxpacket: 16 [ 735.972716][T10966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.982595][ T3542] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 735.984122][T10966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.993135][ T3542] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.003028][T10966] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 736.003163][T10966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.030541][ T3542] usb 2-1: Product: syz [ 736.035338][ T3542] usb 2-1: Manufacturer: syz [ 736.040086][ T3542] usb 2-1: SerialNumber: syz [ 736.143931][T10966] usb 3-1: config 0 descriptor?? [ 736.319171][ T3548] usb 2-1: USB disconnect, device number 13 [ 736.608620][T12871] UDC core: couldn't find an available UDC or it's busy: -16 [ 736.616511][T12871] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 736.628720][T12871] UDC core: couldn't find an available UDC or it's busy: -16 [ 736.636285][T12871] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 736.664190][T10966] hid (null): bogus close delimiter [ 736.690847][T10966] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001B/input/input60 [ 736.779416][T10966] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001B/input/input61 [ 736.854626][T10966] kye 0003:0458:5019.001B: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 736.890441][T10966] usb 3-1: USB disconnect, device number 114 17:55:34 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x0, 0x1, 0x77}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0xd, 0x3}]}, 0x1, [{0x42, &(0x7f0000000280)=@string={0x42, 0x3, "16f552bf04fb9af69beed9e2bc12a73682cc67fd13e02bd7863bcd1ed6993f0a104590451de4d59afab89779aa661bdee93b315fb236adf47ba4865ef834bdf0"}}]}) syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x0, 0x5}]}, 0x2, [{0x73, &(0x7f00000001c0)=@string={0x73, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f700c0d88d694a6a3be9f91f721e488fd7ba7dbccb471e448df83343cea5772d33665c062fb02954327c2eabc5f6d7118f97a4399070218b84967fe7c2d5cf571bbea70f8a05942a65d9d7939aa589ebad1ac82303"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:55:34 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mount$9p_tcp(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)) lsetxattr$trusted_overlay_origin(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), &(0x7f0000000d80), 0x2, 0x0) 17:55:34 executing program 3: syz_open_dev$evdev(&(0x7f00000021c0), 0x0, 0x428c0) 17:55:34 executing program 4: add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) 17:55:34 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:55:34 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) getpgid(0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x2000}) syz_usb_connect(0x0, 0x402, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x38, 0xa3, 0x6c, 0x20, 0x5d1, 0x9001, 0xe804, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f0, 0x1, 0x0, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x45, 0x0, 0xd, 0x2b, 0xab, 0x8b, 0x0, [], [{{0x9, 0x5, 0x80, 0x2, 0x400, 0x5, 0x7, 0xc1, [@generic={0xd7, 0x11, "d90825d0fbf54dd15e91f6426a22e3c96e418d6e5b3892e327a7077e6f87eb0a8bc601af1722cbf53f655cb809a834a9b18a52ee5bd77db8dc23f2e7c65c20a2b718208ec8259278dadf37946c1e250f314584413e281953dfa7743e18878e85feb1075ea2c1d70c904c3e8ec499edf9a0e0b415c726ad3cc1e3bfc9f140cfe49e282826e20730e0be5363fc384d4250edad7e941e10a969012abee69d9a39d6be3f7439a348f83e54cb42c00bde499640d5a21724b1fe2a8e259569dcda201a85ac3fe7b1e803953ba7f446d9b717d198b384c092"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x38}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x2, 0x0, 0x1f, [@generic={0x1c, 0x23, "2920ce9d01d784b74f6162e5b17350af5cb960d62cd347dea3c8"}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x0, 0x3f, 0x2, [@generic={0x91, 0x1, "9e5065f02e963eb9c7b0240301ca07e812d3af4a61d9409f8b7b6da843642333662f92680d7c063364f1f7a82dd5756bc74ef797ea7a62f7c5dba13a8abcf94e1debcce7f3c9a18b18d6e88679e9fa9572b91d8a54ab9b92235d193f9b68020b3dc9220500d47dcd4ba6546e775710ddf69299746150b0f463d82ac8c25a8872f3a74756e4194f374322108f899063"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0x57, 0x3, 0x2, [@generic={0x9d, 0x11, "acbfe020d47f5a21b78b2d7af4c3cf78235cdf59134fbacfaa68f913ed5b1353c3c87800b772dbe8ac9e4761e69050627370a81ac2061fd981b150bdfd9e676f059d6e1956a504286e78fde25c3298b9218336f2b1715c0299cb397bb7c9d1612ba917426f575b87ee29a594ee2016253bdc157c499689adf224a372e97fb0d683997df4c2c952e18cc7f7ca047c5fe8c69a4a1b6dc7b71213e952"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0xfb, 0xff, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x3f, 0x20, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0xa7a}]}}, {{0x9, 0x5, 0xe, 0x4, 0x10, 0x4, 0x3, 0x5, [@generic={0xbf, 0x8, "93863e18f9d13c890349de2fd1d896f3bce600a0927bfa60c26d088617d9b5b118e61d6d0570dc212569b807eadae1c8ac3e15936fe5f5cb14957a4bd9e7919f3fb17713025699897684f24d8ae3235b56fa77222a4eab2fa051c3f93a069d7ae767206e056b94ca51fcf5e9f980dd2ce7f99aba19b077bf4d1d37cf9f24e7999cc26b080bbda585ca5284c1719009a93624dc9af8d15cbe94b4def8aa440b114f60d2a049565b7a3c8a0fe9f37fa31f9aee74f4a77f686fb649781d3d"}]}}, {{0x9, 0x5, 0x3, 0x12, 0x40, 0x20, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0x7f, 0x1000}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0xff, 0x5, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x523}]}}, {{0x9, 0x5, 0x8, 0x1f, 0x0, 0x83, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xfe}]}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x81, 0x8, 0x6, [@generic={0x4a, 0x0, "5e62506593cd34b4d4e7f422ae0caf9a359d98573b02d5d5e7d8082b3e8bebcee87dfbce10a923e3d3503c05ddf076bb766e23164e5cbb41ca84dc7e018a3126652740fb26ad8b83"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x1f, 0x7f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x80}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xff, 0x80, 0x3f, 0x10, 0x1f}, 0x56, &(0x7f0000000100)={0x5, 0xf, 0x56, 0x2, [@generic={0x2e, 0x10, 0xa, "a63c261b869df9da6f81763e86a36e7dd56b424804c7cf2587ec2a782d3e69ef85abbc638a789515ec0619"}, @generic={0x23, 0x10, 0xb, "e7058f2eb48cebfa251382bd1fb6b93fd90d3c3dcb6cd98bac1adfdbb2641476"}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x623}}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000e40)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000e80)={0x4}) 17:55:34 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffffc) 17:55:34 executing program 5: syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) stat(0x0, 0x0) syz_mount_image$squashfs(&(0x7f00000053c0), &(0x7f0000005400)='./file0\x00', 0x8001, 0x2, &(0x7f00000065c0)=[{0x0}, {&(0x7f0000006540), 0x0, 0x4}], 0x0, &(0x7f0000006640)={[{'trusted.overlay.nlink\x00'}, {'TIPC\x00'}, {}], [{@fowner_eq}, {@dont_appraise}, {@context={'context', 0x3d, 'user_u'}}, {@subj_role={'subj_role', 0x3d, '\x92+{.{/(&'}}, {@context={'context', 0x3d, 'sysadm_u'}}]}) utimensat(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', &(0x7f0000008e00)={{0x77359400}, {0x0, 0x2710}}, 0x0) 17:55:34 executing program 4: syz_mount_image$squashfs(0x0, &(0x7f0000005400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000008e80), 0xffffffffffffffff) [ 737.552514][T12893] 9pnet_fd: p9_fd_create_tcp (12893): problem connecting socket to 127.0.0.1 17:55:34 executing program 0: mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', 0x0, 0x1008, 0x0) [ 737.762417][T10966] usb 2-1: new high-speed USB device number 14 using dummy_hcd 17:55:34 executing program 3: utimensat(0xffffffffffffffff, &(0x7f0000008dc0)='./file0\x00', 0x0, 0x0) [ 737.924195][T12904] loop5: detected capacity change from 0 to 64 17:55:35 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x11, 0x1, &(0x7f0000001540)=@raw=[@exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 738.003981][ T3542] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 738.022775][T10966] usb 2-1: Using ep0 maxpacket: 32 [ 738.073083][T12904] squashfs: Unknown parameter 'trusted.overlay.nlink' [ 738.142303][T10966] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 738.150707][T10966] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 738.159838][T10966] usb 2-1: config 0 has no interface number 0 [ 738.166266][T10966] usb 2-1: config 0 interface 69 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 738.180474][T10966] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 738.192206][T10966] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0xE has an invalid bInterval 87, changing to 7 [ 738.203449][T10966] usb 2-1: config 0 interface 69 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 738.214308][T10966] usb 2-1: config 0 interface 69 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 738.225100][T10966] usb 2-1: config 0 interface 69 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 738.235977][T10966] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 738.246155][T10966] usb 2-1: config 0 interface 69 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 738.256919][T10966] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has an invalid bInterval 131, changing to 11 [ 738.268025][ T3542] usb 3-1: Using ep0 maxpacket: 16 [ 738.268299][T10966] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 738.283323][T10966] usb 2-1: config 0 interface 69 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 738.294285][T10966] usb 2-1: config 0 interface 69 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 738.393294][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.404820][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.415181][ T3542] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 738.424550][ T3542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.571853][ T3542] usb 3-1: config 0 descriptor?? [ 738.613038][T10966] usb 2-1: New USB device found, idVendor=05d1, idProduct=9001, bcdDevice=e8.04 [ 738.622944][T10966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.631111][T10966] usb 2-1: Product: syz [ 738.635541][T10966] usb 2-1: Manufacturer: أ [ 738.640186][T10966] usb 2-1: SerialNumber: syz [ 738.652770][T10966] usb 2-1: config 0 descriptor?? [ 738.678708][T12895] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 738.717717][T12895] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 738.977385][T10966] ftdi_sio 2-1:0.69: FTDI USB Serial Device converter detected [ 738.987037][T10966] usb 2-1: Detected FT-X [ 738.991440][T10966] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 8 [ 739.024445][T12899] UDC core: couldn't find an available UDC or it's busy: -16 [ 739.032260][T12899] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 739.041316][T12899] UDC core: couldn't find an available UDC or it's busy: -16 [ 739.048996][T12899] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 739.057339][T10966] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 739.065858][ T3542] hid (null): bogus close delimiter [ 739.091453][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001C/input/input62 [ 739.092573][T10966] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 739.132452][T10966] ftdi_sio 2-1:0.69: GPIO initialisation failed: -71 [ 739.141291][T10966] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 739.175115][T10966] usb 2-1: USB disconnect, device number 14 [ 739.190844][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001C/input/input63 [ 739.220147][T10966] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 739.231390][T10966] ftdi_sio 2-1:0.69: device disconnected [ 739.327764][ T3542] kye 0003:0458:5019.001C: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 739.354733][ T3542] usb 3-1: USB disconnect, device number 115 17:55:36 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x0, 0x1, 0x77}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0xd, 0x3}]}, 0x1, [{0x42, &(0x7f0000000280)=@string={0x42, 0x3, "16f552bf04fb9af69beed9e2bc12a73682cc67fd13e02bd7863bcd1ed6993f0a104590451de4d59afab89779aa661bdee93b315fb236adf47ba4865ef834bdf0"}}]}) syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x0, 0x5}]}, 0x2, [{0x73, &(0x7f00000001c0)=@string={0x73, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f700c0d88d694a6a3be9f91f721e488fd7ba7dbccb471e448df83343cea5772d33665c062fb02954327c2eabc5f6d7118f97a4399070218b84967fe7c2d5cf571bbea70f8a05942a65d9d7939aa589ebad1ac82303"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:55:36 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)) getdents(r0, &(0x7f00000002c0)=""/4096, 0x1000) 17:55:36 executing program 5: syz_mount_image$squashfs(&(0x7f00000053c0), &(0x7f0000005400)='./file0\x00', 0x0, 0x0, &(0x7f00000065c0), 0x0, &(0x7f0000006640)) 17:55:36 executing program 3: syz_mount_image$squashfs(&(0x7f00000053c0), &(0x7f0000005400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={[], [{@fowner_eq}]}) 17:55:36 executing program 4: socketpair(0x45, 0x0, 0x0, &(0x7f0000000000)) 17:55:36 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) getpgid(0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x2000}) syz_usb_connect(0x0, 0x402, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x38, 0xa3, 0x6c, 0x20, 0x5d1, 0x9001, 0xe804, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f0, 0x1, 0x0, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x45, 0x0, 0xd, 0x2b, 0xab, 0x8b, 0x0, [], [{{0x9, 0x5, 0x80, 0x2, 0x400, 0x5, 0x7, 0xc1, [@generic={0xd7, 0x11, "d90825d0fbf54dd15e91f6426a22e3c96e418d6e5b3892e327a7077e6f87eb0a8bc601af1722cbf53f655cb809a834a9b18a52ee5bd77db8dc23f2e7c65c20a2b718208ec8259278dadf37946c1e250f314584413e281953dfa7743e18878e85feb1075ea2c1d70c904c3e8ec499edf9a0e0b415c726ad3cc1e3bfc9f140cfe49e282826e20730e0be5363fc384d4250edad7e941e10a969012abee69d9a39d6be3f7439a348f83e54cb42c00bde499640d5a21724b1fe2a8e259569dcda201a85ac3fe7b1e803953ba7f446d9b717d198b384c092"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x38}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x2, 0x0, 0x1f, [@generic={0x1c, 0x23, "2920ce9d01d784b74f6162e5b17350af5cb960d62cd347dea3c8"}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x0, 0x3f, 0x2, [@generic={0x91, 0x1, "9e5065f02e963eb9c7b0240301ca07e812d3af4a61d9409f8b7b6da843642333662f92680d7c063364f1f7a82dd5756bc74ef797ea7a62f7c5dba13a8abcf94e1debcce7f3c9a18b18d6e88679e9fa9572b91d8a54ab9b92235d193f9b68020b3dc9220500d47dcd4ba6546e775710ddf69299746150b0f463d82ac8c25a8872f3a74756e4194f374322108f899063"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0x57, 0x3, 0x2, [@generic={0x9d, 0x11, "acbfe020d47f5a21b78b2d7af4c3cf78235cdf59134fbacfaa68f913ed5b1353c3c87800b772dbe8ac9e4761e69050627370a81ac2061fd981b150bdfd9e676f059d6e1956a504286e78fde25c3298b9218336f2b1715c0299cb397bb7c9d1612ba917426f575b87ee29a594ee2016253bdc157c499689adf224a372e97fb0d683997df4c2c952e18cc7f7ca047c5fe8c69a4a1b6dc7b71213e952"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0xfb, 0xff, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x3f, 0x20, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0xa7a}]}}, {{0x9, 0x5, 0xe, 0x4, 0x10, 0x4, 0x3, 0x5, [@generic={0xbf, 0x8, "93863e18f9d13c890349de2fd1d896f3bce600a0927bfa60c26d088617d9b5b118e61d6d0570dc212569b807eadae1c8ac3e15936fe5f5cb14957a4bd9e7919f3fb17713025699897684f24d8ae3235b56fa77222a4eab2fa051c3f93a069d7ae767206e056b94ca51fcf5e9f980dd2ce7f99aba19b077bf4d1d37cf9f24e7999cc26b080bbda585ca5284c1719009a93624dc9af8d15cbe94b4def8aa440b114f60d2a049565b7a3c8a0fe9f37fa31f9aee74f4a77f686fb649781d3d"}]}}, {{0x9, 0x5, 0x3, 0x12, 0x40, 0x20, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0x7f, 0x1000}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0xff, 0x5, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x523}]}}, {{0x9, 0x5, 0x8, 0x1f, 0x0, 0x83, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xfe}]}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x81, 0x8, 0x6, [@generic={0x4a, 0x0, "5e62506593cd34b4d4e7f422ae0caf9a359d98573b02d5d5e7d8082b3e8bebcee87dfbce10a923e3d3503c05ddf076bb766e23164e5cbb41ca84dc7e018a3126652740fb26ad8b83"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x1f, 0x7f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x80}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xff, 0x80, 0x3f, 0x10, 0x1f}, 0x56, &(0x7f0000000100)={0x5, 0xf, 0x56, 0x2, [@generic={0x2e, 0x10, 0xa, "a63c261b869df9da6f81763e86a36e7dd56b424804c7cf2587ec2a782d3e69ef85abbc638a789515ec0619"}, @generic={0x23, 0x10, 0xb, "e7058f2eb48cebfa251382bd1fb6b93fd90d3c3dcb6cd98bac1adfdbb2641476"}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x623}}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000e40)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000e80)={0x4}) 17:55:37 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003d00), 0xffffffffffffffff) 17:55:37 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2, &(0x7f0000000140)=@raw=[@btf_id], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 739.948908][T12921] Can't find a SQUASHFS superblock on loop5 17:55:37 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$hidraw(r0, &(0x7f0000000040)=""/148, 0x94) 17:55:37 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/49) [ 740.152270][ T3542] usb 2-1: new high-speed USB device number 15 using dummy_hcd 17:55:37 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='utf8,map=acorn,check=strict,g']) [ 740.393191][ T3542] usb 2-1: Using ep0 maxpacket: 32 [ 740.398700][ T3633] usb 3-1: new high-speed USB device number 116 using dummy_hcd 17:55:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)=@delqdisc={0x30, 0x25, 0x1, 0x0, 0x0, {}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4, 0x10}}]}, 0x30}}, 0x0) [ 740.522457][ T3542] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 740.530753][ T3542] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 740.542252][ T3542] usb 2-1: config 0 has no interface number 0 [ 740.548538][ T3542] usb 2-1: config 0 interface 69 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 740.559521][ T3542] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 740.570693][ T3542] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0xE has an invalid bInterval 87, changing to 7 [ 740.581921][ T3542] usb 2-1: config 0 interface 69 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 740.592805][ T3542] usb 2-1: config 0 interface 69 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 740.603602][ T3542] usb 2-1: config 0 interface 69 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 740.614544][ T3542] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 740.624648][ T3542] usb 2-1: config 0 interface 69 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 740.635510][ T3542] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has an invalid bInterval 131, changing to 11 [ 740.646919][ T3542] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 740.656926][ T3542] usb 2-1: config 0 interface 69 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 740.667825][ T3542] usb 2-1: config 0 interface 69 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 740.823599][ T3633] usb 3-1: Using ep0 maxpacket: 16 [ 740.892845][ T3542] usb 2-1: New USB device found, idVendor=05d1, idProduct=9001, bcdDevice=e8.04 [ 740.902541][ T3542] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.910704][ T3542] usb 2-1: Product: syz [ 740.915251][ T3542] usb 2-1: Manufacturer: أ [ 740.919896][ T3542] usb 2-1: SerialNumber: syz [ 740.957601][ T3542] usb 2-1: config 0 descriptor?? [ 740.967763][ T3633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.979193][ T3633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.989442][ T3633] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 740.990723][T12918] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 740.998776][ T3633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.024174][T12918] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 741.032444][ T3633] usb 3-1: config 0 descriptor?? [ 741.327339][ T3542] ftdi_sio 2-1:0.69: FTDI USB Serial Device converter detected [ 741.337260][ T3542] usb 2-1: Detected FT-X [ 741.341889][ T3542] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 8 [ 741.362303][ T3542] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 741.386443][ T3542] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 741.412193][ T3542] ftdi_sio 2-1:0.69: GPIO initialisation failed: -71 [ 741.421379][ T3542] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 741.438273][ T3542] usb 2-1: USB disconnect, device number 15 [ 741.463509][ T3542] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 741.474992][ T3542] ftdi_sio 2-1:0.69: device disconnected [ 741.488851][T12923] UDC core: couldn't find an available UDC or it's busy: -16 [ 741.496613][T12923] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 741.518551][T12923] UDC core: couldn't find an available UDC or it's busy: -16 [ 741.526426][T12923] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 741.568562][ T3633] hid (null): bogus close delimiter [ 741.609544][ T3633] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001D/input/input64 [ 741.699078][ T3633] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001D/input/input65 [ 741.769597][ T3633] kye 0003:0458:5019.001D: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 741.794739][ T3633] usb 3-1: USB disconnect, device number 116 17:55:39 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x0, 0x5}]}, 0x2, [{0x73, &(0x7f00000001c0)=@string={0x73, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f700c0d88d694a6a3be9f91f721e488fd7ba7dbccb471e448df83343cea5772d33665c062fb02954327c2eabc5f6d7118f97a4399070218b84967fe7c2d5cf571bbea70f8a05942a65d9d7939aa589ebad1ac82303"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:55:39 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 17:55:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000680)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000540)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011100)="ed4100003c000000d1f4655fd1f4655fd1f4655f00000000000002000000000000000010", 0x24, 0x2a00}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x5400}], 0x0, &(0x7f0000012900)=ANY=[]) rmdir(&(0x7f0000000040)='./file0/file0\x00') 17:55:39 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xe1) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) fallocate(r1, 0x0, 0x0, 0x10000102) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x6612, 0x0) 17:55:39 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_init1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x80) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) read(r0, &(0x7f000001a340)=""/102400, 0x19000) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "f90000000000ff00"}) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000000)={0x4, 0x4, 0x0, 0x0, 0x0, "ac1a94c38e502536"}) 17:55:39 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) getpgid(0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x2000}) syz_usb_connect(0x0, 0x402, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x38, 0xa3, 0x6c, 0x20, 0x5d1, 0x9001, 0xe804, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f0, 0x1, 0x0, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x45, 0x0, 0xd, 0x2b, 0xab, 0x8b, 0x0, [], [{{0x9, 0x5, 0x80, 0x2, 0x400, 0x5, 0x7, 0xc1, [@generic={0xd7, 0x11, "d90825d0fbf54dd15e91f6426a22e3c96e418d6e5b3892e327a7077e6f87eb0a8bc601af1722cbf53f655cb809a834a9b18a52ee5bd77db8dc23f2e7c65c20a2b718208ec8259278dadf37946c1e250f314584413e281953dfa7743e18878e85feb1075ea2c1d70c904c3e8ec499edf9a0e0b415c726ad3cc1e3bfc9f140cfe49e282826e20730e0be5363fc384d4250edad7e941e10a969012abee69d9a39d6be3f7439a348f83e54cb42c00bde499640d5a21724b1fe2a8e259569dcda201a85ac3fe7b1e803953ba7f446d9b717d198b384c092"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x38}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x2, 0x0, 0x1f, [@generic={0x1c, 0x23, "2920ce9d01d784b74f6162e5b17350af5cb960d62cd347dea3c8"}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x0, 0x3f, 0x2, [@generic={0x91, 0x1, "9e5065f02e963eb9c7b0240301ca07e812d3af4a61d9409f8b7b6da843642333662f92680d7c063364f1f7a82dd5756bc74ef797ea7a62f7c5dba13a8abcf94e1debcce7f3c9a18b18d6e88679e9fa9572b91d8a54ab9b92235d193f9b68020b3dc9220500d47dcd4ba6546e775710ddf69299746150b0f463d82ac8c25a8872f3a74756e4194f374322108f899063"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0x57, 0x3, 0x2, [@generic={0x9d, 0x11, "acbfe020d47f5a21b78b2d7af4c3cf78235cdf59134fbacfaa68f913ed5b1353c3c87800b772dbe8ac9e4761e69050627370a81ac2061fd981b150bdfd9e676f059d6e1956a504286e78fde25c3298b9218336f2b1715c0299cb397bb7c9d1612ba917426f575b87ee29a594ee2016253bdc157c499689adf224a372e97fb0d683997df4c2c952e18cc7f7ca047c5fe8c69a4a1b6dc7b71213e952"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0xfb, 0xff, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x3f, 0x20, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0xa7a}]}}, {{0x9, 0x5, 0xe, 0x4, 0x10, 0x4, 0x3, 0x5, [@generic={0xbf, 0x8, "93863e18f9d13c890349de2fd1d896f3bce600a0927bfa60c26d088617d9b5b118e61d6d0570dc212569b807eadae1c8ac3e15936fe5f5cb14957a4bd9e7919f3fb17713025699897684f24d8ae3235b56fa77222a4eab2fa051c3f93a069d7ae767206e056b94ca51fcf5e9f980dd2ce7f99aba19b077bf4d1d37cf9f24e7999cc26b080bbda585ca5284c1719009a93624dc9af8d15cbe94b4def8aa440b114f60d2a049565b7a3c8a0fe9f37fa31f9aee74f4a77f686fb649781d3d"}]}}, {{0x9, 0x5, 0x3, 0x12, 0x40, 0x20, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0x7f, 0x1000}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0xff, 0x5, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x523}]}}, {{0x9, 0x5, 0x8, 0x1f, 0x0, 0x83, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xfe}]}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x81, 0x8, 0x6, [@generic={0x4a, 0x0, "5e62506593cd34b4d4e7f422ae0caf9a359d98573b02d5d5e7d8082b3e8bebcee87dfbce10a923e3d3503c05ddf076bb766e23164e5cbb41ca84dc7e018a3126652740fb26ad8b83"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x1f, 0x7f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x80}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xff, 0x80, 0x3f, 0x10, 0x1f}, 0x56, &(0x7f0000000100)={0x5, 0xf, 0x56, 0x2, [@generic={0x2e, 0x10, 0xa, "a63c261b869df9da6f81763e86a36e7dd56b424804c7cf2587ec2a782d3e69ef85abbc638a789515ec0619"}, @generic={0x23, 0x10, 0xb, "e7058f2eb48cebfa251382bd1fb6b93fd90d3c3dcb6cd98bac1adfdbb2641476"}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x623}}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000e40)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000e80)={0x4}) [ 742.376774][ T24] audit: type=1804 audit(1653501339.434:7): pid=12942 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir723785865/syzkaller.b3jNi7/669/bus" dev="sda1" ino=1160 res=1 errno=0 [ 742.397310][T12944] loop3: detected capacity change from 0 to 512 17:55:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000680)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000540)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002000000000000000500000015", 0x29, 0x1600}, {&(0x7f0000011100)="ed4100003c000000d1f4655fd1f4655fd1f4655f00000000000002", 0x1b, 0x2a00}, {&(0x7f0000000080)="020000000c0001022e000000020000400c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x5400}], 0x0, &(0x7f0000012900)=ANY=[]) rmdir(&(0x7f0000000040)='./file0/file0\x00') [ 742.468315][T12944] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem 17:55:39 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x5}, 0x28) [ 742.582286][T12944] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. 17:55:39 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xffffff1f}]}]}}, &(0x7f0000001780)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) [ 742.712047][ T3633] usb 2-1: new high-speed USB device number 16 using dummy_hcd 17:55:39 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffe, 0xffffffffffffffff) 17:55:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000180), 0x4) 17:55:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}}, 0x0) [ 742.913144][ T3548] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 742.952300][ T3633] usb 2-1: Using ep0 maxpacket: 32 [ 743.073227][ T3633] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 743.081618][ T3633] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 743.090824][ T3633] usb 2-1: config 0 has no interface number 0 [ 743.099021][ T3633] usb 2-1: config 0 interface 69 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 743.110244][ T3633] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 743.121467][ T3633] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0xE has an invalid bInterval 87, changing to 7 [ 743.132787][ T3633] usb 2-1: config 0 interface 69 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 743.143776][ T3633] usb 2-1: config 0 interface 69 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 743.154600][ T3633] usb 2-1: config 0 interface 69 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 743.165574][ T3633] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 743.175701][ T3633] usb 2-1: config 0 interface 69 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 743.182357][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 743.186558][ T3633] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has an invalid bInterval 131, changing to 11 [ 743.203042][ T3633] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 743.213068][ T3633] usb 2-1: config 0 interface 69 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 743.224012][ T3633] usb 2-1: config 0 interface 69 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 743.305677][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.317531][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.327861][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 743.337396][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.411046][ T3548] usb 3-1: config 0 descriptor?? [ 743.602601][ T3633] usb 2-1: New USB device found, idVendor=05d1, idProduct=9001, bcdDevice=e8.04 [ 743.613934][ T3633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.622652][ T3633] usb 2-1: Product: syz [ 743.626964][ T3633] usb 2-1: Manufacturer: أ [ 743.631620][ T3633] usb 2-1: SerialNumber: syz [ 743.645454][ T3633] usb 2-1: config 0 descriptor?? [ 743.662753][T12941] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 743.671497][T12941] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 743.881177][T12952] UDC core: couldn't find an available UDC or it's busy: -16 [ 743.889041][T12952] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 743.898200][T12952] UDC core: couldn't find an available UDC or it's busy: -16 [ 743.905914][T12952] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 743.938822][ T3548] hid (null): bogus close delimiter [ 743.947351][ T3633] ftdi_sio 2-1:0.69: FTDI USB Serial Device converter detected [ 743.956880][ T3633] usb 2-1: Detected FT-X [ 743.961275][ T3633] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 8 [ 743.977637][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001E/input/input66 [ 743.982646][ T3633] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 744.019523][ T3633] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 744.042248][ T3633] ftdi_sio 2-1:0.69: GPIO initialisation failed: -71 [ 744.050951][ T3633] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 744.067903][ T3633] usb 2-1: USB disconnect, device number 16 [ 744.079595][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001E/input/input67 [ 744.095820][ T3633] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 744.107181][ T3633] ftdi_sio 2-1:0.69: device disconnected [ 744.156730][ T3548] kye 0003:0458:5019.001E: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 744.190588][ T3548] usb 3-1: USB disconnect, device number 117 17:55:41 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x0, 0x5}]}, 0x2, [{0x73, &(0x7f00000001c0)=@string={0x73, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f700c0d88d694a6a3be9f91f721e488fd7ba7dbccb471e448df83343cea5772d33665c062fb02954327c2eabc5f6d7118f97a4399070218b84967fe7c2d5cf571bbea70f8a05942a65d9d7939aa589ebad1ac82303"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:55:41 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$netlink(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x0) 17:55:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x11, &(0x7f0000000000), 0x4) 17:55:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x8513, 0x4) 17:55:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xa, 0x0, &(0x7f0000005a00)) 17:55:41 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) getpgid(0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x2000}) syz_usb_connect(0x0, 0x402, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x38, 0xa3, 0x6c, 0x20, 0x5d1, 0x9001, 0xe804, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f0, 0x1, 0x0, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x45, 0x0, 0xd, 0x2b, 0xab, 0x8b, 0x0, [], [{{0x9, 0x5, 0x80, 0x2, 0x400, 0x5, 0x7, 0xc1, [@generic={0xd7, 0x11, "d90825d0fbf54dd15e91f6426a22e3c96e418d6e5b3892e327a7077e6f87eb0a8bc601af1722cbf53f655cb809a834a9b18a52ee5bd77db8dc23f2e7c65c20a2b718208ec8259278dadf37946c1e250f314584413e281953dfa7743e18878e85feb1075ea2c1d70c904c3e8ec499edf9a0e0b415c726ad3cc1e3bfc9f140cfe49e282826e20730e0be5363fc384d4250edad7e941e10a969012abee69d9a39d6be3f7439a348f83e54cb42c00bde499640d5a21724b1fe2a8e259569dcda201a85ac3fe7b1e803953ba7f446d9b717d198b384c092"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x38}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x2, 0x0, 0x1f, [@generic={0x1c, 0x23, "2920ce9d01d784b74f6162e5b17350af5cb960d62cd347dea3c8"}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x0, 0x3f, 0x2, [@generic={0x91, 0x1, "9e5065f02e963eb9c7b0240301ca07e812d3af4a61d9409f8b7b6da843642333662f92680d7c063364f1f7a82dd5756bc74ef797ea7a62f7c5dba13a8abcf94e1debcce7f3c9a18b18d6e88679e9fa9572b91d8a54ab9b92235d193f9b68020b3dc9220500d47dcd4ba6546e775710ddf69299746150b0f463d82ac8c25a8872f3a74756e4194f374322108f899063"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0x57, 0x3, 0x2, [@generic={0x9d, 0x11, "acbfe020d47f5a21b78b2d7af4c3cf78235cdf59134fbacfaa68f913ed5b1353c3c87800b772dbe8ac9e4761e69050627370a81ac2061fd981b150bdfd9e676f059d6e1956a504286e78fde25c3298b9218336f2b1715c0299cb397bb7c9d1612ba917426f575b87ee29a594ee2016253bdc157c499689adf224a372e97fb0d683997df4c2c952e18cc7f7ca047c5fe8c69a4a1b6dc7b71213e952"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0xfb, 0xff, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x3f, 0x20, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0xa7a}]}}, {{0x9, 0x5, 0xe, 0x4, 0x10, 0x4, 0x3, 0x5, [@generic={0xbf, 0x8, "93863e18f9d13c890349de2fd1d896f3bce600a0927bfa60c26d088617d9b5b118e61d6d0570dc212569b807eadae1c8ac3e15936fe5f5cb14957a4bd9e7919f3fb17713025699897684f24d8ae3235b56fa77222a4eab2fa051c3f93a069d7ae767206e056b94ca51fcf5e9f980dd2ce7f99aba19b077bf4d1d37cf9f24e7999cc26b080bbda585ca5284c1719009a93624dc9af8d15cbe94b4def8aa440b114f60d2a049565b7a3c8a0fe9f37fa31f9aee74f4a77f686fb649781d3d"}]}}, {{0x9, 0x5, 0x3, 0x12, 0x40, 0x20, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0x7f, 0x1000}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0xff, 0x5, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x523}]}}, {{0x9, 0x5, 0x8, 0x1f, 0x0, 0x83, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xfe}]}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x81, 0x8, 0x6, [@generic={0x4a, 0x0, "5e62506593cd34b4d4e7f422ae0caf9a359d98573b02d5d5e7d8082b3e8bebcee87dfbce10a923e3d3503c05ddf076bb766e23164e5cbb41ca84dc7e018a3126652740fb26ad8b83"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x1f, 0x7f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x80}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xff, 0x80, 0x3f, 0x10, 0x1f}, 0x56, &(0x7f0000000100)={0x5, 0xf, 0x56, 0x2, [@generic={0x2e, 0x10, 0xa, "a63c261b869df9da6f81763e86a36e7dd56b424804c7cf2587ec2a782d3e69ef85abbc638a789515ec0619"}, @generic={0x23, 0x10, 0xb, "e7058f2eb48cebfa251382bd1fb6b93fd90d3c3dcb6cd98bac1adfdbb2641476"}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x623}}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000e40)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000e80)={0x4}) 17:55:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x2, 0x0, 0x0, 0x0) 17:55:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x9, 0x0, &(0x7f0000005a00)) 17:55:41 executing program 0: r0 = socket(0x28, 0x1, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) 17:55:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x23, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x24}}, 0x0) [ 745.032286][ T3633] usb 2-1: new high-speed USB device number 17 using dummy_hcd 17:55:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, &(0x7f00000000c0)) 17:55:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x24}}, 0x0) [ 745.292540][ T3633] usb 2-1: Using ep0 maxpacket: 32 [ 745.332316][ T3548] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 745.412382][ T3633] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 745.420666][ T3633] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 745.429955][ T3633] usb 2-1: config 0 has no interface number 0 [ 745.436277][ T3633] usb 2-1: config 0 interface 69 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 745.449422][ T3633] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 745.460962][ T3633] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0xE has an invalid bInterval 87, changing to 7 [ 745.472227][ T3633] usb 2-1: config 0 interface 69 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 745.483242][ T3633] usb 2-1: config 0 interface 69 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 745.494173][ T3633] usb 2-1: config 0 interface 69 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 745.505146][ T3633] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 745.515274][ T3633] usb 2-1: config 0 interface 69 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 745.526164][ T3633] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has an invalid bInterval 131, changing to 11 [ 745.537604][ T3633] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 745.547850][ T3633] usb 2-1: config 0 interface 69 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 745.558762][ T3633] usb 2-1: config 0 interface 69 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 745.582265][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 745.712789][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.724178][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.734443][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 745.743766][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.802935][ T3633] usb 2-1: New USB device found, idVendor=05d1, idProduct=9001, bcdDevice=e8.04 [ 745.812274][ T3633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.812582][ T3548] usb 3-1: config 0 descriptor?? [ 745.820405][ T3633] usb 2-1: Product: syz [ 745.829745][ T3633] usb 2-1: Manufacturer: أ [ 745.834561][ T3633] usb 2-1: SerialNumber: syz [ 745.868570][ T3633] usb 2-1: config 0 descriptor?? [ 745.893033][T12970] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 745.902083][T12970] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 746.177325][ T3633] ftdi_sio 2-1:0.69: FTDI USB Serial Device converter detected [ 746.186962][ T3633] usb 2-1: Detected FT-X [ 746.191370][ T3633] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 8 [ 746.212758][ T3633] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 746.242429][ T3633] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 746.262278][ T3633] ftdi_sio 2-1:0.69: GPIO initialisation failed: -71 [ 746.274320][ T3633] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 746.296624][T12978] UDC core: couldn't find an available UDC or it's busy: -16 [ 746.302475][ T3633] usb 2-1: USB disconnect, device number 17 [ 746.304456][T12978] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 746.329925][T12978] UDC core: couldn't find an available UDC or it's busy: -16 [ 746.340768][T12978] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 746.350966][ T3633] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 746.362969][ T3633] ftdi_sio 2-1:0.69: device disconnected [ 746.384353][ T3548] hid (null): bogus close delimiter [ 746.418973][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001F/input/input68 [ 746.517189][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001F/input/input69 [ 746.587514][ T3548] kye 0003:0458:5019.001F: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 746.617087][ T3633] usb 3-1: USB disconnect, device number 118 17:55:44 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:55:44 executing program 3: socket$inet(0x2, 0xe481a14a8a653aa9, 0x0) 17:55:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)={0x28, 0x3, 0x1, 0x101, 0x0, 0x0, {0x1}, [@CTA_MARK={0x8}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x28}}, 0x0) 17:55:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0xa}, 0x200003cc, &(0x7f0000000480)={0x0}}, 0x24044080) 17:55:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x1, 0x7ff, 0x1140, 0x1}, 0x48) 17:55:44 executing program 1: r0 = msgget$private(0x0, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000740)=""/205) 17:55:44 executing program 1: getresgid(0x0, 0x0, 0x0) msgget$private(0x0, 0x0) 17:55:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) accept4$unix(r0, 0x0, &(0x7f0000000700), 0x0) 17:55:44 executing program 4: r0 = semget$private(0x0, 0x1, 0x0) semctl$GETNCNT(r0, 0x3, 0xe, 0x0) 17:55:44 executing program 3: semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)={{0x2, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}}) 17:55:44 executing program 1: epoll_wait(0xffffffffffffffff, &(0x7f00000006c0)=[{}], 0x1, 0x0) [ 747.804068][ T3542] usb 3-1: new high-speed USB device number 119 using dummy_hcd 17:55:45 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)) [ 748.052574][ T3542] usb 3-1: Using ep0 maxpacket: 16 [ 748.175668][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.186988][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.197120][ T3542] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 748.206448][ T3542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.368562][ T3542] usb 3-1: config 0 descriptor?? [ 748.843740][T13001] UDC core: couldn't find an available UDC or it's busy: -16 [ 748.851209][T13001] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 748.860657][T13001] UDC core: couldn't find an available UDC or it's busy: -16 [ 748.868417][T13001] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 748.884111][ T3542] hid (null): bogus close delimiter [ 748.913092][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0020/input/input70 [ 749.007098][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0020/input/input71 [ 749.034778][ T3542] kye 0003:0458:5019.0020: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 749.098289][ T3548] usb 3-1: USB disconnect, device number 119 17:55:46 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:55:46 executing program 3: socketpair(0x2, 0x1, 0x0, &(0x7f0000000140)) 17:55:46 executing program 4: syz_clone(0x472a1400, 0x0, 0x0, 0x0, 0x0, 0x0) 17:55:46 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002000)=@base={0x11, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001100)={r0, &(0x7f0000000000), 0x0}, 0x20) 17:55:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0045878, 0x0) 17:55:46 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1000000, 0x2}]}, @restrict]}}, &(0x7f00000006c0)=""/140, 0x3a, 0x8c, 0x1}, 0x20) 17:55:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 17:55:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000002000)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 17:55:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x5452, &(0x7f0000001f80)) 17:55:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x0, 0x0, 0x0, 0x18, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 17:55:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0xe724) [ 750.272804][ T3542] usb 3-1: new high-speed USB device number 120 using dummy_hcd 17:55:47 executing program 5: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)=""/232, 0xe8}, {&(0x7f0000000640)=""/136, 0x88}], 0x2}, 0x0) sendmsg$sock(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)='!', 0x1}], 0x1}, 0x0) [ 750.512118][ T3542] usb 3-1: Using ep0 maxpacket: 16 [ 750.632940][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.644662][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.654782][ T3542] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 750.664108][ T3542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.805970][ T3542] usb 3-1: config 0 descriptor?? [ 751.264884][T13026] UDC core: couldn't find an available UDC or it's busy: -16 [ 751.272676][T13026] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 751.281487][T13026] UDC core: couldn't find an available UDC or it's busy: -16 [ 751.290743][T13026] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 751.304276][ T3542] hid (null): bogus close delimiter [ 751.333702][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0021/input/input72 [ 751.418175][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0021/input/input73 [ 751.492384][ T3542] kye 0003:0458:5019.0021: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 751.521379][ T3542] usb 3-1: USB disconnect, device number 120 17:55:49 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:55:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x2, &(0x7f0000001f80)) 17:55:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'wlan1\x00', 0x1}) 17:55:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000002000)=@base={0x3, 0x0, 0x4}, 0x48) 17:55:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'wlan1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) 17:55:49 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000002000)=@base={0x11, 0x4, 0x4, 0x4, 0x4}, 0x48) 17:55:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'wlan0\x00', 0x20}) 17:55:49 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f00000000c0)=""/254, 0x29, 0xfe, 0x1}, 0x20) 17:55:49 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0x0, 0x9}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:55:49 executing program 1: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000d00)={&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x0, {{0x42}, 0x1}}, 0x80, 0x0}, 0x0) 17:55:49 executing program 0: syz_clone(0xaa256500, 0x0, 0x29, 0x0, 0x0, 0x0) 17:55:49 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x6, &(0x7f0000000000), 0x4) [ 752.662660][ T3542] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 752.932595][ T3542] usb 3-1: Using ep0 maxpacket: 16 [ 753.052267][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.063670][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.073749][ T3542] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 753.083090][ T3542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.094882][ T3542] usb 3-1: config 0 descriptor?? [ 753.553653][T13053] UDC core: couldn't find an available UDC or it's busy: -16 [ 753.561176][T13053] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 753.571507][T13053] UDC core: couldn't find an available UDC or it's busy: -16 [ 753.579174][T13053] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 753.594183][ T3542] hid (null): bogus close delimiter [ 753.622358][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0022/input/input74 [ 753.716859][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0022/input/input75 [ 753.856655][ T3542] kye 0003:0458:5019.0022: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 753.890397][ T3542] usb 3-1: USB disconnect, device number 121 17:55:51 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x73, &(0x7f00000001c0)=@string={0x73, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f700c0d88d694a6a3be9f91f721e488fd7ba7dbccb471e448df83343cea5772d33665c062fb02954327c2eabc5f6d7118f97a4399070218b84967fe7c2d5cf571bbea70f8a05942a65d9d7939aa589ebad1ac82303"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:55:51 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040)=0x80, 0x4) 17:55:51 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000800)={r1}) 17:55:51 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x9, &(0x7f0000000200)=r1, 0x4) 17:55:51 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000040)="89", 0x1}], 0x1}, 0x0) 17:55:51 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/121, 0x79}, 0x40) 17:55:51 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000100000000000000e17e81ed734500001800000053edc579c23dc9d0140700000000000000050008001829003f1138", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00iH'], &(0x7f00000000c0)='GPL\x00', 0x7, 0x86, &(0x7f0000000100)=""/134, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:55:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:55:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x19, 0x0, 0x0, 0x81}, 0x48) 17:55:51 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200)=r1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) 17:55:51 executing program 0: socketpair(0x1a, 0x0, 0x0, &(0x7f00000003c0)) 17:55:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1d}, 0x48) [ 754.882323][ T3633] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 755.122099][ T3633] usb 3-1: Using ep0 maxpacket: 16 [ 755.242888][ T3633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.254249][ T3633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.264452][ T3633] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 755.273858][ T3633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.354662][ T3633] usb 3-1: config 0 descriptor?? [ 755.815728][T13077] UDC core: couldn't find an available UDC or it's busy: -16 [ 755.823588][T13077] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 755.833286][T13077] UDC core: couldn't find an available UDC or it's busy: -16 [ 755.840781][T13077] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 755.854376][ T3633] hid (null): bogus close delimiter [ 755.882246][ T3633] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0023/input/input76 [ 755.968854][ T3633] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0023/input/input77 [ 756.037824][ T3633] kye 0003:0458:5019.0023: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 756.070536][ T3633] usb 3-1: USB disconnect, device number 122 17:55:53 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x73, &(0x7f00000001c0)=@string={0x73, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f700c0d88d694a6a3be9f91f721e488fd7ba7dbccb471e448df83343cea5772d33665c062fb02954327c2eabc5f6d7118f97a4399070218b84967fe7c2d5cf571bbea70f8a05942a65d9d7939aa589ebad1ac82303"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:55:53 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x80, 0x0, 0x0, 0x0, 0x22}, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 17:55:53 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x42, &(0x7f0000000000), 0x4) 17:55:53 executing program 3: syz_clone(0x14003000, 0x0, 0x3a, 0x0, 0x0, 0x0) 17:55:53 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200)=r1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) 17:55:53 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)='.', 0x1}], 0x1}, 0x8000) sendmsg$inet(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)='\n', 0x1}], 0x1}, 0x0) 17:55:53 executing program 1: syz_clone(0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x8160000, &(0x7f0000000040), 0x0, &(0x7f00000000c0), 0x0, 0x0) 17:55:53 executing program 5: syz_clone(0x81d1300, 0x0, 0x0, 0x0, 0x0, 0x0) 17:55:53 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xe}]}}, &(0x7f00000000c0)=""/254, 0x26, 0xfe, 0x1}, 0x20) 17:55:53 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xa, &(0x7f0000000040)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @btf_id, @ldst, @jmp, @cb_func]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0xe8, &(0x7f0000000100)=""/232, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:55:54 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x11, 0x4, &(0x7f0000001740)=@framed={{}, [@alu={0x7, 0x0, 0x0, 0xa}]}, &(0x7f0000001780)='syzkaller\x00', 0x2, 0xd3, &(0x7f00000017c0)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:55:54 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x11, 0x4, &(0x7f0000001740)=@framed={{}, [@alu={0x7, 0x0, 0x0, 0x8}]}, &(0x7f0000001780)='syzkaller\x00', 0x2, 0xd3, &(0x7f00000017c0)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 757.182402][ T3548] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 757.451882][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 757.582890][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.594123][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.604194][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 757.613575][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.681618][ T3548] usb 3-1: config 0 descriptor?? [ 758.153960][T13102] UDC core: couldn't find an available UDC or it's busy: -16 [ 758.161495][T13102] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 758.170935][T13102] UDC core: couldn't find an available UDC or it's busy: -16 [ 758.178857][T13102] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 758.204335][ T3548] hid (null): bogus close delimiter [ 758.233929][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0024/input/input78 [ 758.318920][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0024/input/input79 [ 758.396994][ T3548] kye 0003:0458:5019.0024: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 758.428350][ T3548] usb 3-1: USB disconnect, device number 123 17:55:56 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:55:56 executing program 5: socketpair(0x28, 0x0, 0x0, &(0x7f0000000280)) 17:55:56 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000080)="2b540577f265dc9c2e92c47e05cf2ace5d9c0538fbc1a8a356e0a293505cb0de85bf6b2b1f815e03a0a06dd09ec16bdfca5387ecbca473da3a52fe4dcae50b4a7780920deb5268ee43164985dd8aefe04f30046c611610ad8569365c5613ea45562db7ac000285b98134fea356821394573096ec73843e1a7b7ef33f5aa8fbb1497905fdeb", 0x85}, {&(0x7f0000000140)="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", 0xf7b}, {0x0}, {&(0x7f00000011c0)="9d", 0x1}], 0x4}, 0x0) 17:55:56 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=[{0x10}], 0x10}, 0x0) 17:55:56 executing program 0: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) 17:55:56 executing program 1: syz_clone(0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x8160000, &(0x7f0000000040), 0x0, &(0x7f00000000c0), 0x0, 0x0) 17:55:56 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x11, 0x3, &(0x7f0000001740)=@framed={{}, [], {0x95, 0x0, 0x0, 0x3fe}}, &(0x7f0000001780)='syzkaller\x00', 0x2, 0xd3, &(0x7f00000017c0)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:55:56 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r0}) 17:55:56 executing program 5: socketpair(0x18, 0x0, 0x800, &(0x7f0000000580)) 17:55:56 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x11, 0x4, &(0x7f0000001740)=@framed={{}, [@alu={0x7, 0x1, 0x0, 0x0, 0xa}]}, &(0x7f0000001780)='syzkaller\x00', 0x2, 0xd3, &(0x7f00000017c0)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:55:56 executing program 4: syz_clone(0x5c080000, &(0x7f0000000000)="5d957de9b06657730e78331c366e4eaebd231d7b997c48e7e5086a91557cd5fd378f1976d6ddda5ecabd2867b22d9fe6de2c5cfb0e44ff92c352b51157e583196cdec41a561235455e8f542d5d8ddf7804990c72a4b9a134d23e457ebfd6e98129b656341219bd1fec9f505ce8ab3b4dd670eb1ccc", 0x75, 0x0, &(0x7f00000000c0), &(0x7f0000000100)="83894079d9caa27a907f4dff7dedba3123a99553c863131e5d4b0d2156119234ec976d255d798944469c7ff2a4e77357b4929c273dbb04886610e0662531ab7d35b3db9abd4f1da2cd474a66b0cefbcf62a915ad468a39f77fcb524a4e5558b0a1453d32aa51c9") [ 759.492331][ T3548] usb 3-1: new high-speed USB device number 124 using dummy_hcd 17:55:56 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x11, 0x4, &(0x7f0000001740)=@framed={{}, [@alu={0x7, 0x1, 0x0, 0x0, 0x0, 0x4000}]}, &(0x7f0000001780)='syzkaller\x00', 0x2, 0xd3, &(0x7f00000017c0)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 759.732240][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 759.912684][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.923950][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.934341][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 759.943634][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.014634][ T3548] usb 3-1: config 0 descriptor?? [ 760.473866][T13132] UDC core: couldn't find an available UDC or it's busy: -16 [ 760.481369][T13132] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 760.492465][T13132] UDC core: couldn't find an available UDC or it's busy: -16 [ 760.502103][T13132] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 760.534265][ T3548] hid (null): bogus close delimiter [ 760.574698][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0025/input/input80 [ 760.667317][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0025/input/input81 [ 760.688984][ T3548] kye 0003:0458:5019.0025: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 760.746979][ T1194] ieee802154 phy0 wpan0: encryption failed: -22 [ 760.753748][ T1194] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.793792][ T3548] usb 3-1: USB disconnect, device number 124 17:55:58 executing program 5: bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) 17:55:58 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x11, 0x3, &(0x7f0000001740)=@framed={{}, [], {0x95, 0x0, 0x6200}}, &(0x7f0000001780)='syzkaller\x00', 0x2, 0xd3, &(0x7f00000017c0)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:55:58 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff30, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030022000b04d25a80648c6394f95a24fc601000034046000000053582c137153e37024801800d000000d1bd", 0x33fe0}], 0x1}, 0x0) 17:55:58 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000011c0)={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:55:58 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:55:58 executing program 4: syz_clone(0x5c080000, &(0x7f0000000000)="5d957de9b06657730e78331c366e4eaebd231d7b997c48e7e5086a91557cd5fd378f1976d6ddda5ecabd2867b22d9fe6de2c5cfb0e44ff92c352b51157e583196cdec41a561235455e8f542d5d8ddf7804990c72a4b9a134d23e457ebfd6e98129b656341219bd1fec9f505ce8ab3b4dd670eb1ccc", 0x75, 0x0, &(0x7f00000000c0), &(0x7f0000000100)="83894079d9caa27a907f4dff7dedba3123a99553c863131e5d4b0d2156119234ec976d255d798944469c7ff2a4e77357b4929c273dbb04886610e0662531ab7d35b3db9abd4f1da2cd474a66b0cefbcf62a915ad468a39f77fcb524a4e5558b0a1453d32aa51c9") [ 761.393630][T13147] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 761.402508][T13147] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 761.410712][T13147] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.3'. 17:55:58 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) syz_clone(0x49000100, &(0x7f0000000080), 0x0, &(0x7f00000001c0), 0x0, 0x0) 17:55:58 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x1403ea7716f478cb}, 0x20) 17:55:58 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x0, 0x0, 0x7}, 0x48) 17:55:58 executing program 3: socketpair(0x11, 0x3, 0x1, &(0x7f0000000900)) 17:55:59 executing program 0: syz_clone(0x5c080000, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x0, 0x3, &(0x7f0000001740)=@framed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:55:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000080)="2b540577f265dc9c2e92c47e05cf2ace5d9c0538fbc1a8a356e0a293505cb0de85bf6b2b1f815e03a0a06dd09ec16bdfca5387ecbca473da3a52fe4dcae50b4a7780920deb5268ee43164985dd8aefe04f30046c611610ad8569365c5613ea45562db7ac000285b98134fea356821394573096ec73843e1a7b7ef33f5aa8fbb1497905fdeb", 0x85}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="ddd89fa291613ee6e8751c324e53f6870debf71ea79581d7e43e991482547dc974fcb70a121452f6395d6e73fdec9c462f264317ba1f9315e0c378282c97efc38537b06632fe8180629564b5e03c3edcbea97f5991e792a556227b382bca2e27f29a", 0x62}, {&(0x7f00000011c0)="9d0d5277174df895542bd172b05119b15fc7624b7b7298a18b28d87682ad5951", 0x20}, {&(0x7f0000001200)="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", 0xefa}], 0x5}, 0x0) [ 761.968620][ T3548] usb 3-1: new high-speed USB device number 125 using dummy_hcd 17:55:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002300)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 17:55:59 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x11, 0x3, &(0x7f0000001740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}}, &(0x7f0000001780)='syzkaller\x00', 0x2, 0xd3, &(0x7f00000017c0)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 762.272417][ T3548] usb 3-1: Using ep0 maxpacket: 16 17:55:59 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60405, 0x0) [ 762.393379][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.405415][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.415760][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 762.425098][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:55:59 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0x23, &(0x7f0000000d80)={0x0, 0x0, 0x18}, 0xc) [ 762.524146][ T3548] usb 3-1: config 0 descriptor?? 17:55:59 executing program 4: socketpair(0xa, 0x0, 0x0, &(0x7f00000000c0)) [ 762.979123][T13156] UDC core: couldn't find an available UDC or it's busy: -16 [ 762.987271][T13156] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 763.040351][T13156] UDC core: couldn't find an available UDC or it's busy: -16 [ 763.048576][T13156] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 763.134483][ T3548] hid (null): bogus close delimiter [ 763.298168][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0026/input/input82 [ 763.391154][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0026/input/input83 [ 763.479764][ T3548] kye 0003:0458:5019.0026: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 763.504691][ T3548] usb 3-1: USB disconnect, device number 125 17:56:00 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:56:00 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x48) 17:56:00 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0x16, 0x0, 0x0) 17:56:00 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) 17:56:00 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x408, 0x1, 0x1, "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"}], 0x408}, 0x0) 17:56:00 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 17:56:01 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x102, 0x6}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', r0}, 0x10) 17:56:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) 17:56:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 17:56:01 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0x10, &(0x7f0000000d80)={0x0, 0x0, 0x18}, 0xc) 17:56:01 executing program 0: socketpair(0x2, 0xd, 0x0, &(0x7f0000000000)) 17:56:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000034c0)={0x0, 0x0, 0x0}, 0x0) [ 764.472199][ T3548] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 764.723080][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 764.848183][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.859507][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.870017][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 764.879340][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.942007][ T3548] usb 3-1: config 0 descriptor?? [ 765.414426][T13194] UDC core: couldn't find an available UDC or it's busy: -16 [ 765.423714][T13194] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 765.433267][T13194] UDC core: couldn't find an available UDC or it's busy: -16 [ 765.440759][T13194] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 765.474106][ T3548] hid (null): bogus close delimiter [ 765.501414][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0027/input/input84 [ 765.597242][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0027/input/input85 [ 765.615417][ T3548] kye 0003:0458:5019.0027: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 765.686660][ T3542] usb 3-1: USB disconnect, device number 126 17:56:03 executing program 4: socketpair(0xa, 0x2, 0x88, &(0x7f00000000c0)) 17:56:03 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)={&(0x7f00000000c0)='./file0/file0\x00'}, 0x10) 17:56:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'vlan0\x00', 0x2}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$TUNSETCARRIER(r0, 0x54e3, 0x0) 17:56:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @loopback}}}], 0x20}, 0x0) 17:56:03 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0x3, &(0x7f00000010c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}}, &(0x7f0000001140)='syzkaller\x00', 0x2, 0xef, &(0x7f0000001240)=""/239, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:56:03 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:56:03 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002600)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000002440)='syzkaller\x00', 0x2, 0xed, &(0x7f0000002480)=""/237, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:56:03 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x2, &(0x7f0000000100)=@raw=[@cb_func], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 17:56:03 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@generic={0x7, 0x0, 0x0, 0xfffe}]}, &(0x7f0000000b80)='syzkaller\x00', 0x7, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:56:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'vlan0\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x83d2) 17:56:03 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000000c0)=@framed={{}, [], {0x95, 0x6c}}, &(0x7f0000000b80)='syzkaller\x00', 0x7, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:56:03 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x1b, 0xc000, &(0x7f0000000080)=@framed={{}, [@func]}, &(0x7f0000000b80)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:56:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'vlan0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x20}, {0x7fff}]}) 17:56:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'tunl0\x00', 0x2}) close(r0) [ 766.822760][ T3542] usb 3-1: new high-speed USB device number 127 using dummy_hcd 17:56:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x2}) 17:56:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'vlan0\x00', 0x2}) ioctl$TUNSETCARRIER(r0, 0x54e3, 0x0) [ 767.072812][ T3542] usb 3-1: Using ep0 maxpacket: 16 17:56:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0045878, 0x0) [ 767.203151][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.214666][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.224981][ T3542] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 767.234301][ T3542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.389302][ T3542] usb 3-1: config 0 descriptor?? [ 767.844587][T13219] UDC core: couldn't find an available UDC or it's busy: -16 [ 767.852344][T13219] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 767.861166][T13219] UDC core: couldn't find an available UDC or it's busy: -16 [ 767.868863][T13219] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 767.894198][ T3542] hid (null): bogus close delimiter [ 767.923761][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0028/input/input86 [ 768.018795][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0028/input/input87 [ 768.090793][ T3542] kye 0003:0458:5019.0028: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 768.110380][ T3542] usb 3-1: USB disconnect, device number 127 17:56:05 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x3, 0x3, &(0x7f00000000c0)=@framed={{}, [], {0x95, 0x0, 0x0, 0x3f000000}}, &(0x7f0000000b80)='syzkaller\x00', 0x7, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:56:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'vlan0\x00', 0x2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'hsr0\x00', 0x8f2cfae3fd98d5ae}) 17:56:05 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0x4, &(0x7f0000000240)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x2}]}, &(0x7f0000000b80)='syzkaller\x00', 0x7, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:56:05 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) 17:56:05 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:56:05 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0x4, &(0x7f0000000240)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0xc}]}, &(0x7f0000000b80)='syzkaller\x00', 0x7, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:56:05 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002600)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x32}]}, &(0x7f0000002440)='syzkaller\x00', 0x2, 0xed, &(0x7f0000002480)=""/237, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:56:05 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x1b, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000b80)='syzkaller\x00', 0x7, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:56:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'vlan0\x00', 0x2}) ioctl$TUNSETCARRIER(r0, 0x800454dd, 0x0) 17:56:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x1000000, 0x0, 0x1}, 0x48) 17:56:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5450, 0x0) 17:56:06 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002600)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000002440)='syzkaller\x00', 0x2, 0xed, &(0x7f0000002480)=""/237, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:56:06 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002600)={0x6, 0x22c00, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:56:06 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000b80)='GPL\x00', 0x7, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 769.236672][ T3548] usb 3-1: new high-speed USB device number 2 using dummy_hcd 17:56:06 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002600)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa}]}, &(0x7f0000002440)='syzkaller\x00', 0x2, 0xed, &(0x7f0000002480)=""/237, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 769.501889][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 769.626306][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.637583][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.647695][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 769.657023][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:56:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x18, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 769.886026][ T3548] usb 3-1: config 0 descriptor?? [ 770.345265][T13254] UDC core: couldn't find an available UDC or it's busy: -16 [ 770.352984][T13254] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 770.361934][T13254] UDC core: couldn't find an available UDC or it's busy: -16 [ 770.369449][T13254] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 770.384238][ T3548] hid (null): bogus close delimiter [ 770.414261][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0029/input/input88 [ 770.507887][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0029/input/input89 [ 770.580278][ T3548] kye 0003:0458:5019.0029: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 770.618151][ T3548] usb 3-1: USB disconnect, device number 2 17:56:08 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:56:08 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000000b80)='GPL\x00', 0x7, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:56:08 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x18}, 0x48) 17:56:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, 0xffffffffffffffff, 0x0) 17:56:08 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0x1}, 0x48) 17:56:08 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002600)={0x6, 0x22c00, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:56:08 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x0, 0xf4240, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:56:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x48) 17:56:08 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)='9', 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000a00)={&(0x7f0000000540)=@sco, 0x80, &(0x7f0000000980)=[{&(0x7f00000005c0)=""/198, 0xc6}], 0x1}, 0x0) 17:56:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{0x0, 0x2}, {0x0}, {&(0x7f0000000440)=""/241, 0xf1}], 0x3}, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000cc0)='#', 0x1}], 0x1}, 0x0) 17:56:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x0, 0x0, "a0756e31954f350e96bb6a1dcf0458346e2bc1f0406e23f0d0b25003d0927c8746094be2c087ed9145265b3a22382ae3edd9af21195aafb1d5f502053009e7e8931de5e7aea8c49e2ce9501481942d12aa69440bbcf10d131b3a20548471a6b076399aa684"}, {0xa0, 0x0, 0x0, "93bb3e02c85a50906576b04e4c62d5d865087bd5e21d9aa48620bb4cabefacf25bb8d7c7b007c1f6ec1d3a"}], 0x50}, 0x20004091) [ 771.732437][ T3548] usb 3-1: new high-speed USB device number 3 using dummy_hcd 17:56:08 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17}, 0x48) [ 771.982227][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 772.112685][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.124067][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.134302][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 772.143662][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.194228][ T3548] usb 3-1: config 0 descriptor?? [ 772.643363][T13291] UDC core: couldn't find an available UDC or it's busy: -16 [ 772.650843][T13291] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 772.661174][T13291] UDC core: couldn't find an available UDC or it's busy: -16 [ 772.669075][T13291] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 772.694113][ T3548] hid (null): bogus close delimiter [ 772.722687][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002A/input/input90 [ 772.808693][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002A/input/input91 [ 772.878118][ T3548] kye 0003:0458:5019.002A: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 772.914665][ T3548] usb 3-1: USB disconnect, device number 3 17:56:10 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f00000001c0)=@string={0x2}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:56:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f00000021c0)=""/94, 0x5e}], 0x1, 0x0, 0xc8}, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000016c0)="99ee707050a4", 0x6}], 0x1}, 0x80d) 17:56:10 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002600)={0x6, 0x22c00, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:56:10 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x0, 0xf4240, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:56:10 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000500)=""/47, 0x2f}], 0x1}, 0x0) 17:56:10 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0x10, 0x0, 0x0, 0xb8b7}, 0x48) 17:56:10 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 17:56:10 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) 17:56:10 executing program 3: fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4) 17:56:11 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x10000) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="0002adff0dc5364263"], 0x10) dup2(r2, r0) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000100)=0x43cc0, 0x4) r3 = dup(r2) sendto$inet6(r3, &(0x7f0000000040), 0xfcec, 0x0, 0x0, 0x0) 17:56:11 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x0, 0xf4240, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 774.058468][ T3548] usb 3-1: new high-speed USB device number 4 using dummy_hcd 17:56:11 executing program 1: r0 = socket(0x2000000000000002, 0x3, 0x102) sendmsg$unix(r0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="0002"], 0xa, 0x0}, 0x0) [ 774.332373][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 774.462646][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.473848][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.484077][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 774.493389][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.608901][ T3548] usb 3-1: config 0 descriptor?? [ 775.083011][T13319] UDC core: couldn't find an available UDC or it's busy: -16 [ 775.090512][T13319] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 775.102949][T13319] UDC core: couldn't find an available UDC or it's busy: -16 [ 775.110605][T13319] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 775.124712][ T3548] hid (null): bogus close delimiter [ 775.167908][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002B/input/input92 [ 775.257045][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002B/input/input93 [ 775.327474][ T3548] kye 0003:0458:5019.002B: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 775.363577][ T3548] usb 3-1: USB disconnect, device number 4 17:56:12 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f00000001c0)=@string={0x2}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:56:12 executing program 0: r0 = socket$inet(0x2, 0x4003, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, 0x0, 0x0) 17:56:12 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$VT_SETMODE(r0, 0x80087602, 0x0) 17:56:12 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002600)={0x6, 0x22c00, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:56:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000080)="012fc060489cc3", 0x7}, {&(0x7f00000003c0)="9fdfa14976ba975d91d1f99650cbb98880860a70a2ff8f9c7a28540ac229e9e549f5c4792743086e1bad302d9195c6a7d78ed8d3740372e9326fd71df18180063e869450a04f3a8034245cffc1c798a0e814b0d68bdfc6f6868cd41b5ab918d33daa1991e7bde79189720442e523f0c128246aac058f736bf15121209f1af7637bac2d69ffb23a1b6a1074e5edc234e3c67419503d419d6a4d3a0e4df3caa19f0d8b2ab50ed2574c318042f087d9f68200a6ae8b105c4d7b8a732f17de315f0625fb63ddd300a43e73ed291159a223dcd44852bd58e412fc551f8249f54c913a009b70e3e17f068459ac051f483adf578c754265b5883f553290b48e88ec5993a043c9fda4682c01c3400fda1211b9f3ad03c71247a1fcdc67d02795d4038ffbaf2d1715182be62b08a8bdca96862bf1e2d5707ba3a3de7d7ec7c4e68cf30bf6d111b63678ce399774604cc1a9ab3f465bc1c37204062c844aa392ac55e6389809efe082e966e61548e2767f221416f49d11d36c4313804005ddc1d4acea65577f09cfea5d05daa5001f52b5ac41002f01c9480691be7e07878b35e24158488cf5de05a4cc3ba17e0c356ad9e0db1baf7d876d897f67b0747cd41653bacbb50be99a8af6ec3ef0f0678967a4f72968b75f437ee0487c0aa930ad551fa3c0e793431ad5bb16996b80b65359239640769917c73dfb43cedda0da965efe46c49702e015c09625f127e8487c592d049a7f4fdf0307beb339856891c120c4e131befa00cbcb8da8e68fdbee067477903628789793ee7d3f0420434a9bab6f6d2761e8b56041377031f68efcd6ecb17f655c2b5ee16d213e79fdfaf7bdfd0fbf569cde25fd0a3a2d9c63bd564439e3770e6eb91f135f82817903613e9ded39a80bf960e9628bfab04c819cee350a536a72913de557dd43eecfef0c14d83c44372d483fb5961ae955cc3fb22be48bf6a9d9f930a0a5b590839232270be051c593f8ae595a9718554666f839e78116fb77ab8cdd305447908660aae24288aa06bfee8de3638dad7e93839775baa49243e1d8a3ad085d6a13fcb403b8bac4a14ded38e08324417d4cce9b1b0f211d87e6d83d4798a98fa0d0f3726db15b7793385e63a0a44a42e0dabf5877f856bbd37a66040d924253882472bbe2e5fa71506ac4217028140777cffc468879ef4fbaf4aa4c7fee5ef7c5f7c0af86281fb164749ed9f9fc6e27df128a6b7ac03a07971021794a4ae1ed0f52dc2978cb8e7dda0ee6070a1ee6362977ae68a40b09fc6783c0d4fddb3559de2e9e8fcaff63b21c97477569634e9c8e55122867646d609ae6f07673a30079081eef81518a55be90e0dce272021f80289ef669a87a0a816073d9a9ed4c6b2d045c68c7a7fd17a955c3e6dd020be7ff3fa4956005ab01943e5747bf1e8eadac933e3d118a1f00f086d49b2964988c0d01364f9e330fee259e812809e85d0b92cafdb37e1098e3377142b18d49313233868d0fe463d43bc21c8a62c71a00e8c9232857c902a7a6abda773a4d9851ac170e9fbddd3b99395495e7aa3abb87f05203bb9ed9e763104e4d01b8424f60041f8deae8e797cea479de690e1d29d8ff75e6934b0fd40c825bcb7841df734b15ad7ab8386b0467d103f46b440e7fa1b1d5b4697cceabeea7b56cd5ab22bdb23b77914e5f941dc6d54f649cfda3a0c744bcbdcdcf0f225e226a70593d8d5599a00bb335bb533fa7ce8ea108ef4a9b91167e02a917facbe618f7bb087fd309d7aff628b4a9e964953322fcbf36771ae863c5432e74856d1a833ed975848ffed425c795e90a7cc4b6048be62fad9459043e419d85c881c63ef040eb317ad76242f523e81163acb8f719fa33e8ed3e6b798579c30cedbac6a55ce6c8db79efab7e8d9547b6acee3fbc4c39eebc4fdefba0ae162a0b54c096f65edaa1821f8abee0c96e9ed156b9e908819735263f00dbf8efa5f0815d5599f34637b13cccafc2731be050a5ebc3082ac856d5327d4f71b59e9ed1ec731b50ffd9226eb98cb53794a929a5b0af05489b3e62a917212a101caa016e52fee6bd3c773ac40276f6a00fef24ce48384ad05c66b97b92d287d73786b05d8f5f341ece24a89d880ff96881c83ff6b111bc05d4e37f7a7bdc7dae3f308d25c74373e9c74750ba43359fda6884f21b5556dbe9db7b1e25c9ecf833ff4d2de6846b5c061974946cc2112096798466e094ee70fbd0c051b3c5db6723cd70f98050d90baacfa16ebe19c5ef4a5279c51e596df365c83a9b3d109b977e582a21d484c8360e3facd20d8ae6b37687aeaf4d79a987d0851cfc5cca8b07e8c973936b52506651cc40f2d9e7b388310d2c7532ff65c029d5b562c21403e7afab3c3e09a76fed6aaed6a3cd107f16a01eccad3d8ec9aeb589536e0919f3483c27e6ace4438a976858e98b646259708a153b38eb563995b461b556a3d31f9fcf9f85d5b71a570c5653b83132bc7145d2ece4006896fb649bf0d21813e1968f9b1a567ca87280bdabad8a4f55269e9a30eab6c2dc855b6039bf17abecb7e7d6671f2442c0ea65793a0b46ec7762564292d40a0163a2d7ab03d5a8169d5b0dadb2adf78710f88eb95714c77b593399e53ed2c498ae293a3da0ddf19d2ef591e0d8ae18bcf393dfdb0ee9071311c2a09a6ba320bf0adf018ced12cb93", 0x76a}], 0x2, 0x0, 0xe0}, 0x0) sendto$unix(r0, &(0x7f00000000c0)="02df9b74061a995dabcb6101740179670828e7cf1570cc7c9cd2928667bd38ab2a6bc9aa05439ddc8210a26a163f7d7a7a9db2bb7920c5b3f940fbced52be95847acb3727928b100d0e20e842db50b1914213fe599dc40ae93f715a31eb8c39dc314fa3f133db3a66db1e8b39a9ecbe9f2b213f33439792ce63b83012d2c99b62bbb63c28df3f279465115d098e9b9efee", 0x91, 0x0, 0x0, 0x0) 17:56:12 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x0, 0xf4240, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:56:13 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x0, 0x0, 0x0) 17:56:13 executing program 1: r0 = socket(0x18, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f00000000c0), 0x4) 17:56:13 executing program 3: msgget(0x1, 0x611) 17:56:13 executing program 3: geteuid() pipe(0x0) 17:56:13 executing program 5: r0 = socket$inet(0x2, 0x4003, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000000)) 17:56:13 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) dup2(r0, r2) [ 776.492924][ T3548] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 776.752197][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 776.872584][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.886974][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.897578][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 776.906884][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.047312][ T3548] usb 3-1: config 0 descriptor?? [ 777.514404][T13350] UDC core: couldn't find an available UDC or it's busy: -16 [ 777.522085][T13350] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 777.531067][T13350] UDC core: couldn't find an available UDC or it's busy: -16 [ 777.542067][T13350] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 777.564195][ T3548] hid (null): bogus close delimiter [ 777.593571][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002C/input/input94 [ 777.686805][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002C/input/input95 [ 777.827846][ T3548] kye 0003:0458:5019.002C: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 777.860124][ T3548] usb 3-1: USB disconnect, device number 5 17:56:15 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f00000001c0)=@string={0x2}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:56:15 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x40) setreuid(0xee00, 0x0) r0 = getuid() mkdir(&(0x7f0000000000)='./file0/../file0/file0\x00', 0x0) lchown(&(0x7f0000000100)='./file0/../file0\x00', r0, 0x0) r1 = getuid() setuid(r1) rmdir(&(0x7f0000000200)='./file0/../file0/file0\x00') 17:56:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x3}, 0x8) 17:56:15 executing program 4: utimensat(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x3b9aca00}}, 0x0) 17:56:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:56:15 executing program 0: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x100000000}) 17:56:15 executing program 5: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) fcntl$getown(r0, 0x5) 17:56:15 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000030000000000080044944eeba71a4976e252a22cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0xfffffffb, 0x4) recvfrom$packet(r1, 0x0, 0x700, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="090100001800000000000000000000000c000000000000000000000025000080d7ee07a3792b00a2d2b9400635e2de9bda4f5ebc5a7a1a2b73cd5fca5837c4449e000000e6a689c0007198"], 0x1100}], 0x1}, 0x0) 17:56:15 executing program 0: bpf$OBJ_GET_PROG(0x22, 0x0, 0x0) 17:56:15 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) 17:56:15 executing program 4: io_uring_setup(0x5cad, &(0x7f0000000000)={0x0, 0x0, 0x8}) 17:56:15 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x48) [ 778.942035][ T3542] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 779.191928][ T3542] usb 3-1: Using ep0 maxpacket: 16 [ 779.312234][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.323785][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.333983][ T3542] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 779.344785][ T3542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.389288][ T3542] usb 3-1: config 0 descriptor?? [ 779.860361][T13374] UDC core: couldn't find an available UDC or it's busy: -16 [ 779.867994][T13374] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 779.877074][T13374] UDC core: couldn't find an available UDC or it's busy: -16 [ 779.884705][T13374] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 779.914235][ T3542] hid (null): bogus close delimiter [ 779.941989][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002D/input/input96 [ 780.028059][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002D/input/input97 [ 780.098678][ T3542] kye 0003:0458:5019.002D: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 780.138901][ T3542] usb 3-1: USB disconnect, device number 6 17:56:17 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3b, &(0x7f00000001c0)=@string={0x3b, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f700c0d88d694a6a3be9f91f721e488fd7ba7dbccb471e448df83343ce"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:56:17 executing program 0: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:56:17 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) 17:56:17 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000030000000000080044944eeba71a4976e252a22cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0xfffffffb, 0x4) recvfrom$packet(r1, 0x0, 0x700, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="090100001800000000000000000000000c000000000000000000000025000080d7ee07a3792b00a2d2b9400635e2de9bda4f5ebc5a7a1a2b73cd5fca5837c4449e000000e6a689c0007198"], 0x1100}], 0x1}, 0x0) 17:56:17 executing program 1: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, 0x0, &(0x7f0000000040)='syz') 17:56:17 executing program 5: syz_clone(0x80904100, 0x0, 0x0, 0x0, 0x0, 0x0) 17:56:17 executing program 4: bpf$OBJ_GET_PROG(0x16, &(0x7f0000000040)={0x0, 0x0, 0x18}, 0x10) 17:56:17 executing program 0: syz_clone(0x84000600, 0x0, 0x0, 0x0, 0x0, 0x0) 17:56:17 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000030000000000080044944eeba71a4976e252a22cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0xfffffffb, 0x4) recvfrom$packet(r1, 0x0, 0x700, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="090100001800000000000000000000000c000000000000000000000025000080d7ee07a3792b00a2d2b9400635e2de9bda4f5ebc5a7a1a2b73cd5fca5837c4449e000000e6a689c0007198"], 0x1100}], 0x1}, 0x0) 17:56:17 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) 17:56:18 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={0x0, 0x7}, 0x10) 17:56:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003e40)=ANY=[@ANYBLOB="10100000000000008800000007000000a8496774ab7179348e6beac5ac7b2d950f1d576581f70124e7aa3a2ff039f4115bb536c57087b44436a053537669a1b4c5b7ab26ae36f3652b3d0283650d2f304cf4f0404fb2535fc26f879a6c984e64bfcf77d1398e7a58be72e9cfef3c215674dc3c76c0b4c09d09154d4b1079e593f72659cf37acb2fdc5a0588661d19da357130e931d3340e99098b25bf8c49c972554133784601529e95f76811bc8bd866cebd6789850615f055251f13d0c6d61f25a771ded626b0d344404b38c5d70e6bee6348e08f85958c977b7155e452a2df717e75aa4525de7d5b1beaba208da43eee3b7016dc32cf4f17850ab9d3de27778a5d6e87499b68f5abe7c4e5026f3f2dfa4e566581de65926b326f2fbc4b9e4873a4c735a6d85ba346fd1b1b65a7becab6fb395f0813fba2207d87ea1acdfe2b3da2ec1b67fc0332551f89ed22dd42e359c63510adaf71c3f53e46394e7b07724f5cfef36afc7be6e6047104b9fc823d667502d5a119e3ec9128729f5329ccd03cfb7e4a61023e46cb0762551a985908ec9e9509b9a907ab8cba037787eeb80bff179e9c2b858e7564aa4600b9fc5893fee57657614b33c54ce16764e8b3d5092c15b33335401b7652aacd63a7acf741e96aa5f56db41b71519866e0d5932d35f3f652612231f43b1ba2f0887c8a6c12360a1a0d2e947fd8cb5c6ac6e1590aaa99afc7ccf23adbc83e4ea54cb7db9a3bf62d6e28869f6ff2746d04fe086829266bdaf8d9107e080167f171d97577615b2e0f20c7e3365826d2c200f2e69816f770087d168fe34b54fb91911f149d9097bfb34c479874dad5cf93e1fa8bb44d27674d5d36737b58f5836d8667fa28a59c08c6a7b60afe356295826f48c7834d8402ecdd1245c3686e904417862e943f8823995286c5a545984bf03ed8ef25e4a483aef97868effbbb8bb4f0645a8ae3874b032c99b16171a57dde511f859048558b6c091f4f16c72ae3e9e06b370e2b22dce381be8f4f10acdb276bd501f0dc79b7766e20b08d807586da0e83faafd89e66ed2825a520cafdb631628cd2360cc1537972501e712315d0337e1742b9bfd95801295cc3083b20fd5d6286139dfabfe3680c444f4772a442cf95cad516c41789b4cb885eb60aaf7cd957562c1846d2c993a975fdb1b3a332bd7c21709ac70522f02f59494f3252ea064b74fd4c152ae52e4a95e3016a76cd9478e469cae23765bdb2ef04d90dc427f29d42a388611930d00c4e8e66a18c5fb09dd4f0765e047f3c3bd526316588dc282e22441ccf7d3b1fa4ba72c8e7aab7d5ed61b632193e7ab8cfa717dab3f0f9c1ee3edf61fd22d449f687863d4857b9fee30b0c07cdbeca9e41aa3932f358536689338503de581e4b3de2c0bd85dbb43d8c767d5b09c9084c7017c9c8391d2f9a519662b2bbd7b6058953bb23a63f980c421c892ada0bb6d9c0e3ab42366ff747a856db27c2ebff1b446e9cde8e8ddbbab10a230aefd42a895d69f86ac8c44cb9b06b6df24cc80dec15edca42e126527d61c3e0983a8cdcd3a0d80a7d9a7f0f9d845d7a8b3560a4fabd1184251760a19f43034087780b485356c1355303eed3c292815c82f14e126e96c36d1cda75c599dc02ba14d39f1861a7ef74d68d844e50a3847d077dde1cfc42bbc87196512a7d3742cfd4b47f2077674d3f4daeb73e99d07925f359708bd7ff331270c0476e7029d85774fe05f98bf00185cb9fedea1947aa9e599bd09b97a0877d919193ac6aecb7c7b48c01f170c1f3980655d1dbf3067bac520f8d6801b4d907c573c4d21ffebc215639f6dad2af3ac52cd9141df92bc7bcc1806567bfe91ffa627d2a59d7a2df64f65a9fcf70d9c3adad8b59b5479fb2fb0f74974a88ba1df788d04fae4b3dab1b4680b3a53611cb0e8540a757c4fa3409ed698df65f33bf592d837aa27db4c7073a649d61ce578029bf5604be042556a13b475b6344979618a80746be799d679820aa7af2ddf6e58977bc474f1cf0082af0e79d32c1d795a13889b041ba82241f441c90ce3c459bfafad4706775e2348ee4ffa9ad6b1d5a4e99c47c5ba78e4a34083acf3e4ec6f40c1034f839fbb2dd50c88e3ed5f5ca8e682747efae87fe3820ec5e0b0cc77cd6c8d31a7dbbda9d20d48721b721a63b44cc7fb10da7b954ccadb5808a4627a8dcb3bbb66d86b05ece1e1e891e30d15a35780d848302f0f437df8a704af3b96a1242fdcac080d31b37e3334e78eb0d639a7123893f9731ce0d1df4c88cd3caa073d630a60fea0fe1a06dc71e36c93e89cceea4b4d8a3a9d1836ed3e91057b732df018f9d8ab25ad49ffeda1653a8a62ce45ea84d31cf7f0e5861811f61e4c0be9000d16c43f06ed50b59e4e8a86718bbb1386a9e1ec4b0e0d090557db460e399e2134ba7995dc6180cbf54a4c19b8b4dc9b1026b761faa7922bbf6e047fcf43c42ad4288a84eee28dadd35564d3dc5123400d685fa92160e6cf23457a6907dd54f64f5bb9640520c6b3f9eca7af75f8335586f3444eae31d6d058906523e88e36a926b26ef9778228abff7260c62355abb5d83f314edb098a6431c24729a30d2e00107fb6eac4a9b92816b5b1be2a430d7a3e481673b6d8ad2fc6f454fe9bcf0fba0c6f56522adad6a5f2d82209e98a3a84949f5782fd8bc02f697bdf90978694ef9c7c8c2c1df619e54ef4950c030d73d418ea9f752552a39864969e5d47269da91da01f2795f320957e62869faaedeb628e1211a9f2e19f041eaa89dde78d3ba467901f5d3cef4face09e36413a492e30f96b65a07129d2f4713e2069fe30b77890717297a35011a6df352539c948a44eaa4993711dc45c10b77b0591b24ba9babcd2dd517821e296dd9c19a6878138677eeb5fd50c2762baf5c3f98a73ceb7e302cdf9bbacd179c420522a3cd4bd3320456e7829725c26682eac6545b292966db828c3d10909df97ec15afa6864bf4b1758f799f6aa82cc8eef7667e35f8b09aace523d41c89e5f6a1e2666e614f1cd7b51d49d2e876a5b1fefb7d84837755753ffb77c387ea6da218fa5feca63ade15c7e5adbc3c6074118d53a3d0a2a532a3b0c5f3aca6d9d0d7cd4b254f3481ceafe1b199934376c500e10730c249b12b4e6cee10b1a70de77b7601161cc6845c26f0b51b59fb54263cea71a3b2b4673a472ad1168a4eba28bf95d778abcccd76a1fc638d698888d72ab7d5547144b249b2656f889a5f6d7afa5e4101761d6e5f2f639dbf295f862be8eeb9e327df25a26c22f7803b368cf3570441ddb13f506ac809b92ef4623ffd393224d2f97f99e70848d0f2660bff09f9be937f4296d5d3a4d618d1e431f0d802dc677fb784da41430c2ef37fbf305c25b495a6db76694d368ef034d205f2593e8707064ffc97f8438a2317c1551021a5245ec1a0da2f2c2eb5714952cd124e9f645f2402f9d43aee957ed07266f6898bc63e12ce14af1f71ebc738a985540897cc2149c11e443bdb1e3803c36d1a1bb7d80310194c8335c0eec4700e3d673c51f75592aea35b73f8a37ce23850143a7431807da7c0283c5232c9473cddf1538c563435c0d2697694411b8a235ca91d558c3e75ff5f2f14d7c577187b7bfe7298a5e81fe8045912c7bf82fafb18ae320b8625fa1d700e569cd78898f2640880649525aadbe1f6c8fa397b51d24474e5dc6f585e9b4224e79251dc410f2b6810c175c324328d3f8f8f76b3694a051487b59ff50d0639bc42c02e6b03ffa722ea51e9ad201aaa2e4c4f0488abe1a47eb67a90b243db0c30b73eb1024c891e7c7950518aa37433709ce4567843535baca93bb41406aa4eee85b07d0f1d3a1a92be78832cbc47c6c54acc570f9b55326b4ba97a338fab103b1cf0f8680aec3913cb19b256889490a2f975bb6587f8f9aa09544b564139e881703bdd50381f98c525c7c7d451204cf2cbec182576ed15aec921d87b836941a0185845daaece9a21a9ff5cbc00beb18b7e81c5d628c0886379e89abc05e56c607f027cdadbf6503eeb1d7c2ad8af85ab55806dee12e6ac8dc8163c0ed176a85797c45ec7e4da5a1c9e9db2c4caa24d8bd64d01da76a07da6626f02763a41a0ec6ef32d36dcc9d131fc766f821ded2cdc2865b8afa73a8c9a7aef92c65e5f6a14f65509337c0e20a1b8e99f63acc274f438000ea3695889277637e3d1cc3a49061473fd285c754434af86a233cc8a858f3191de708edd6a76b8720d290832b113fbd9bc8be2a1478ca9d2b181828c42097ea6140f2a60fc5bb8f07874f663c3bcd1aee704b8540a47496eb46f593b0d237006b9adc29e152150ec06d9a365d06c64b7b450cffb421d469542223ca2ae7c7c3790499e1ce8b5d982026cd64d42e74b6c4536e46628c5b4703e2d6aa940e059227f5f132b0a8ab31c9dfad298d7c1fe874ab42bf0d8ff1a1e4b71cea3df1fecd9e0e9eb418378712bdb27c32ad262639cc41a55f29ef03e0757225f3f9ab3b32e752731f578033c839b6aa08efb827800ed50a10c420dff10143da24055330f30d15a05c183067e2741fdfeeee75c868adc50b394c099e8ebfb07035a79d9968b2667736289cbe94e7bb03a0546c75060fde27035ff54c7a1202d44b360fd62ff61686c861ffe063a84f45c8ebcfa482fa9619848dc76ab097a1ce829d460a127272a571401b383fe82ba1aa72993d4ee15d7e7dc31d499d319c321692a1b38bbc650a602668dc7c0c8d2cd4dddca6d749f9b35d730b4cf8cd88b0166f03b5c06d2cc2edd10311affc77f66532bb11b3673b87fabf030527bf1ee1b1e8ba2ae16acc0a2419ea120f29acfdb1044f87731b48fb785632d77cee7dce674b551e32872eddadd5517d9d9c35d07cc9f1ab63009511d81346320b9ad731925395103e5ef00374e990a243b1ee5b34b98ecf86df8b6355fdd21a431eb0ca04c7abea9886453f0313b2308eb613649a446e8cdc3c203304493864159d1999e66e16f2d0810a41cfdcf7a435a677f8caec857536c33dd768d28d8e8a59d30b7d182f5fb57d312b9227052ad8eda47563230e9d39f50849f9b48b13925324e459f375a25b25ea3b45252e947a7fd22f6d37c26f4f546a8f1ee8e105f78424a5f0f575c718184cafc3132e8a54800cfefc423c1ea440b8a2138255aa0ce6f20ba74779bb7d4e4355794cd411c58559454eb8bef5963677cbce45ee4376314d7728a8cc02f087a52aca03b3cb07a3bbd29285b00be285e565302a3098817062e0648acf83d36901c7d280ce780beb47f0cf0e737d84e9a1af0104db32970aded89936a84c5d856e3f7b8d84f4d8058af3672aede5a6ea2ba458e21792b5f0dc075e457fa1642ebf3f9a848d009ddc371279ae959701a59b2b05e0bcf8a58970abfe1e2d78724c6389efa93a7ff2aa39b1f9e2d097fd8a786a779bb593ea996dea1d00cc674fa06c3e6296732ffb5d66d548c6687bb2294cfd9b4a71a8a67d541d556d0df26555db32f11de954ae46d9fd91c0a9f8b1ae21d13d8a7def21f65e9f9c325c5e9116e629f22eca859228989c8e4074b89cdaccc1288696715361b77fe7f07c3aa20b30d7e237226a50036e1245055fa35cfa4af2adc550bc888063c241963b80790f58c346434bd0950976c8132fac72fb0ee0fc86e595e6372adcf9e9893964e850e3c5b8fb26ea6c34089fecd8be1b57a680e695be64f1d355c3e23ebc49206cc5b7d989ba6fa52efbd158c15fe0e2b209409752d0c6989b751dd9760ebed3f601a90004a69300ba93e4b5558ceda4480dbfb987c1b37d8eb3643e7580000000000000017010000000200009fdfe082e7b8d98936fe36087aafa98bd14e75d436fc9490cbc7b0cda92eea75f2e662f09dae244c5933d44058e9d53be71524705c1205f75e2c9c3f842b556ccd66bb1b2900000038000000000000000100000002"], 0x1220}}], 0x2, 0x0) [ 781.213898][ T3548] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 781.462505][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 781.582810][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.597487][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.608264][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 781.617572][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.640142][ T3548] usb 3-1: config 0 descriptor?? [ 782.105707][T13401] UDC core: couldn't find an available UDC or it's busy: -16 [ 782.115177][T13401] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 782.128121][T13401] UDC core: couldn't find an available UDC or it's busy: -16 [ 782.135779][T13401] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 782.154262][ T3548] hid (null): bogus close delimiter [ 782.181088][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002E/input/input98 [ 782.267633][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002E/input/input99 [ 782.285447][ T3548] kye 0003:0458:5019.002E: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 782.367753][ T3542] usb 3-1: USB disconnect, device number 7 17:56:19 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3, &(0x7f00000001c0)=@string={0x3, 0x3, "e7"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:56:19 executing program 5: bpf$OBJ_GET_PROG(0xc, 0x0, 0x0) 17:56:19 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:56:19 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000030000000000080044944eeba71a4976e252a22cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0xfffffffb, 0x4) recvfrom$packet(r1, 0x0, 0x700, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="090100001800000000000000000000000c000000000000000000000025000080d7ee07a3792b00a2d2b9400635e2de9bda4f5ebc5a7a1a2b73cd5fca5837c4449e000000e6a689c0007198"], 0x1100}], 0x1}, 0x0) 17:56:19 executing program 0: keyctl$reject(0x13, 0x0, 0x0, 0x3ff, 0x0) 17:56:19 executing program 4: request_key(&(0x7f0000000400)='encrypted\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='syz', 0x0) 17:56:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000700)={0x190, r1, 0x3, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEATURES_WANTED={0x170, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '-\\:@[.!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_to_bond\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&-$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4f}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x190}}, 0x0) 17:56:20 executing program 1: syz_clone(0x82200000, 0x0, 0x0, 0x0, 0x0, 0x0) 17:56:20 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000440)={[{@overriderock}, {@map_off}, {@check_strict}]}) 17:56:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00'}, 0x10) ioctl$FS_IOC_GETVERSION(r0, 0x40086607, &(0x7f00000000c0)) 17:56:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='uni_xlate']) [ 783.492094][ T3548] usb 3-1: new high-speed USB device number 8 using dummy_hcd 17:56:20 executing program 5: bpf$OBJ_GET_PROG(0x13, &(0x7f0000000040)={0x0, 0x0, 0x18}, 0x10) [ 783.733360][T13439] FAT-fs (loop3): bogus number of reserved sectors [ 783.740182][T13439] FAT-fs (loop3): Can't find a valid FAT filesystem [ 783.761917][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 783.912352][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.923907][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.934090][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 783.943512][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.146746][T13440] ISOFS: Unable to identify CD-ROM format. [ 784.235668][ T3548] usb 3-1: config 0 descriptor?? [ 784.694713][T13429] UDC core: couldn't find an available UDC or it's busy: -16 [ 784.702908][T13429] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 784.712123][T13429] UDC core: couldn't find an available UDC or it's busy: -16 [ 784.719625][T13429] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 784.744148][ T3548] hid (null): bogus close delimiter [ 784.780752][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002F/input/input100 [ 784.867115][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002F/input/input101 [ 784.952870][ T3548] kye 0003:0458:5019.002F: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 784.970101][ T3548] usb 3-1: USB disconnect, device number 8 17:56:22 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3, &(0x7f00000001c0)=@string={0x3, 0x3, "e7"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:56:22 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) 17:56:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='uni_xlate']) 17:56:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000019c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) 17:56:22 executing program 5: request_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, 0xffffffffffffffff) 17:56:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x14}, 0x14}}, 0x0) 17:56:22 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000002000), 0x40000, 0x0) [ 785.659101][T13453] FAT-fs (loop3): bogus number of reserved sectors [ 785.666466][T13453] FAT-fs (loop3): Can't find a valid FAT filesystem 17:56:22 executing program 4: add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) 17:56:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 785.842044][T13450] ISOFS: Unable to identify CD-ROM format. 17:56:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='uni_xlate']) 17:56:23 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000002000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 17:56:23 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r0, 0xfffffffffffffffe) [ 786.122430][ T3542] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 786.384068][ T3542] usb 3-1: Using ep0 maxpacket: 16 [ 786.395511][T13465] FAT-fs (loop3): bogus number of reserved sectors [ 786.402539][T13465] FAT-fs (loop3): Can't find a valid FAT filesystem [ 786.532253][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.544267][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.554449][ T3542] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 786.563743][ T3542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.666006][ T3542] usb 3-1: config 0 descriptor?? [ 787.129356][T13455] UDC core: couldn't find an available UDC or it's busy: -16 [ 787.136998][T13455] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 787.150312][T13455] UDC core: couldn't find an available UDC or it's busy: -16 [ 787.158022][T13455] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 787.176848][ T3542] hid (null): bogus close delimiter [ 787.205066][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0030/input/input102 [ 787.288984][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0030/input/input103 [ 787.358545][ T3542] kye 0003:0458:5019.0030: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 787.389151][ T3542] usb 3-1: USB disconnect, device number 9 17:56:24 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3, &(0x7f00000001c0)=@string={0x3, 0x3, "e7"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:56:24 executing program 4: setuid(0xee00) openat$vcsu(0xffffffffffffff9c, &(0x7f0000003280), 0x0, 0x0) 17:56:24 executing program 0: bpf$OBJ_GET_PROG(0x12, 0x0, 0x0) 17:56:24 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x4, &(0x7f0000000500)=@framed={{}, [@generic={0x1}]}, &(0x7f0000000b40)='syzkaller\x00', 0x5, 0xc5, &(0x7f0000000b80)=""/197, 0x41000, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000cc0)={0x4, 0x0, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 17:56:24 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x0, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:56:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='uni_xlate']) 17:56:25 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x8001, 0xdc, &(0x7f0000000080)=""/220, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:56:25 executing program 5: bpf$OBJ_GET_PROG(0x17, &(0x7f0000000040)={0x0, 0x0, 0x18}, 0x10) [ 788.035621][T13476] FAT-fs (loop3): bogus number of reserved sectors [ 788.042853][T13476] FAT-fs (loop3): Can't find a valid FAT filesystem 17:56:25 executing program 0: keyctl$search(0xa, 0x0, &(0x7f00000000c0)='.dead\x00', 0x0, 0x0) 17:56:25 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000800)={[{@map_normal}, {@check_relaxed}]}) 17:56:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80ffff, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000006300000005000025ce000b000f00c00c04000000000000000a000000001700000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 17:56:25 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff30, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030022000b04d25a80648c6394f90624fc601000034046000000053582c137153e37024801800d000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 788.483335][ T3542] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 788.737668][ T3542] usb 3-1: Using ep0 maxpacket: 16 [ 788.805842][T13486] ISOFS: Unable to identify CD-ROM format. [ 788.862606][T13491] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 788.863818][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.874570][T13491] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 788.883941][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.884119][ T3542] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 788.884250][ T3542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.892493][T13491] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.5'. [ 788.979528][ T3542] usb 3-1: config 0 descriptor?? [ 789.443996][T13479] UDC core: couldn't find an available UDC or it's busy: -16 [ 789.451463][T13479] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 789.460474][T13479] UDC core: couldn't find an available UDC or it's busy: -16 [ 789.468110][T13479] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 789.487762][ T3542] hid (null): bogus close delimiter [ 789.516724][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0031/input/input104 [ 789.603007][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0031/input/input105 [ 789.668413][ T3542] kye 0003:0458:5019.0031: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 789.700853][ T3542] usb 3-1: USB disconnect, device number 10 17:56:27 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1f, &(0x7f00000001c0)=@string={0x1f, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f7"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:56:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x6, 0x6bf, &(0x7f0000001740)={0x0, {{0x2, 0x0, @loopback}}}, 0x8c) 17:56:27 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000080), 0x8) 17:56:27 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x2}, 0x0, &(0x7f0000000100)={r0}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 17:56:27 executing program 0: pselect6(0x40, &(0x7f0000000680), &(0x7f00000006c0)={0x2}, &(0x7f0000000700)={0x5}, 0x0, 0x0) 17:56:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000100)) 17:56:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000100)) 17:56:27 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000000440)="0000000000000000000000806856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}], 0x0, &(0x7f0000000140)) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) connect(r1, &(0x7f0000000280)=@ethernet={0x1, @broadcast}, 0xaf) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x6021, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = creat(&(0x7f0000000400)='./file1\x00', 0x12f) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), &(0x7f0000000600)={0x0, 0xfb, 0xd2, 0x1, 0x80, "80bc407d42cbb75796726b282c9b3ba3", "29ff7a68fd3531cb520cc66b184237faf95843dec6cba02de3d640bc88c55e94dc6a69135ebb7eb3567c0d62279eab6c6d77f7014b4b8b0c4eba85419681db030ee75ab4bf3085e8bfb183af743d6c8322fcb4f628154f8216e885e62b28067498891373005bec9ebde60a9f399310c04f6e6a9e0d6ffe84ce59fa0f64c18fe4e08567adb51864ef7d3d2823ad0693221163b1b60c9d9341bdd0f324e39886c10bcd3ffc61df2e9e23c4e739f0d936e14e4af93f556d83661efa984d77"}, 0xd2, 0x0) write$binfmt_script(r3, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'sfq\x00'}, {0x20, '#g,*&#*.'}, {}, {0x20, 'sfq\x00'}, {0x20, '3[)\'+'}, {0x20, '[\'+\''}, {0x20, 'veth1_virt_wifi\x00'}]}, 0x3b) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000003c0)='veth1_virt_wifi\x00') r4 = socket(0x11, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x18c) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000880)={0x0, 0xe6, "ac088b4ee358f908970a519ada79298861b3dc2dd36d89e5cd53e2a9a6919cb3f25df991c8bbfc5abe2a7a8aef36b43ff2ef3795a154f6a7fd051ec4e626823b68603494973525dc5fb0db50c7227f61930375a0b5173de7b5ca11569a7f094c70d1188fc5bcb6a7d12c9b81331c2e7ef54ed9767640c649f4ee3f8e0edb1eaf3f5058ecf1d8eac625af3d46381e9d27f94515a91e4a4bcc8b89a094d74f00e35862955ae3f887dfe197e59b9ac8e01a0c3a65405962b2190e952dd04b60c2c3e03915fc7bf8121e9ebbe1b75db4dd836958e005b825843140c7dcd575b12a8f94a4b648b963"}) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) faccessat(r0, &(0x7f0000000300)='./file1\x00', 0x43) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0xa00, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17}}]}, 0x78}}, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') 17:56:27 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xef, &(0x7f00000000c0)=""/239, 0x0, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:56:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000100)) [ 790.665772][T13508] loop5: detected capacity change from 0 to 1024 17:56:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x6, 0x9, &(0x7f0000001740)={0x0, {{0x2, 0x0, @loopback}}}, 0x8c) [ 790.837587][ T3542] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 790.880553][T13508] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 2147483648 [ 790.908202][T13508] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 790.979750][T13508] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1144: group 0, block bitmap and bg descriptor inconsistent: 8192 vs 22 free clusters 17:56:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000100)) [ 791.060605][T13512] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'. [ 791.132679][ T3542] usb 3-1: Using ep0 maxpacket: 16 [ 791.253316][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.264472][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.274581][ T3542] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 791.283862][ T3542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.417505][ T3542] usb 3-1: config 0 descriptor?? [ 791.883873][T13503] UDC core: couldn't find an available UDC or it's busy: -16 [ 791.891395][T13503] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 791.900599][T13503] UDC core: couldn't find an available UDC or it's busy: -16 [ 791.908191][T13503] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 791.924428][ T3542] hid (null): bogus close delimiter [ 791.960208][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0032/input/input106 [ 792.050667][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0032/input/input107 [ 792.119202][ T3542] kye 0003:0458:5019.0032: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 792.140447][ T3542] usb 3-1: USB disconnect, device number 11 17:56:29 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3, &(0x7f00000001c0)=@string={0x3, 0x3, "e7"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:56:29 executing program 0: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x40000) unshare(0x62000200) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000100000000e437811fc5c868b1f99f6e87747e8d6c791cc223c81b730000000000000000000000000000000000000000000000000000000000008c45daf3acd0"]) r2 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x44000400) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], 0x38}, 0x1, 0x0, 0x0, 0x6afddd45d02b215a}, 0x40094) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 17:56:29 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "19b64c2a0939890c4a77fdc813fa8a936edfa57d707c46e0f691f5a180439a03dcc62253f155f21ec334d8b9db7afa1f933fe4ff22afb8bca44ade08c3db86fa"}, 0x48, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f0000000100), 0x0, 0x0, 0x0, r0) 17:56:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x5, 0x0, 0x3) 17:56:29 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000000440)="0000000000000000000000806856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}], 0x0, &(0x7f0000000140)) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) connect(r1, &(0x7f0000000280)=@ethernet={0x1, @broadcast}, 0xaf) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x6021, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = creat(&(0x7f0000000400)='./file1\x00', 0x12f) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), &(0x7f0000000600)={0x0, 0xfb, 0xd2, 0x1, 0x80, "80bc407d42cbb75796726b282c9b3ba3", "29ff7a68fd3531cb520cc66b184237faf95843dec6cba02de3d640bc88c55e94dc6a69135ebb7eb3567c0d62279eab6c6d77f7014b4b8b0c4eba85419681db030ee75ab4bf3085e8bfb183af743d6c8322fcb4f628154f8216e885e62b28067498891373005bec9ebde60a9f399310c04f6e6a9e0d6ffe84ce59fa0f64c18fe4e08567adb51864ef7d3d2823ad0693221163b1b60c9d9341bdd0f324e39886c10bcd3ffc61df2e9e23c4e739f0d936e14e4af93f556d83661efa984d77"}, 0xd2, 0x0) write$binfmt_script(r3, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'sfq\x00'}, {0x20, '#g,*&#*.'}, {}, {0x20, 'sfq\x00'}, {0x20, '3[)\'+'}, {0x20, '[\'+\''}, {0x20, 'veth1_virt_wifi\x00'}]}, 0x3b) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000003c0)='veth1_virt_wifi\x00') r4 = socket(0x11, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x18c) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000880)={0x0, 0xe6, "ac088b4ee358f908970a519ada79298861b3dc2dd36d89e5cd53e2a9a6919cb3f25df991c8bbfc5abe2a7a8aef36b43ff2ef3795a154f6a7fd051ec4e626823b68603494973525dc5fb0db50c7227f61930375a0b5173de7b5ca11569a7f094c70d1188fc5bcb6a7d12c9b81331c2e7ef54ed9767640c649f4ee3f8e0edb1eaf3f5058ecf1d8eac625af3d46381e9d27f94515a91e4a4bcc8b89a094d74f00e35862955ae3f887dfe197e59b9ac8e01a0c3a65405962b2190e952dd04b60c2c3e03915fc7bf8121e9ebbe1b75db4dd836958e005b825843140c7dcd575b12a8f94a4b648b963"}) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) faccessat(r0, &(0x7f0000000300)='./file1\x00', 0x43) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0xa00, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17}}]}, 0x78}}, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') 17:56:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x6, 0x2, 0x0, 0x8c) 17:56:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x1600bd74, &(0x7f0000001740)={0x0, {{0x2, 0x0, @loopback}}}, 0x8c) 17:56:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x5, 0x0, 0x0) 17:56:29 executing program 3: clock_getres(0x6, &(0x7f0000000100)) [ 792.837468][T13526] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'. 17:56:30 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000000440)="0000000000000000000000806856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}], 0x0, &(0x7f0000000140)) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) connect(r1, &(0x7f0000000280)=@ethernet={0x1, @broadcast}, 0xaf) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x6021, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = creat(&(0x7f0000000400)='./file1\x00', 0x12f) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), &(0x7f0000000600)={0x0, 0xfb, 0xd2, 0x1, 0x80, "80bc407d42cbb75796726b282c9b3ba3", "29ff7a68fd3531cb520cc66b184237faf95843dec6cba02de3d640bc88c55e94dc6a69135ebb7eb3567c0d62279eab6c6d77f7014b4b8b0c4eba85419681db030ee75ab4bf3085e8bfb183af743d6c8322fcb4f628154f8216e885e62b28067498891373005bec9ebde60a9f399310c04f6e6a9e0d6ffe84ce59fa0f64c18fe4e08567adb51864ef7d3d2823ad0693221163b1b60c9d9341bdd0f324e39886c10bcd3ffc61df2e9e23c4e739f0d936e14e4af93f556d83661efa984d77"}, 0xd2, 0x0) write$binfmt_script(r3, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'sfq\x00'}, {0x20, '#g,*&#*.'}, {}, {0x20, 'sfq\x00'}, {0x20, '3[)\'+'}, {0x20, '[\'+\''}, {0x20, 'veth1_virt_wifi\x00'}]}, 0x3b) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000003c0)='veth1_virt_wifi\x00') r4 = socket(0x11, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x18c) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000880)={0x0, 0xe6, "ac088b4ee358f908970a519ada79298861b3dc2dd36d89e5cd53e2a9a6919cb3f25df991c8bbfc5abe2a7a8aef36b43ff2ef3795a154f6a7fd051ec4e626823b68603494973525dc5fb0db50c7227f61930375a0b5173de7b5ca11569a7f094c70d1188fc5bcb6a7d12c9b81331c2e7ef54ed9767640c649f4ee3f8e0edb1eaf3f5058ecf1d8eac625af3d46381e9d27f94515a91e4a4bcc8b89a094d74f00e35862955ae3f887dfe197e59b9ac8e01a0c3a65405962b2190e952dd04b60c2c3e03915fc7bf8121e9ebbe1b75db4dd836958e005b825843140c7dcd575b12a8f94a4b648b963"}) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) faccessat(r0, &(0x7f0000000300)='./file1\x00', 0x43) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0xa00, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17}}]}, 0x78}}, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') 17:56:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x6, 0x6cd, &(0x7f0000001740)={0x0, {{0x2, 0x0, @loopback}}}, 0x8c) 17:56:30 executing program 1: openat$null(0xffffff9c, &(0x7f0000000200), 0xa6002, 0x0) [ 793.273164][ T3548] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 793.542190][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 793.662962][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.674584][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.687763][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 793.697686][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.718825][ T3548] usb 3-1: config 0 descriptor?? [ 793.766885][T13545] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'. [ 794.185842][T13530] UDC core: couldn't find an available UDC or it's busy: -16 [ 794.196650][T13530] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 794.211523][T13530] UDC core: couldn't find an available UDC or it's busy: -16 [ 794.219596][T13530] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 794.247099][ T3548] hid (null): bogus close delimiter [ 794.284691][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0033/input/input108 [ 794.389447][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0033/input/input109 [ 794.448235][ T3548] kye 0003:0458:5019.0033: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 794.486844][ T3548] usb 3-1: USB disconnect, device number 12 17:56:32 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3, &(0x7f00000001c0)=@string={0x3, 0x3, "e7"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:56:32 executing program 0: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x40000) unshare(0x62000200) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000100000000e437811fc5c868b1f99f6e87747e8d6c791cc223c81b730000000000000000000000000000000000000000000000000000000000008c45daf3acd0"]) r2 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x44000400) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], 0x38}, 0x1, 0x0, 0x0, 0x6afddd45d02b215a}, 0x40094) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 17:56:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xae4b, 0x0) 17:56:32 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x10c4102, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00'}, 0x10) lseek(r1, 0x0, 0x3) 17:56:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) 17:56:32 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000000440)="0000000000000000000000806856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}], 0x0, &(0x7f0000000140)) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) connect(r1, &(0x7f0000000280)=@ethernet={0x1, @broadcast}, 0xaf) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x6021, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = creat(&(0x7f0000000400)='./file1\x00', 0x12f) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), &(0x7f0000000600)={0x0, 0xfb, 0xd2, 0x1, 0x80, "80bc407d42cbb75796726b282c9b3ba3", "29ff7a68fd3531cb520cc66b184237faf95843dec6cba02de3d640bc88c55e94dc6a69135ebb7eb3567c0d62279eab6c6d77f7014b4b8b0c4eba85419681db030ee75ab4bf3085e8bfb183af743d6c8322fcb4f628154f8216e885e62b28067498891373005bec9ebde60a9f399310c04f6e6a9e0d6ffe84ce59fa0f64c18fe4e08567adb51864ef7d3d2823ad0693221163b1b60c9d9341bdd0f324e39886c10bcd3ffc61df2e9e23c4e739f0d936e14e4af93f556d83661efa984d77"}, 0xd2, 0x0) write$binfmt_script(r3, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'sfq\x00'}, {0x20, '#g,*&#*.'}, {}, {0x20, 'sfq\x00'}, {0x20, '3[)\'+'}, {0x20, '[\'+\''}, {0x20, 'veth1_virt_wifi\x00'}]}, 0x3b) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000003c0)='veth1_virt_wifi\x00') r4 = socket(0x11, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x18c) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000880)={0x0, 0xe6, "ac088b4ee358f908970a519ada79298861b3dc2dd36d89e5cd53e2a9a6919cb3f25df991c8bbfc5abe2a7a8aef36b43ff2ef3795a154f6a7fd051ec4e626823b68603494973525dc5fb0db50c7227f61930375a0b5173de7b5ca11569a7f094c70d1188fc5bcb6a7d12c9b81331c2e7ef54ed9767640c649f4ee3f8e0edb1eaf3f5058ecf1d8eac625af3d46381e9d27f94515a91e4a4bcc8b89a094d74f00e35862955ae3f887dfe197e59b9ac8e01a0c3a65405962b2190e952dd04b60c2c3e03915fc7bf8121e9ebbe1b75db4dd836958e005b825843140c7dcd575b12a8f94a4b648b963"}) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) faccessat(r0, &(0x7f0000000300)='./file1\x00', 0x43) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0xa00, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17}}]}, 0x78}}, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') [ 795.169653][ T24] audit: type=1804 audit(1653501392.224:8): pid=13555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3430531542/syzkaller.WLfIY8/719/bus" dev="sda1" ino=1173 res=1 errno=0 17:56:32 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000080)={0x100}, &(0x7f00000000c0)={0x28d}, 0x0, 0x0, 0x0) [ 795.322290][ T24] audit: type=1804 audit(1653501392.284:9): pid=13558 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3430531542/syzkaller.WLfIY8/719/bus" dev="sda1" ino=1173 res=1 errno=0 [ 795.417957][T13557] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'. 17:56:32 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x10c4102, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000141104f6c50000000e00df0095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r4}, 0x10) lseek(r1, 0x0, 0x3) 17:56:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000080)="ef2b13cd026b228010edca8f6fa35f3a695643371fcf2fb3fd9dda2a4ea3e16677a7e659858afd7b7e73896f119f201ce9c12d75e38a8da8361d490d62218a61445ee22770ba8be2455a7e723f3d1cb5165cb30611d213aafefa278445430c388c55b635669a0ea37a8448b2fd1860253f3f76616baefc3d2de19b1f901327fd45451a864f8801a20eeb4956", 0x8c) [ 795.673751][ T3542] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 795.929817][ T24] audit: type=1804 audit(1653501392.984:10): pid=13572 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3270036454/syzkaller.DbTQQl/730/bus" dev="sda1" ino=1174 res=1 errno=0 [ 795.964056][ T3542] usb 3-1: Using ep0 maxpacket: 16 [ 795.993533][ T24] audit: type=1804 audit(1653501393.024:11): pid=13572 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3270036454/syzkaller.DbTQQl/730/bus" dev="sda1" ino=1174 res=1 errno=0 17:56:33 executing program 3: pselect6(0x40, &(0x7f0000000440), &(0x7f0000000480), 0x0, &(0x7f0000000500), 0x0) 17:56:33 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000e7ff04000000000000000015850000000700000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) pipe2(&(0x7f00000001c0), 0x0) [ 796.102276][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.113544][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.123754][ T3542] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 796.133078][ T3542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.296780][ T3542] usb 3-1: config 0 descriptor?? 17:56:33 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) lchown(0x0, 0x0, 0xffffffffffffffff) [ 796.639760][ T24] audit: type=1326 audit(1653501393.694:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13580 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f39549 code=0x7ffc0000 [ 796.720578][ T24] audit: type=1326 audit(1653501393.724:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13580 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=16 compat=1 ip=0xf7f39549 code=0x7ffc0000 [ 796.743911][ T24] audit: type=1326 audit(1653501393.724:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13580 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f39549 code=0x7ffc0000 [ 796.768672][T13566] UDC core: couldn't find an available UDC or it's busy: -16 [ 796.768836][T13566] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 796.770061][T13566] UDC core: couldn't find an available UDC or it's busy: -16 [ 796.777716][ T24] audit: type=1326 audit(1653501393.724:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13580 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f39549 code=0x7ffc0000 [ 796.785207][T13566] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 796.884194][ T3542] hid (null): bogus close delimiter [ 796.941115][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0034/input/input110 [ 797.033370][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0034/input/input111 [ 797.125263][ T3542] kye 0003:0458:5019.0034: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 797.177625][ T3542] usb 3-1: USB disconnect, device number 13 17:56:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = open(&(0x7f00000020c0)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)) 17:56:34 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) 17:56:34 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) lchown(0x0, 0x0, 0xffffffffffffffff) [ 797.745258][ T24] audit: type=1326 audit(1653501394.804:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13583 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f39549 code=0x7ffc0000 [ 797.768397][ T24] audit: type=1326 audit(1653501394.804:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13583 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=16 compat=1 ip=0xf7f39549 code=0x7ffc0000 17:56:35 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x10c4102, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00'}, 0x10) lseek(r1, 0x0, 0x3) 17:56:35 executing program 0: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x40000) unshare(0x62000200) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000100000000e437811fc5c868b1f99f6e87747e8d6c791cc223c81b730000000000000000000000000000000000000000000000000000000000008c45daf3acd0"]) r2 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x44000400) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], 0x38}, 0x1, 0x0, 0x0, 0x6afddd45d02b215a}, 0x40094) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 17:56:35 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3, &(0x7f00000001c0)=@string={0x3, 0x3, "e7"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:56:35 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) lchown(0x0, 0x0, 0xffffffffffffffff) 17:56:35 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) lseek(r0, 0x0, 0x0) 17:56:35 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/block/loop0', 0x0, 0x0) setns(r0, 0x0) 17:56:35 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) lchown(0x0, 0x0, 0xffffffffffffffff) [ 798.433327][T11225] usb 3-1: new high-speed USB device number 14 using dummy_hcd 17:56:35 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000005f00), 0x10) 17:56:35 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000300)={0x29, 0x4, 0x0, {0x1, 0xfffffffffffffffc, 0x1, 0x0, [0x0]}}, 0x29) [ 798.682526][T11225] usb 3-1: Using ep0 maxpacket: 16 17:56:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) [ 798.803900][T11225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.815174][T11225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.825370][T11225] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 798.834701][T11225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:56:36 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @random="a4b9e6d7375e"}, 0x14) [ 798.998430][T11225] usb 3-1: config 0 descriptor?? 17:56:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x1dc}]}) [ 799.477407][T13591] UDC core: couldn't find an available UDC or it's busy: -16 [ 799.485138][T13591] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 799.513596][T13591] UDC core: couldn't find an available UDC or it's busy: -16 [ 799.524127][T13591] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 799.564913][T11225] hid (null): bogus close delimiter [ 799.708012][T11225] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0035/input/input112 [ 799.827543][T11225] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0035/input/input113 [ 799.886396][T11225] kye 0003:0458:5019.0035: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 799.930171][T11225] usb 3-1: USB disconnect, device number 14 17:56:38 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x10c4102, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00'}, 0x10) lseek(r1, 0x0, 0x3) 17:56:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:56:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000001100)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@hopopts={{0x18}}, @hopopts={{0x18, 0x29, 0x2}}], 0x30}}], 0x2, 0x0) 17:56:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000009c0)={@private1}, &(0x7f0000000a00)=0x20) 17:56:38 executing program 0: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x40000) unshare(0x62000200) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000100000000e437811fc5c868b1f99f6e87747e8d6c791cc223c81b730000000000000000000000000000000000000000000000000000000000008c45daf3acd0"]) r2 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x44000400) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], 0x38}, 0x1, 0x0, 0x0, 0x6afddd45d02b215a}, 0x40094) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 17:56:38 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x11, &(0x7f00000001c0)=@string={0x11, 0x3, "e796e87bbb8d1046d1126c01a39612"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:56:38 executing program 4: futex(&(0x7f0000000000), 0x80, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 17:56:38 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x2) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50}, 0x50) [ 801.322222][ T3548] usb 3-1: new high-speed USB device number 15 using dummy_hcd 17:56:38 executing program 3: openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x200180, 0x0) [ 801.381195][ T24] kauditd_printk_skb: 11 callbacks suppressed [ 801.381257][ T24] audit: type=1804 audit(1653501398.434:29): pid=13641 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3430531542/syzkaller.WLfIY8/721/bus" dev="sda1" ino=1171 res=1 errno=0 [ 801.554821][ T24] audit: type=1804 audit(1653501398.504:30): pid=13643 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3430531542/syzkaller.WLfIY8/721/bus" dev="sda1" ino=1171 res=1 errno=0 [ 801.580235][ T3548] usb 3-1: Using ep0 maxpacket: 16 17:56:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)={0x10}, 0x10}, {&(0x7f0000000100)={0x10, 0x25}, 0x10}, {&(0x7f0000002600)={0x10}, 0x10}, {&(0x7f0000003b40)={0x10}, 0x10}], 0x4}, 0x0) [ 801.693482][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.704898][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.715162][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 801.724477][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:56:38 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001000000000904410017ff5d810009050f1f011c0000000905830300b3"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 801.927565][ T3548] usb 3-1: config 0 descriptor?? 17:56:39 executing program 3: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) [ 802.409525][T13630] UDC core: couldn't find an available UDC or it's busy: -16 [ 802.418318][T13630] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 802.506168][T13630] UDC core: couldn't find an available UDC or it's busy: -16 [ 802.513944][T13630] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 802.565446][ T3548] hid (null): bogus close delimiter [ 802.582789][ T3548] hid (null): unknown global tag 0xe [ 802.682829][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0036/input/input114 [ 802.804498][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0036/input/input115 [ 802.913700][ T3548] kye 0003:0458:5019.0036: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 802.965164][ T3548] usb 3-1: USB disconnect, device number 15 17:56:41 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x10c4102, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00'}, 0x10) lseek(r1, 0x0, 0x3) 17:56:41 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000021c0)={0x50, 0x0, r2, {0x7, 0x5}}, 0x50) 17:56:41 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000001500000000000000010000c50000000e00180095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000940)={0x2, 0x0, 0x2}) 17:56:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000580)="a9a9d18094cfedab7412bf49bcf2a4cf", 0x10) 17:56:41 executing program 0: unshare(0x20400) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x541b, 0xffffffffffffffff) 17:56:41 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x11, &(0x7f00000001c0)=@string={0x11, 0x3, "e796e87bbb8d1046d1126c01a39612"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:56:41 executing program 3: pselect6(0x40, &(0x7f0000000440), &(0x7f0000000480)={0x6}, 0x0, 0x0, 0x0) 17:56:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x491}]}) 17:56:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x40000101}]}) 17:56:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4004ae99, &(0x7f0000000080)) [ 804.488684][ T3542] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 804.607105][ T24] audit: type=1804 audit(1653501401.664:31): pid=13673 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3430531542/syzkaller.WLfIY8/722/bus" dev="sda1" ino=1173 res=1 errno=0 [ 804.762694][ T3542] usb 3-1: Using ep0 maxpacket: 16 17:56:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)={0x320, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x21d, 0x0, 0x0, 0x1, [@generic="164e7453dd6b240d345a98071d1c564b95e71e68", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="6a9e64f0105915d2d07df35112876bf202ea53e73d5d150d1173e802c27e643be934c6f93f6cedc15f9efab1c2afe09e9990f2340b8f64b1", @generic="447bf9830ad40e29718b14ce9f2173795a9020bbc488f7c6013289bf13500c1b123fdccbd1ce6e30f5c81193009e8c2ad938ed1dc4a82396fd0e6d49b3f4b635f5a88c381a853a2a5d0337da34e393fc217308280a98311bb93938c67789ab2b90e8662abb644f5ab93f2b28ee447653a14cd396da8f92a194ba1d4d0af3292685006f60813d294ee31928d6479ecc5e4445d4efa503891688840c9738dbdf7d5bee4f6c3f956f6e1ead20de6befb875c00bea2e91dc08dd7914763a2c71d78fda73c61e0f1c", @generic="7f116ee5306201ad44a5c4c6be4127b45f1b060f58bc2a5e2dd47ddaa30668150d56945ff1fc20565ba22f925fd4882ff8072dd6d420c76a0834884300c9edbeefdbd3407577b0d7f25c8128f2d0db7b673b90e06c72a7766b9dde89b4510e4ef6dbd69de027b7d941b4922bbc1a5c4ef0d68992eda04f925860a60650de0ed1eea55549e9838d08fa49103668e4fd59ff0d57170c3f2c560aa6cc1bd1251e38f0eb3c319d4cc2418e52c7eab3ff8ec30c577f1efe52641c9a4a117fd7cac8a9a36b2fbfbc3a89a2b7b8b5ecd4ee56d77aaa60e9872a3153db36ff1ce912b5b35364710a50d77f", @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback}]}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, @typed={0x6, 0x0, 0x0, 0x0, @str='-\x00'}, @generic="24d77b97851327934b78e36aaaae654ffec280af63edf7dca54b4f53c2bdf389e79aa4cf7efbae3adc80c3e5cf975b2a7b029595ebc657c0ecd47c0e605d60c3bafed790e07308394cac0be9e710c9297958a6f07c6082139bbade97e930e851114239fe409642131a6052569a00b0c708017e54e5459155896ecdac788b8599bc77c56a5413972750c1affe8d3eb95f021d5a249658e3f456d4a0571dab282b9d0ab80fbaa26dc8d717ec1f2376f130312ff0", @generic="fe4b590e54df447d844ca55b0440974e04cceeec19dbfbb67b67683c48b5c61b6694c42d38ad"]}, 0x320}, {&(0x7f0000000100)={0xc4, 0x25, 0x0, 0x0, 0x0, "", [@generic="21bfcf0a07efed040fa05e186759abb7dc2dc2a17443ba2cf48246416c564e596223265be8f0118c6ccb71f11c857cc59a4dcdfcadb8b4ec63ed96b9eeefa9163298096e20c75c542dee0b2008db8c661d87bff18e7bb133e7db1e46a2406bdbe3311f851b88394f51e9b20ca3e8b46b0af8535946ca7cfe09840002f53392cc11b187b96582a646b5200cbdc4feae19eb32fc0559554f1fa621e61e2c974ddeb4f593a0b6b086e0b1b532e52d5e3245bd"]}, 0xc4}, {&(0x7f0000002600)={0xa90, 0x0, 0x800, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xa6d, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @generic="e13ad25f0b79aeecfadce935c2", @generic="932a157f5ea8de6eeb47a62ce663c551edc4c448632d0f0cfdbdfbf155a2accba009d30736b96e0cfba9cf256bcc74adc61913def7711c65521cb77c33a9e5bcfe6dd7b68932a77bda50de9b8a4bbb00fe4172ca02d411345043aa19faafd9fdc1e17fa63b42bfe55fac89095e", @typed={0xa1, 0x0, 0x0, 0x0, @binary="5adce4b240cb57d31a77f7c44028509d2c2c9b3cb18fad4c454f98b5ea4054e618709a9a532d0ed0b17147961101cf73f3533f17c41342b966c97002d2f8a5265c8689d9b0263e9cb56b8f7220da2752f547a2bc93ec78664d3c678e18d3175858f1b81eab83d8bc45bf2c908da6b302ac6543fc4e716ff136c131aa4d52ab4e9b5caa9715bcc6387c93399f7b768d1d1d9e462610d395f0628fc7648a"}, @typed={0x19, 0x0, 0x0, 0x0, @str='/proc/self/net/pfkey\x00'}, @generic="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", @generic="5fa73dab5e132eeb80ea8fe63b6e686911b2a73e3a24759bd7c5c85515cb786dedbdb45299bb6c4524d3a6781768fea9dd2eff02c2232dfe14185e49edb08fd8b8bd2312916b65f2a5d8e6970a8d532df358ac5e768f994e374d41bc4b389330c53e919d301ca05b224e4c441f229efc12033c4083170e631fa002c20e0f3e5ee0e5041fd7547eca29e92d4311e666fb629245d23cdb707a7b2da01d4a01b0d6e996ca9e5cfec017c9b6a8c5b24acbc4765e5821d31c06ae5da5b123d6b0985d941719f6aa7e886a9a44eda76ac40fce9fa7f73b99450fa6f9bb2d4774c7e505725a636574efc09a0d1c4302305e330795fc180237579e67974a6e95be5fa933f26d9a1b5458c9c9840ceb9825d77d81aeb799f6c90a9606a7c5a9bb77c9151b6bbd17eb3b8896e48d0e87f900621e23bc881a5fe9ae77327ea066df1892de8bc7facc4529d3f7c2ef77a726ae78230fcf358d39e48540de22f83466015d558d28ee314f0d376335ef503582e4beb6e346a0cb6bcfa3e16788eb79b966deca09d33558cd446cacc81a8a1ec80a409b151d2d2582c005b1f282b1e6bdd943e86805143d3462b70b8602c96cdd07aaa1839b11192025a44117f2f0707848f7e09b57d22571c35f851d7f7838e61055f5f216f8ed6f3202dd6fc3cc2183caba0da86497e611ca941a0205571fcf4bc1a71dd3d5d5843b9b13674da6d51f1d73373883d31df33d8ee028a2c35cde05cb5694204dda671411a6c86793c1c5679e900b094fb68bd86233a0c2a7a3609faec87d2b911a429993dc4c5e1f3c133462d2bdb535e6c0d613a90c3683eda5af243356de409292227af0b671200d67d018ce83b70ce1ec4c1370c0c8b2df70d56ac66740cf2c6b7482d33bfbb7a64a4e5c2ba3a1fbf364263be8053b2e6490216488a837d2381bf0716bc1e179d40b78991953d3413fb6ee25f756cb6949f14b2d71dcc1b273b4c3fc0642d44485b8159bdb67c22cae4a3cc6ff63663e348f9be6f4f39e9412a888d1c3a5bd823b47f64fb3d5d71a17c5c3b1cd0658f110336a30b56f3aaa6a23ed3b0e9630a67569d0fc9791b39e733282fbb3dc1df56c8769e837ae97dcf5f00f433c3dce53e6328e9d29eaab3a4385e59c7c400d553a2b8a776c30b2018b50d0e8082c5befee172785b43ad78ef78f31592de968a1226c72676968bacd371d18747a4057a519ab04585725c3795be7eaeb4374c35db9333e4d9a7c3b5003aaf6e31a1786726d5739ea85312458bb68f40b67604982b1a6ad6c80e72cbb5adc139e6e66a5a10e7c2300f04fa3041862eee7345a38899f83839ca9e889607a243c2e031a4fffcf4a4ea1bb99caf20280ec2732f69309c66a76cc7e21088d977eed1d2e874fdff89b6d65f0c729f6615615359add30dc4a45889264d103fd9dd7ca75a450b73fafe9765399bb8478decddaf8c2115f9c837d14727f32a2cdbe99d6c412a5cd8d6db47f4a848e80bc4db8509561bcb6063af787838f3fe299a97687c20b400d2fd804e69820d1c8991256e5ebea0e847bbe3ad9cfa2870fad13322b45c07b903dc040dfa9a0ec3bd7c174acf99d1d03b3831e775bed78739ee06ff991b3ab07842220d1cf59a4ccf1dbdb0c2a84dcbe29d20d050168b0c33f9a54fbd157c6808595e5087f2a361c137c31efbcaaa4ea9246bda05657cf8f35963adcde9da57a46f0709c521f60f56a4cc638acefcccc2e6fa5b41408fb69f75e7603bf622dad395415c7a16f201dfbf2bdb9d52269b6b3701afff60d289a611152c880f67b5605e7c2dfa1e5371243b48cfdc2cc6fb90030fa16e82f5a6df72da2cae13b9655e5559818efd9425f5117fa60d62878e4021d089a733d22239265d689133b1e3ef14e31463b59675afa5e6d2755c863321d6243349c075a7b32bc0091f3821ab4f9e58f367060562583df962ede22de70fcc52a29165737c830c8d1b8e8376b70eae611bca14598b2b623c60c75d1c10042afad983e000ca55842acc31556e0cbad41fa93b93b403fbbceccae29bac067a3f1084d71e7e503543195a56afd0249033e4b16f87c1a48eb1d81252052600233792fbe37ce5ab0f81443aa52c4753e3a85a8903a462d53245f53826a1facaf5ee0028147899cdc77d7065b273cc80ac530931bef45b02db3c4ff3afdda2e05f6886b5f898a6e988c68f0bb01dd1b6f884b7e9cd281fa4d6f7719cafcd7cfa01c4fcb659711e1cff6d005178e5e7758dc9d8a6e8b3b661985e97b0b24f16bfa8837d6c3ab0c5c65f8d128e2cca580a2e107d996ce578bd35aff97f95305e2b73777f902b6a30323e31db65a4183ef6cdeb04574ada5d8f416e8196619a4ed72abe16e954ce128315c2dab8817b6def0d8479545b80fc8a5b8af2798ae23db5b8ae81aca36404bed52eefa116fa44afe28e3d0b2ed5e23bdc5c8dd8e428700b6cd22b6a60371efb8295b1612d9cb5ae525544bfe18db9b4c8cd4216e2e2f829f11488aaaf8eb0a6dee785b24d930a0314544e981ac7da5af59a8c7c306cc265b5183d1e972bed5e6c3eda1ded7a25575f56625be7fe97fd9e553a09caacea94ade2e0093a5cdebf1abe67bd82c2a8508f431166dd5b82edcc2b489db39f7142bc8f79c807cb3d6c82bd7b2fb02a04771e24b1777a9e31e9f1984cfebaf3b5e81d3dc1ec2c628c48300fcc97934ea5ac70cd08fe9dbf803553bdd7d8c82b967f289e74bb9b2cfc86b5aec722da138e3dfc0dd28a9efb33b2290ca5500517ae8fc531c7c314d138afa62b8411b1ac8d8d4401a1f8b2a8d66cecde81cd8334d1447c3530ce70a252753859681c6c5aef8eb9cdfde57ec9c23a6dcef678be49bcc9d94d3ed8afe2480f48f399737c50efb30e00bdc44e6382bc53cba2784df999843224e915b699181f9e0ee4e32c009162a9a9d9ac9668c07c0034512c13138a589ef24255c", @generic]}]}, 0xa90}, {&(0x7f0000003b40)={0x10}, 0x10}], 0x4}, 0x0) [ 804.890770][ T24] audit: type=1804 audit(1653501401.814:32): pid=13682 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3430531542/syzkaller.WLfIY8/722/bus" dev="sda1" ino=1173 res=1 errno=0 17:56:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000103}]}) [ 804.932990][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.945856][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.956286][ T3542] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 804.965596][ T3542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.165801][ T3542] usb 3-1: config 0 descriptor?? [ 805.622840][T13666] UDC core: couldn't find an available UDC or it's busy: -16 [ 805.630377][T13666] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 805.683790][T13666] UDC core: couldn't find an available UDC or it's busy: -16 [ 805.691312][T13666] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 805.744259][ T3542] hid (null): bogus close delimiter [ 805.763538][ T3542] hid (null): unknown global tag 0xe [ 805.789383][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0037/input/input116 [ 805.888799][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0037/input/input117 [ 805.960134][ T3542] kye 0003:0458:5019.0037: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 805.995567][ T3542] usb 3-1: USB disconnect, device number 16 17:56:43 executing program 5: pipe(&(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) 17:56:43 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.time\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') 17:56:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0xc0010112}]}) 17:56:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0xc001102c}]}) 17:56:43 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x11, &(0x7f00000001c0)=@string={0x11, 0x3, "e796e87bbb8d1046d1126c01a39612"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:56:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f00000001c0)) 17:56:43 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000009c0)={@private1, 0x0, 0x0, 0x0, 0xc}, &(0x7f0000000a00)=0x20) 17:56:44 executing program 5: r0 = eventfd2(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r0}) ioctl$KVM_IOEVENTFD(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000200)={0x0, 0x0, 0x0, r0}) 17:56:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0xc0010112}]}) 17:56:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340), 0x4) [ 807.032417][ T3548] usb 3-1: new high-speed USB device number 17 using dummy_hcd 17:56:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00000020c0)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) [ 807.282644][ T3548] usb 3-1: Using ep0 maxpacket: 16 17:56:44 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 17:56:44 executing program 4: pselect6(0x0, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000580)={&(0x7f0000000540), 0x8}) [ 807.412543][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.423866][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.435181][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 807.444559][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.470154][ T3548] usb 3-1: config 0 descriptor?? 17:56:44 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.time\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') 17:56:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0xc0010112}]}) 17:56:44 executing program 4: socket$inet6(0x18, 0x3, 0xb) [ 807.948128][T13705] UDC core: couldn't find an available UDC or it's busy: -16 [ 807.956177][T13705] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 808.003871][T13705] UDC core: couldn't find an available UDC or it's busy: -16 [ 808.011396][T13705] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 808.147775][ T3548] hid (null): bogus close delimiter [ 808.165681][ T3548] hid (null): unknown global tag 0xe [ 808.248871][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0038/input/input118 [ 808.328745][T13726] not chained 600000 origins [ 808.333889][T13726] CPU: 1 PID: 13726 Comm: syz-executor.1 Not tainted 5.18.0-rc4-syzkaller #0 [ 808.342704][T13726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.352784][T13726] Call Trace: [ 808.356070][T13726] [ 808.359011][T13726] dump_stack_lvl+0x1ff/0x28e [ 808.363741][T13726] dump_stack+0x25/0x28 [ 808.367933][T13726] kmsan_internal_chain_origin+0x78/0x120 [ 808.374060][T13726] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 808.380265][T13726] ? kmsan_get_metadata+0x33/0x220 [ 808.385407][T13726] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 808.391254][T13726] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 808.396850][T13726] ? kmsan_get_metadata+0x33/0x220 [ 808.401995][T13726] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 808.407836][T13726] ? should_fail+0x75/0x9c0 [ 808.412374][T13726] ? kmsan_get_metadata+0x33/0x220 [ 808.417516][T13726] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 808.423903][T13726] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 808.430030][T13726] ? kmsan_get_metadata+0x33/0x220 [ 808.435176][T13726] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 808.441017][T13726] __msan_chain_origin+0xbf/0x140 [ 808.446105][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 808.451297][T13726] get_compat_msghdr+0x108/0x2c0 [ 808.456294][T13726] ? __sys_recvmmsg+0x51c/0x6f0 [ 808.461208][T13726] do_recvmmsg+0xd77/0x2120 [ 808.465801][T13726] ? __stack_depot_save+0x21/0x4b0 [ 808.471058][T13726] ? kmsan_get_metadata+0x33/0x220 [ 808.476223][T13726] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 808.482526][T13726] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 808.488659][T13726] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 808.495225][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 808.499966][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 808.506357][T13726] __do_fast_syscall_32+0x96/0xf0 [ 808.511427][T13726] do_fast_syscall_32+0x34/0x70 [ 808.516318][T13726] do_SYSENTER_32+0x1b/0x20 [ 808.520862][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 808.527242][T13726] RIP: 0023:0xf7ff3549 [ 808.531328][T13726] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 808.550975][T13726] RSP: 002b:00000000f7fcd5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 808.559439][T13726] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 808.567448][T13726] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 808.575442][T13726] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 808.583438][T13726] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 808.591428][T13726] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 808.599431][T13726] [ 808.606744][T13726] Uninit was stored to memory at: [ 808.612470][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 808.617630][T13726] get_compat_msghdr+0x108/0x2c0 [ 808.622697][T13726] do_recvmmsg+0xd77/0x2120 [ 808.627251][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 808.632070][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 808.638456][T13726] __do_fast_syscall_32+0x96/0xf0 [ 808.643614][T13726] do_fast_syscall_32+0x34/0x70 [ 808.648521][T13726] do_SYSENTER_32+0x1b/0x20 [ 808.653136][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 808.659511][T13726] [ 808.661933][T13726] Uninit was stored to memory at: [ 808.667041][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 808.672280][T13726] get_compat_msghdr+0x108/0x2c0 [ 808.677274][T13726] do_recvmmsg+0xd77/0x2120 [ 808.681918][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 808.686648][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 808.693205][T13726] __do_fast_syscall_32+0x96/0xf0 [ 808.698271][T13726] do_fast_syscall_32+0x34/0x70 [ 808.703373][T13726] do_SYSENTER_32+0x1b/0x20 [ 808.707925][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 808.714465][T13726] [ 808.716795][T13726] Uninit was stored to memory at: [ 808.721976][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 808.727138][T13726] get_compat_msghdr+0x108/0x2c0 [ 808.732249][T13726] do_recvmmsg+0xd77/0x2120 [ 808.736797][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 808.741519][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 808.748061][T13726] __do_fast_syscall_32+0x96/0xf0 [ 808.753226][T13726] do_fast_syscall_32+0x34/0x70 [ 808.758124][T13726] do_SYSENTER_32+0x1b/0x20 [ 808.762820][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 808.769209][T13726] [ 808.771541][T13726] Uninit was stored to memory at: [ 808.776865][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 808.782113][T13726] get_compat_msghdr+0x108/0x2c0 [ 808.787105][T13726] do_recvmmsg+0xd77/0x2120 [ 808.791813][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 808.796541][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 808.803079][T13726] __do_fast_syscall_32+0x96/0xf0 [ 808.808155][T13726] do_fast_syscall_32+0x34/0x70 [ 808.813210][T13726] do_SYSENTER_32+0x1b/0x20 [ 808.817762][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 808.824286][T13726] [ 808.826615][T13726] Uninit was stored to memory at: [ 808.831900][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 808.837058][T13726] get_compat_msghdr+0x108/0x2c0 [ 808.842134][T13726] do_recvmmsg+0xd77/0x2120 [ 808.846700][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 808.851428][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 808.857960][T13726] __do_fast_syscall_32+0x96/0xf0 [ 808.863134][T13726] do_fast_syscall_32+0x34/0x70 [ 808.868038][T13726] do_SYSENTER_32+0x1b/0x20 [ 808.872727][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 808.879110][T13726] [ 808.881449][T13726] Uninit was stored to memory at: [ 808.886696][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 808.891941][T13726] get_compat_msghdr+0x108/0x2c0 [ 808.896933][T13726] do_recvmmsg+0xd77/0x2120 [ 808.901493][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 808.906362][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 808.912834][T13726] __do_fast_syscall_32+0x96/0xf0 [ 808.917912][T13726] do_fast_syscall_32+0x34/0x70 [ 808.922961][T13726] do_SYSENTER_32+0x1b/0x20 [ 808.927521][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 808.934153][T13726] [ 808.936488][T13726] Uninit was stored to memory at: [ 808.941588][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 808.946903][T13726] get_compat_msghdr+0x108/0x2c0 [ 808.952096][T13726] do_recvmmsg+0xd77/0x2120 [ 808.956655][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 808.961378][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 808.968016][T13726] __do_fast_syscall_32+0x96/0xf0 [ 808.973186][T13726] do_fast_syscall_32+0x34/0x70 [ 808.978090][T13726] do_SYSENTER_32+0x1b/0x20 [ 808.982803][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 808.989195][T13726] [ 808.991551][T13726] Local variable msg_sys created at: [ 808.997020][T13726] do_recvmmsg+0xbb/0x2120 [ 809.001501][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 809.027137][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0038/input/input119 [ 809.184187][ T3548] kye 0003:0458:5019.0038: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 17:56:46 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x18, &(0x7f00000001c0)=@string={0x18, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:56:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0xc0010112}]}) 17:56:46 executing program 4: lchown(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:56:46 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000001500)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) 17:56:46 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.time\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') [ 809.313528][ T3548] usb 3-1: USB disconnect, device number 17 17:56:46 executing program 4: pwritev(0xffffffffffffffff, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0) [ 810.148117][ T3548] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 810.334267][T13726] not chained 610000 origins [ 810.339062][T13726] CPU: 0 PID: 13726 Comm: syz-executor.1 Not tainted 5.18.0-rc4-syzkaller #0 [ 810.347868][T13726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.357963][T13726] Call Trace: [ 810.361281][T13726] [ 810.364235][T13726] dump_stack_lvl+0x1ff/0x28e [ 810.368988][T13726] dump_stack+0x25/0x28 [ 810.373193][T13726] kmsan_internal_chain_origin+0x78/0x120 [ 810.378986][T13726] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 810.385122][T13726] ? kmsan_get_metadata+0x33/0x220 [ 810.390279][T13726] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 810.396144][T13726] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 810.401753][T13726] ? kmsan_get_metadata+0x33/0x220 [ 810.406903][T13726] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 810.412765][T13726] ? should_fail+0x75/0x9c0 [ 810.417313][T13726] ? kmsan_get_metadata+0x33/0x220 [ 810.422468][T13726] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 810.428779][T13726] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 810.434919][T13726] ? kmsan_get_metadata+0x33/0x220 [ 810.440087][T13726] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 810.445951][T13726] __msan_chain_origin+0xbf/0x140 [ 810.451048][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 810.456232][T13726] get_compat_msghdr+0x108/0x2c0 [ 810.461224][T13726] ? __sys_recvmmsg+0x51c/0x6f0 [ 810.466127][T13726] do_recvmmsg+0xd77/0x2120 [ 810.470715][T13726] ? __stack_depot_save+0x21/0x4b0 [ 810.475884][T13726] ? kmsan_get_metadata+0x33/0x220 [ 810.481301][T13726] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 810.487605][T13726] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 810.493736][T13726] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 810.500274][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 810.500308][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 810.500386][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 810.516492][T13726] __do_fast_syscall_32+0x96/0xf0 [ 810.521576][T13726] do_fast_syscall_32+0x34/0x70 [ 810.526483][T13726] do_SYSENTER_32+0x1b/0x20 [ 810.531037][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 810.537419][T13726] RIP: 0023:0xf7ff3549 [ 810.541514][T13726] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 810.561172][T13726] RSP: 002b:00000000f7fcd5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 810.569638][T13726] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 810.577650][T13726] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 810.585656][T13726] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 810.593660][T13726] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 810.601662][T13726] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 810.609677][T13726] [ 810.614976][T13726] Uninit was stored to memory at: [ 810.620094][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 810.625735][T13726] get_compat_msghdr+0x108/0x2c0 [ 810.630725][T13726] do_recvmmsg+0xd77/0x2120 [ 810.635458][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 810.640189][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 810.646774][T13726] __do_fast_syscall_32+0x96/0xf0 [ 810.651959][T13726] do_fast_syscall_32+0x34/0x70 [ 810.656871][T13726] do_SYSENTER_32+0x1b/0x20 [ 810.661420][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 810.667999][T13726] [ 810.670343][T13726] Uninit was stored to memory at: [ 810.675618][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 810.680808][T13726] get_compat_msghdr+0x108/0x2c0 [ 810.685986][T13726] do_recvmmsg+0xd77/0x2120 [ 810.689980][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.690535][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 810.690595][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 810.701769][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.706282][T13726] __do_fast_syscall_32+0x96/0xf0 [ 810.712675][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 810.722458][T13726] do_fast_syscall_32+0x34/0x70 [ 810.727504][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.736683][T13726] do_SYSENTER_32+0x1b/0x20 [ 810.754219][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 810.760610][T13726] [ 810.763067][T13726] Uninit was stored to memory at: [ 810.768191][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 810.773537][T13726] get_compat_msghdr+0x108/0x2c0 [ 810.778524][T13726] do_recvmmsg+0xd77/0x2120 [ 810.783263][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 810.788010][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 810.794578][T13726] __do_fast_syscall_32+0x96/0xf0 [ 810.799649][T13726] do_fast_syscall_32+0x34/0x70 [ 810.804738][T13726] do_SYSENTER_32+0x1b/0x20 [ 810.809306][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 810.815960][T13726] [ 810.818305][T13726] Uninit was stored to memory at: [ 810.823587][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 810.828741][T13726] get_compat_msghdr+0x108/0x2c0 [ 810.833858][T13726] do_recvmmsg+0xd77/0x2120 [ 810.838415][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 810.843318][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 810.849715][T13726] __do_fast_syscall_32+0x96/0xf0 [ 810.855011][T13726] do_fast_syscall_32+0x34/0x70 [ 810.859914][T13726] do_SYSENTER_32+0x1b/0x20 [ 810.864612][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 810.867064][ T3548] usb 3-1: config 0 descriptor?? [ 810.870991][T13726] [ 810.871001][T13726] Uninit was stored to memory at: [ 810.871082][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 810.888691][T13726] get_compat_msghdr+0x108/0x2c0 [ 810.893873][T13726] do_recvmmsg+0xd77/0x2120 [ 810.898703][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 810.903620][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 810.910024][T13726] __do_fast_syscall_32+0x96/0xf0 [ 810.915279][T13726] do_fast_syscall_32+0x34/0x70 [ 810.920180][T13726] do_SYSENTER_32+0x1b/0x20 [ 810.925005][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 810.931406][T13726] [ 810.933913][T13726] Uninit was stored to memory at: [ 810.939024][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 810.944368][T13726] get_compat_msghdr+0x108/0x2c0 [ 810.949369][T13726] do_recvmmsg+0xd77/0x2120 [ 810.954110][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 810.958839][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 810.965409][T13726] __do_fast_syscall_32+0x96/0xf0 [ 810.970564][T13726] do_fast_syscall_32+0x34/0x70 [ 810.975726][T13726] do_SYSENTER_32+0x1b/0x20 [ 810.980288][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 810.986846][T13726] [ 810.989177][T13726] Uninit was stored to memory at: [ 810.994378][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 810.999551][T13726] get_compat_msghdr+0x108/0x2c0 [ 811.004720][T13726] do_recvmmsg+0xd77/0x2120 [ 811.009284][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 811.014196][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 811.020698][T13726] __do_fast_syscall_32+0x96/0xf0 [ 811.025898][T13726] do_fast_syscall_32+0x34/0x70 [ 811.030807][T13726] do_SYSENTER_32+0x1b/0x20 [ 811.035545][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 811.042048][T13726] [ 811.044384][T13726] Local variable msg_sys created at: [ 811.049680][T13726] do_recvmmsg+0xbb/0x2120 [ 811.054331][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 811.246063][T13726] not chained 620000 origins [ 811.250678][T13726] CPU: 0 PID: 13726 Comm: syz-executor.1 Not tainted 5.18.0-rc4-syzkaller #0 [ 811.259459][T13726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.269528][T13726] Call Trace: [ 811.272828][T13726] [ 811.275761][T13726] dump_stack_lvl+0x1ff/0x28e [ 811.280649][T13726] dump_stack+0x25/0x28 [ 811.284827][T13726] kmsan_internal_chain_origin+0x78/0x120 [ 811.290588][T13726] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 811.296718][T13726] ? kmsan_get_metadata+0x33/0x220 [ 811.301880][T13726] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 811.307748][T13726] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 811.313365][T13726] ? kmsan_get_metadata+0x33/0x220 [ 811.318511][T13726] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 811.324432][T13726] ? should_fail+0x75/0x9c0 [ 811.328997][T13726] ? kmsan_get_metadata+0x33/0x220 [ 811.334129][T13726] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 811.340434][T13726] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 811.346542][T13726] ? kmsan_get_metadata+0x33/0x220 [ 811.351671][T13726] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 811.357519][T13726] __msan_chain_origin+0xbf/0x140 [ 811.362607][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 811.367963][T13726] get_compat_msghdr+0x108/0x2c0 [ 811.372937][T13726] ? __sys_recvmmsg+0x51c/0x6f0 [ 811.377910][T13726] do_recvmmsg+0xd77/0x2120 [ 811.382489][T13726] ? __stack_depot_save+0x21/0x4b0 [ 811.387637][T13726] ? kmsan_get_metadata+0x33/0x220 [ 811.392770][T13726] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 811.399070][T13726] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 811.405182][T13726] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 811.411750][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 811.416493][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 811.422879][T13726] __do_fast_syscall_32+0x96/0xf0 [ 811.428026][T13726] do_fast_syscall_32+0x34/0x70 [ 811.432920][T13726] do_SYSENTER_32+0x1b/0x20 [ 811.437547][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 811.443923][T13726] RIP: 0023:0xf7ff3549 [ 811.448004][T13726] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 811.467819][T13726] RSP: 002b:00000000f7fcd5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 811.476264][T13726] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 811.484266][T13726] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 811.492246][T13726] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 811.500235][T13726] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 811.508244][T13726] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 811.516259][T13726] [ 811.521480][T13726] Uninit was stored to memory at: [ 811.526955][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 811.532241][T13726] get_compat_msghdr+0x108/0x2c0 [ 811.537239][T13726] do_recvmmsg+0xd77/0x2120 [ 811.541951][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 811.546689][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 811.553236][T13726] __do_fast_syscall_32+0x96/0xf0 [ 811.554020][T13760] UDC core: couldn't find an available UDC or it's busy: -16 [ 811.558307][T13726] do_fast_syscall_32+0x34/0x70 [ 811.558365][T13726] do_SYSENTER_32+0x1b/0x20 [ 811.566139][T13760] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 811.570655][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 811.589176][T13726] [ 811.590506][T13760] UDC core: couldn't find an available UDC or it's busy: -16 [ 811.591504][T13726] Uninit was stored to memory at: [ 811.591588][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 811.602360][T13760] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 811.604244][T13726] get_compat_msghdr+0x108/0x2c0 [ 811.621873][T13726] do_recvmmsg+0xd77/0x2120 [ 811.626429][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 811.631149][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 811.637613][T13726] __do_fast_syscall_32+0x96/0xf0 [ 811.642810][T13726] do_fast_syscall_32+0x34/0x70 [ 811.647791][T13726] do_SYSENTER_32+0x1b/0x20 [ 811.652474][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 811.658867][T13726] [ 811.660526][ T3548] hid (null): bogus close delimiter [ 811.661203][T13726] Uninit was stored to memory at: [ 811.661284][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 811.676727][T13726] get_compat_msghdr+0x108/0x2c0 [ 811.681799][T13726] do_recvmmsg+0xd77/0x2120 [ 811.686346][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 811.691063][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 811.697633][T13726] __do_fast_syscall_32+0x96/0xf0 [ 811.702798][T13726] do_fast_syscall_32+0x34/0x70 [ 811.707697][T13726] do_SYSENTER_32+0x1b/0x20 [ 811.712415][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 811.718794][T13726] [ 811.719296][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0039/input/input120 [ 811.721114][T13726] Uninit was stored to memory at: [ 811.721195][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 811.742998][T13726] get_compat_msghdr+0x108/0x2c0 [ 811.747982][T13726] do_recvmmsg+0xd77/0x2120 [ 811.752722][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 811.757448][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 811.764001][T13726] __do_fast_syscall_32+0x96/0xf0 [ 811.769073][T13726] do_fast_syscall_32+0x34/0x70 [ 811.774131][T13726] do_SYSENTER_32+0x1b/0x20 [ 811.778685][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 811.785245][T13726] [ 811.787576][T13726] Uninit was stored to memory at: [ 811.792831][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 811.797988][T13726] get_compat_msghdr+0x108/0x2c0 [ 811.803139][T13726] do_recvmmsg+0xd77/0x2120 [ 811.807694][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 811.812541][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 811.818927][T13726] __do_fast_syscall_32+0x96/0xf0 [ 811.824182][T13726] do_fast_syscall_32+0x34/0x70 [ 811.827778][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0039/input/input121 [ 811.829071][T13726] do_SYSENTER_32+0x1b/0x20 [ 811.829127][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 811.851581][T13726] [ 811.854091][T13726] Uninit was stored to memory at: [ 811.859184][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 811.864518][T13726] get_compat_msghdr+0x108/0x2c0 [ 811.869502][T13726] do_recvmmsg+0xd77/0x2120 [ 811.874169][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 811.877609][ T3548] kye 0003:0458:5019.0039: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 811.878898][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 811.897016][T13726] __do_fast_syscall_32+0x96/0xf0 [ 811.902188][T13726] do_fast_syscall_32+0x34/0x70 [ 811.907087][T13726] do_SYSENTER_32+0x1b/0x20 [ 811.911629][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 811.918222][T13726] [ 811.920552][T13726] Uninit was stored to memory at: [ 811.925835][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 811.930992][T13726] get_compat_msghdr+0x108/0x2c0 [ 811.936172][T13726] do_recvmmsg+0xd77/0x2120 [ 811.940726][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 811.945636][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 811.952145][T13726] __do_fast_syscall_32+0x96/0xf0 [ 811.957230][T13726] do_fast_syscall_32+0x34/0x70 [ 811.962305][T13726] do_SYSENTER_32+0x1b/0x20 [ 811.966854][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 811.973417][T13726] [ 811.975750][T13726] Local variable msg_sys created at: [ 811.981036][T13726] do_recvmmsg+0xbb/0x2120 [ 811.981475][ T3548] usb 3-1: USB disconnect, device number 18 [ 811.985683][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 812.364538][T13726] not chained 630000 origins [ 812.369184][T13726] CPU: 1 PID: 13726 Comm: syz-executor.1 Not tainted 5.18.0-rc4-syzkaller #0 [ 812.377994][T13726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 812.388112][T13726] Call Trace: [ 812.391396][T13726] [ 812.394332][T13726] dump_stack_lvl+0x1ff/0x28e [ 812.399063][T13726] dump_stack+0x25/0x28 [ 812.403248][T13726] kmsan_internal_chain_origin+0x78/0x120 [ 812.409028][T13726] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 812.415145][T13726] ? kmsan_get_metadata+0x33/0x220 [ 812.420305][T13726] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 812.426162][T13726] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 812.431777][T13726] ? kmsan_get_metadata+0x33/0x220 [ 812.436930][T13726] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 812.442782][T13726] ? should_fail+0x75/0x9c0 [ 812.447325][T13726] ? kmsan_get_metadata+0x33/0x220 [ 812.452457][T13726] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 812.458759][T13726] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 812.464874][T13726] ? kmsan_get_metadata+0x33/0x220 [ 812.470019][T13726] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 812.475848][T13726] __msan_chain_origin+0xbf/0x140 [ 812.480942][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 812.486119][T13726] get_compat_msghdr+0x108/0x2c0 [ 812.491089][T13726] ? __sys_recvmmsg+0x51c/0x6f0 [ 812.495978][T13726] do_recvmmsg+0xd77/0x2120 [ 812.500557][T13726] ? __stack_depot_save+0x21/0x4b0 [ 812.505708][T13726] ? kmsan_get_metadata+0x33/0x220 [ 812.510858][T13726] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 812.517255][T13726] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 812.523368][T13726] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 812.530282][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 812.535007][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 812.541397][T13726] __do_fast_syscall_32+0x96/0xf0 [ 812.546456][T13726] do_fast_syscall_32+0x34/0x70 [ 812.551358][T13726] do_SYSENTER_32+0x1b/0x20 [ 812.555907][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 812.562294][T13726] RIP: 0023:0xf7ff3549 [ 812.566387][T13726] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 812.586020][T13726] RSP: 002b:00000000f7fcd5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 812.594458][T13726] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 812.602485][T13726] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 812.610484][T13726] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 812.618481][T13726] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 812.626491][T13726] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 812.634540][T13726] [ 812.641770][T13726] Uninit was stored to memory at: [ 812.646882][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 812.653009][T13726] get_compat_msghdr+0x108/0x2c0 [ 812.658008][T13726] do_recvmmsg+0xd77/0x2120 [ 812.662672][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 812.667396][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 812.673944][T13726] __do_fast_syscall_32+0x96/0xf0 [ 812.679022][T13726] do_fast_syscall_32+0x34/0x70 [ 812.684082][T13726] do_SYSENTER_32+0x1b/0x20 [ 812.688633][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 812.695174][T13726] [ 812.697511][T13726] Uninit was stored to memory at: [ 812.702780][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 812.707937][T13726] get_compat_msghdr+0x108/0x2c0 [ 812.713063][T13726] do_recvmmsg+0xd77/0x2120 [ 812.717619][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 812.722486][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 812.728899][T13726] __do_fast_syscall_32+0x96/0xf0 [ 812.734133][T13726] do_fast_syscall_32+0x34/0x70 [ 812.739044][T13726] do_SYSENTER_32+0x1b/0x20 [ 812.743750][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 812.750134][T13726] [ 812.752599][T13726] Uninit was stored to memory at: [ 812.757704][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 812.763001][T13726] get_compat_msghdr+0x108/0x2c0 [ 812.767980][T13726] do_recvmmsg+0xd77/0x2120 [ 812.772692][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 812.777419][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 812.783962][T13726] __do_fast_syscall_32+0x96/0xf0 [ 812.789035][T13726] do_fast_syscall_32+0x34/0x70 [ 812.794042][T13726] do_SYSENTER_32+0x1b/0x20 [ 812.798594][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 812.805129][T13726] [ 812.807465][T13726] Uninit was stored to memory at: [ 812.813161][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 812.818326][T13726] get_compat_msghdr+0x108/0x2c0 [ 812.823469][T13726] do_recvmmsg+0xd77/0x2120 [ 812.828024][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 812.832919][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 812.839409][T13726] __do_fast_syscall_32+0x96/0xf0 [ 812.844641][T13726] do_fast_syscall_32+0x34/0x70 [ 812.849537][T13726] do_SYSENTER_32+0x1b/0x20 [ 812.854246][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 812.860651][T13726] [ 812.863141][T13726] Uninit was stored to memory at: [ 812.868261][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 812.873561][T13726] get_compat_msghdr+0x108/0x2c0 [ 812.878540][T13726] do_recvmmsg+0xd77/0x2120 [ 812.883266][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 812.887990][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 812.894470][T13726] __do_fast_syscall_32+0x96/0xf0 [ 812.899547][T13726] do_fast_syscall_32+0x34/0x70 [ 812.904599][T13726] do_SYSENTER_32+0x1b/0x20 [ 812.909151][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 812.915645][T13726] [ 812.917981][T13726] Uninit was stored to memory at: [ 812.923244][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 812.928579][T13726] get_compat_msghdr+0x108/0x2c0 [ 812.933722][T13726] do_recvmmsg+0xd77/0x2120 [ 812.938296][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 812.943174][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 812.949563][T13726] __do_fast_syscall_32+0x96/0xf0 [ 812.954782][T13726] do_fast_syscall_32+0x34/0x70 [ 812.959693][T13726] do_SYSENTER_32+0x1b/0x20 [ 812.964393][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 812.970795][T13726] [ 812.973276][T13726] Uninit was stored to memory at: [ 812.978376][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 812.983700][T13726] get_compat_msghdr+0x108/0x2c0 [ 812.988687][T13726] do_recvmmsg+0xd77/0x2120 [ 812.993349][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 812.998249][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 813.004784][T13726] __do_fast_syscall_32+0x96/0xf0 [ 813.009859][T13726] do_fast_syscall_32+0x34/0x70 [ 813.014910][T13726] do_SYSENTER_32+0x1b/0x20 [ 813.019476][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 813.026013][T13726] [ 813.028342][T13726] Local variable msg_sys created at: [ 813.033722][T13726] do_recvmmsg+0xbb/0x2120 [ 813.038191][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 813.221600][T13726] not chained 640000 origins [ 813.226794][T13726] CPU: 1 PID: 13726 Comm: syz-executor.1 Not tainted 5.18.0-rc4-syzkaller #0 [ 813.235604][T13726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 813.245696][T13726] Call Trace: [ 813.248998][T13726] [ 813.251947][T13726] dump_stack_lvl+0x1ff/0x28e [ 813.252018][T13726] dump_stack+0x25/0x28 [ 813.252068][T13726] kmsan_internal_chain_origin+0x78/0x120 [ 813.252141][T13726] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 813.272705][T13726] ? kmsan_get_metadata+0x33/0x220 [ 813.277858][T13726] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 813.283694][T13726] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 813.289300][T13726] ? kmsan_get_metadata+0x33/0x220 [ 813.294435][T13726] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 813.300293][T13726] ? should_fail+0x75/0x9c0 [ 813.304821][T13726] ? kmsan_get_metadata+0x33/0x220 [ 813.309973][T13726] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 813.316265][T13726] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 813.322407][T13726] ? kmsan_get_metadata+0x33/0x220 [ 813.327569][T13726] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 813.333407][T13726] __msan_chain_origin+0xbf/0x140 [ 813.338505][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 813.343701][T13726] get_compat_msghdr+0x108/0x2c0 [ 813.348700][T13726] ? __sys_recvmmsg+0x51c/0x6f0 [ 813.353709][T13726] do_recvmmsg+0xd77/0x2120 [ 813.358297][T13726] ? __stack_depot_save+0x21/0x4b0 [ 813.363450][T13726] ? kmsan_get_metadata+0x33/0x220 [ 813.368607][T13726] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 813.374890][T13726] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 813.381002][T13726] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 813.387546][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 813.392313][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 813.398703][T13726] __do_fast_syscall_32+0x96/0xf0 [ 813.403762][T13726] do_fast_syscall_32+0x34/0x70 [ 813.408661][T13726] do_SYSENTER_32+0x1b/0x20 [ 813.413187][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 813.419563][T13726] RIP: 0023:0xf7ff3549 [ 813.423644][T13726] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 813.443489][T13726] RSP: 002b:00000000f7fcd5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 813.451960][T13726] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 813.459962][T13726] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 813.467942][T13726] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 813.475928][T13726] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 813.483928][T13726] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 813.491948][T13726] [ 813.498531][T13726] Uninit was stored to memory at: [ 813.504393][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 813.509628][T13726] get_compat_msghdr+0x108/0x2c0 [ 813.514719][T13726] do_recvmmsg+0xd77/0x2120 [ 813.519277][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 813.524094][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 813.530473][T13726] __do_fast_syscall_32+0x96/0xf0 [ 813.535687][T13726] do_fast_syscall_32+0x34/0x70 [ 813.540586][T13726] do_SYSENTER_32+0x1b/0x20 [ 813.545261][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 813.551647][T13726] [ 813.554119][T13726] Uninit was stored to memory at: [ 813.559309][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 813.564629][T13726] get_compat_msghdr+0x108/0x2c0 [ 813.569794][T13726] do_recvmmsg+0xd77/0x2120 [ 813.574673][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 813.579594][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 813.586104][T13726] __do_fast_syscall_32+0x96/0xf0 [ 813.591189][T13726] do_fast_syscall_32+0x34/0x70 [ 813.596540][T13726] do_SYSENTER_32+0x1b/0x20 [ 813.601118][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 813.607625][T13726] [ 813.609965][T13726] Uninit was stored to memory at: [ 813.615225][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 813.620384][T13726] get_compat_msghdr+0x108/0x2c0 [ 813.625523][T13726] do_recvmmsg+0xd77/0x2120 [ 813.630189][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 813.635077][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 813.641552][T13726] __do_fast_syscall_32+0x96/0xf0 [ 813.646775][T13726] do_fast_syscall_32+0x34/0x70 [ 813.651773][T13726] do_SYSENTER_32+0x1b/0x20 [ 813.656325][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 813.662832][T13726] [ 813.665164][T13726] Uninit was stored to memory at: [ 813.670266][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 813.675718][T13726] get_compat_msghdr+0x108/0x2c0 [ 813.680699][T13726] do_recvmmsg+0xd77/0x2120 [ 813.685344][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 813.690072][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 813.696600][T13726] __do_fast_syscall_32+0x96/0xf0 [ 813.701772][T13726] do_fast_syscall_32+0x34/0x70 [ 813.706686][T13726] do_SYSENTER_32+0x1b/0x20 [ 813.711209][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 813.717682][T13726] [ 813.720052][T13726] Uninit was stored to memory at: [ 813.725296][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 813.730451][T13726] get_compat_msghdr+0x108/0x2c0 [ 813.735548][T13726] do_recvmmsg+0xd77/0x2120 [ 813.740101][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 813.744957][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 813.751343][T13726] __do_fast_syscall_32+0x96/0xf0 [ 813.756543][T13726] do_fast_syscall_32+0x34/0x70 [ 813.761447][T13726] do_SYSENTER_32+0x1b/0x20 [ 813.766096][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 813.772576][T13726] [ 813.774907][T13726] Uninit was stored to memory at: [ 813.779999][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 813.785307][T13726] get_compat_msghdr+0x108/0x2c0 [ 813.790294][T13726] do_recvmmsg+0xd77/0x2120 [ 813.794940][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 813.799666][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 813.806189][T13726] __do_fast_syscall_32+0x96/0xf0 [ 813.811266][T13726] do_fast_syscall_32+0x34/0x70 [ 813.816258][T13726] do_SYSENTER_32+0x1b/0x20 [ 813.820807][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 813.827281][T13726] [ 813.829609][T13726] Uninit was stored to memory at: [ 813.834804][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 813.839962][T13726] get_compat_msghdr+0x108/0x2c0 [ 813.845081][T13726] do_recvmmsg+0xd77/0x2120 [ 813.849631][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 813.854497][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 813.860884][T13726] __do_fast_syscall_32+0x96/0xf0 [ 813.866133][T13726] do_fast_syscall_32+0x34/0x70 [ 813.871035][T13726] do_SYSENTER_32+0x1b/0x20 [ 813.875683][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 813.882154][T13726] [ 813.884489][T13726] Local variable msg_sys created at: [ 813.889779][T13726] do_recvmmsg+0xbb/0x2120 [ 813.894394][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 814.061940][T13726] not chained 650000 origins [ 814.066720][T13726] CPU: 1 PID: 13726 Comm: syz-executor.1 Not tainted 5.18.0-rc4-syzkaller #0 [ 814.075506][T13726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.085574][T13726] Call Trace: [ 814.088863][T13726] [ 814.091796][T13726] dump_stack_lvl+0x1ff/0x28e [ 814.096623][T13726] dump_stack+0x25/0x28 [ 814.100825][T13726] kmsan_internal_chain_origin+0x78/0x120 [ 814.106594][T13726] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 814.112932][T13726] ? kmsan_get_metadata+0x33/0x220 [ 814.118063][T13726] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 814.123987][T13726] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 814.129565][T13726] ? kmsan_get_metadata+0x33/0x220 [ 814.134695][T13726] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 814.140523][T13726] ? should_fail+0x75/0x9c0 [ 814.145041][T13726] ? kmsan_get_metadata+0x33/0x220 [ 814.150164][T13726] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 814.156441][T13726] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 814.162550][T13726] ? kmsan_get_metadata+0x33/0x220 [ 814.167689][T13726] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 814.173521][T13726] __msan_chain_origin+0xbf/0x140 [ 814.178586][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 814.183746][T13726] get_compat_msghdr+0x108/0x2c0 [ 814.188730][T13726] ? __sys_recvmmsg+0x51c/0x6f0 [ 814.193618][T13726] do_recvmmsg+0xd77/0x2120 [ 814.198171][T13726] ? __stack_depot_save+0x21/0x4b0 [ 814.203314][T13726] ? kmsan_get_metadata+0x33/0x220 [ 814.208439][T13726] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 814.214720][T13726] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 814.220841][T13726] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 814.227380][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 814.232094][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 814.238456][T13726] __do_fast_syscall_32+0x96/0xf0 [ 814.243509][T13726] do_fast_syscall_32+0x34/0x70 [ 814.248645][T13726] do_SYSENTER_32+0x1b/0x20 [ 814.253182][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 814.259580][T13726] RIP: 0023:0xf7ff3549 [ 814.263692][T13726] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 814.283343][T13726] RSP: 002b:00000000f7fcd5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 814.291782][T13726] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 814.299777][T13726] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 814.307779][T13726] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 814.315757][T13726] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 814.323739][T13726] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 814.331748][T13726] [ 814.338669][T13726] Uninit was stored to memory at: [ 814.344407][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 814.349569][T13726] get_compat_msghdr+0x108/0x2c0 [ 814.354830][T13726] do_recvmmsg+0xd77/0x2120 [ 814.359382][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 814.364197][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 814.370575][T13726] __do_fast_syscall_32+0x96/0xf0 [ 814.375746][T13726] do_fast_syscall_32+0x34/0x70 [ 814.380642][T13726] do_SYSENTER_32+0x1b/0x20 [ 814.385323][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 814.391788][T13726] [ 814.394117][T13726] Uninit was stored to memory at: [ 814.399184][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 814.404469][T13726] get_compat_msghdr+0x108/0x2c0 [ 814.409459][T13726] do_recvmmsg+0xd77/0x2120 [ 814.414123][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 814.418851][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 814.425377][T13726] __do_fast_syscall_32+0x96/0xf0 [ 814.430448][T13726] do_fast_syscall_32+0x34/0x70 [ 814.435476][T13726] do_SYSENTER_32+0x1b/0x20 [ 814.440027][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 814.446567][T13726] [ 814.448898][T13726] Uninit was stored to memory at: [ 814.454137][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 814.459290][T13726] get_compat_msghdr+0x108/0x2c0 [ 814.464403][T13726] do_recvmmsg+0xd77/0x2120 [ 814.468964][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 814.473848][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 814.480229][T13726] __do_fast_syscall_32+0x96/0xf0 [ 814.485434][T13726] do_fast_syscall_32+0x34/0x70 [ 814.490329][T13726] do_SYSENTER_32+0x1b/0x20 [ 814.494971][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 814.501351][T13726] [ 814.503826][T13726] Uninit was stored to memory at: [ 814.508911][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 814.514202][T13726] get_compat_msghdr+0x108/0x2c0 [ 814.519183][T13726] do_recvmmsg+0xd77/0x2120 [ 814.523866][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 814.528590][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 814.535068][T13726] __do_fast_syscall_32+0x96/0xf0 [ 814.540143][T13726] do_fast_syscall_32+0x34/0x70 [ 814.545175][T13726] do_SYSENTER_32+0x1b/0x20 [ 814.549735][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 814.556231][T13726] [ 814.558564][T13726] Uninit was stored to memory at: [ 814.563826][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 814.568987][T13726] get_compat_msghdr+0x108/0x2c0 [ 814.574137][T13726] do_recvmmsg+0xd77/0x2120 [ 814.578694][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 814.583572][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 814.589960][T13726] __do_fast_syscall_32+0x96/0xf0 [ 814.595172][T13726] do_fast_syscall_32+0x34/0x70 [ 814.600071][T13726] do_SYSENTER_32+0x1b/0x20 [ 814.604715][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 814.611120][T13726] [ 814.613596][T13726] Uninit was stored to memory at: [ 814.618689][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 814.623971][T13726] get_compat_msghdr+0x108/0x2c0 [ 814.628957][T13726] do_recvmmsg+0xd77/0x2120 [ 814.633654][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 814.638383][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 814.644863][T13726] __do_fast_syscall_32+0x96/0xf0 [ 814.649938][T13726] do_fast_syscall_32+0x34/0x70 [ 814.654970][T13726] do_SYSENTER_32+0x1b/0x20 [ 814.659518][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 814.666016][T13726] [ 814.668346][T13726] Uninit was stored to memory at: [ 814.673583][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 814.678746][T13726] get_compat_msghdr+0x108/0x2c0 [ 814.683869][T13726] do_recvmmsg+0xd77/0x2120 [ 814.688421][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 814.693273][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 814.699653][T13726] __do_fast_syscall_32+0x96/0xf0 [ 814.704865][T13726] do_fast_syscall_32+0x34/0x70 [ 814.709760][T13726] do_SYSENTER_32+0x1b/0x20 [ 814.714437][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 814.720815][T13726] [ 814.723288][T13726] Local variable msg_sys created at: [ 814.728577][T13726] do_recvmmsg+0xbb/0x2120 [ 814.733178][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 814.902234][T13726] not chained 660000 origins [ 814.906867][T13726] CPU: 1 PID: 13726 Comm: syz-executor.1 Not tainted 5.18.0-rc4-syzkaller #0 [ 814.915670][T13726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.925738][T13726] Call Trace: [ 814.929031][T13726] [ 814.931966][T13726] dump_stack_lvl+0x1ff/0x28e [ 814.936694][T13726] dump_stack+0x25/0x28 [ 814.940870][T13726] kmsan_internal_chain_origin+0x78/0x120 [ 814.946640][T13726] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 814.952777][T13726] ? kmsan_get_metadata+0x33/0x220 [ 814.957929][T13726] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 814.963781][T13726] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 814.969390][T13726] ? kmsan_get_metadata+0x33/0x220 [ 814.974549][T13726] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 814.980391][T13726] ? should_fail+0x75/0x9c0 [ 814.984925][T13726] ? kmsan_get_metadata+0x33/0x220 [ 814.990083][T13726] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 814.996398][T13726] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 815.002518][T13726] ? kmsan_get_metadata+0x33/0x220 [ 815.007673][T13726] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 815.013531][T13726] __msan_chain_origin+0xbf/0x140 [ 815.018612][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 815.023781][T13726] get_compat_msghdr+0x108/0x2c0 [ 815.028776][T13726] ? __sys_recvmmsg+0x51c/0x6f0 [ 815.033669][T13726] do_recvmmsg+0xd77/0x2120 [ 815.038229][T13726] ? __stack_depot_save+0x21/0x4b0 [ 815.043381][T13726] ? kmsan_get_metadata+0x33/0x220 [ 815.048531][T13726] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 815.054814][T13726] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 815.060924][T13726] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 815.067465][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 815.072215][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 815.078602][T13726] __do_fast_syscall_32+0x96/0xf0 [ 815.083664][T13726] do_fast_syscall_32+0x34/0x70 [ 815.088570][T13726] do_SYSENTER_32+0x1b/0x20 [ 815.093099][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 815.099475][T13726] RIP: 0023:0xf7ff3549 [ 815.103555][T13726] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 815.123210][T13726] RSP: 002b:00000000f7fcd5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 815.131667][T13726] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 815.139683][T13726] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 815.147697][T13726] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 815.155699][T13726] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 815.163685][T13726] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 815.171702][T13726] [ 815.178372][T13726] Uninit was stored to memory at: [ 815.187276][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 815.192953][T13726] get_compat_msghdr+0x108/0x2c0 [ 815.197942][T13726] do_recvmmsg+0xd77/0x2120 [ 815.202594][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 815.207321][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 815.213788][T13726] __do_fast_syscall_32+0x96/0xf0 [ 815.218871][T13726] do_fast_syscall_32+0x34/0x70 [ 815.223932][T13726] do_SYSENTER_32+0x1b/0x20 [ 815.228481][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 815.234957][T13726] [ 815.237300][T13726] Uninit was stored to memory at: [ 815.242534][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 815.247689][T13726] get_compat_msghdr+0x108/0x2c0 [ 815.252812][T13726] do_recvmmsg+0xd77/0x2120 [ 815.257361][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 815.262213][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 815.268593][T13726] __do_fast_syscall_32+0x96/0xf0 [ 815.273816][T13726] do_fast_syscall_32+0x34/0x70 [ 815.278716][T13726] do_SYSENTER_32+0x1b/0x20 [ 815.283402][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 815.289813][T13726] [ 815.292288][T13726] Uninit was stored to memory at: [ 815.297388][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 815.302679][T13726] get_compat_msghdr+0x108/0x2c0 [ 815.307690][T13726] do_recvmmsg+0xd77/0x2120 [ 815.312666][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 815.317404][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 815.323939][T13726] __do_fast_syscall_32+0x96/0xf0 [ 815.329021][T13726] do_fast_syscall_32+0x34/0x70 [ 815.334076][T13726] do_SYSENTER_32+0x1b/0x20 [ 815.338624][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 815.345147][T13726] [ 815.347478][T13726] Uninit was stored to memory at: [ 815.352733][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 815.357896][T13726] get_compat_msghdr+0x108/0x2c0 [ 815.363007][T13726] do_recvmmsg+0xd77/0x2120 [ 815.367563][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 815.372411][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 815.378797][T13726] __do_fast_syscall_32+0x96/0xf0 [ 815.384017][T13726] do_fast_syscall_32+0x34/0x70 [ 815.388927][T13726] do_SYSENTER_32+0x1b/0x20 [ 815.393636][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 815.400015][T13726] [ 815.402490][T13726] Uninit was stored to memory at: [ 815.407587][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 815.412885][T13726] get_compat_msghdr+0x108/0x2c0 [ 815.417869][T13726] do_recvmmsg+0xd77/0x2120 [ 815.422541][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 815.427270][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 815.433799][T13726] __do_fast_syscall_32+0x96/0xf0 [ 815.438873][T13726] do_fast_syscall_32+0x34/0x70 [ 815.443911][T13726] do_SYSENTER_32+0x1b/0x20 [ 815.448465][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 815.454958][T13726] [ 815.457290][T13726] Uninit was stored to memory at: [ 815.462527][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 815.468203][T13726] get_compat_msghdr+0x108/0x2c0 [ 815.473327][T13726] do_recvmmsg+0xd77/0x2120 [ 815.477878][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 815.482728][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 815.489109][T13726] __do_fast_syscall_32+0x96/0xf0 [ 815.494351][T13726] do_fast_syscall_32+0x34/0x70 [ 815.499249][T13726] do_SYSENTER_32+0x1b/0x20 [ 815.503923][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 815.510305][T13726] [ 815.512775][T13726] Uninit was stored to memory at: [ 815.517857][T13726] __get_compat_msghdr+0x6e1/0x9d0 [ 815.523153][T13726] get_compat_msghdr+0x108/0x2c0 [ 815.528130][T13726] do_recvmmsg+0xd77/0x2120 [ 815.532804][T13726] __sys_recvmmsg+0x51c/0x6f0 [ 815.537528][T13726] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 815.544072][T13726] __do_fast_syscall_32+0x96/0xf0 [ 815.549147][T13726] do_fast_syscall_32+0x34/0x70 [ 815.554220][T13726] do_SYSENTER_32+0x1b/0x20 [ 815.558767][T13726] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 815.565281][T13726] [ 815.567612][T13726] Local variable msg_sys created at: [ 815.573127][T13726] do_recvmmsg+0xbb/0x2120 [ 815.577601][T13726] __sys_recvmmsg+0x51c/0x6f0 17:56:52 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000040)={0xfffffffffffffeab, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 17:56:52 executing program 5: unlinkat(0xffffffffffffffff, 0x0, 0x7a28d663b129c605) 17:56:52 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10, 0x0, 0x0) 17:56:52 executing program 4: r0 = syz_io_uring_setup(0x79d4, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x8000000) syz_io_uring_setup(0x3b14, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 17:56:52 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.time\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') 17:56:52 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x18, &(0x7f00000001c0)=@string={0x18, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:56:52 executing program 5: io_setup(0x3, &(0x7f0000000040)) 17:56:53 executing program 4: r0 = syz_io_uring_setup(0x79d4, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x30013, r0, 0x8000000) syz_io_uring_setup(0x6cc2, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) [ 816.003565][ T3542] usb 3-1: new high-speed USB device number 19 using dummy_hcd 17:56:53 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:56:53 executing program 3: syz_io_uring_setup(0x7339, &(0x7f0000000040), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0xd68, &(0x7f0000000140), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 816.262205][ T3542] usb 3-1: Using ep0 maxpacket: 16 17:56:53 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) [ 816.383108][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.394296][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.404390][ T3542] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 816.413705][ T3542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:56:53 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1000000084000000080000000800000014000000840000000700000006540000000001001400000084"], 0x68}, 0x0) 17:56:53 executing program 1: r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0xffffffffffffff00, 0x2}, 0x10) [ 816.533902][ T3542] usb 3-1: config 0 descriptor?? 17:56:53 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) connect$inet(r1, &(0x7f0000000380)={0x10, 0x2}, 0x10) 17:56:53 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001680)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@authinfo={0x10}, @dstaddrv6={0x1c, 0x84, 0xa, @remote={0xfe, 0x80, '\x00', 0x0}}], 0x2c}, 0x0) 17:56:53 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup2(r1, r0) [ 816.986224][T13767] UDC core: couldn't find an available UDC or it's busy: -16 [ 816.994087][T13767] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 817.113108][T13767] UDC core: couldn't find an available UDC or it's busy: -16 [ 817.120715][T13767] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 817.224220][ T3542] hid (null): bogus close delimiter [ 817.307938][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.003A/input/input122 17:56:54 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect(r0, &(0x7f0000000040)=@un=@abs={0x8}, 0x8) [ 817.405681][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.003A/input/input123 [ 817.569616][ T3542] kye 0003:0458:5019.003A: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 817.626893][ T3542] usb 3-1: USB disconnect, device number 19 17:56:55 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x18, &(0x7f00000001c0)=@string={0x18, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:56:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000280), 0xc) 17:56:55 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002580)={&(0x7f0000000280)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000025c0)=ANY=[], 0x78}, 0x0) 17:56:55 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1c, 0x1c}, 0x1c) 17:56:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0xd) 17:56:55 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@sndrcv={0x2c}], 0x2c}, 0x0) 17:56:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5bf058c6, 0xffff}, 0x14) 17:56:55 executing program 5: open$dir(0x0, 0x8c508244f1841dd1, 0x0) 17:56:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 17:56:55 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000000), 0xc) 17:56:55 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000440)="06", 0x1, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 17:56:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0xf) [ 818.552240][ T3542] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 818.792000][ T3542] usb 3-1: Using ep0 maxpacket: 16 [ 818.912202][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.923418][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.934335][ T3542] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 818.943677][ T3542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.967047][ T3542] usb 3-1: config 0 descriptor?? [ 819.433465][T13821] UDC core: couldn't find an available UDC or it's busy: -16 [ 819.440939][T13821] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 819.451420][T13821] UDC core: couldn't find an available UDC or it's busy: -16 [ 819.459146][T13821] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 819.474043][ T3542] hid (null): bogus close delimiter [ 819.504891][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.003B/input/input124 [ 819.596534][ T3542] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.003B/input/input125 [ 819.667202][ T3542] kye 0003:0458:5019.003B: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 819.705368][ T3542] usb 3-1: USB disconnect, device number 20 17:56:57 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1c, &(0x7f00000001c0)=@string={0x1c, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc5574"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:56:57 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x9, 0x1, "c4"}, 0x9) 17:56:57 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000b80)={@broadcast, @local, @val, {@ipv4}}, 0x0) 17:56:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000040), 0x8) 17:56:57 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@sndrcv={0x2c}], 0x2c}, 0x0) 17:56:57 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f0000000080)) 17:56:57 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000100), &(0x7f00000001c0)=0xb0) 17:56:57 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10) 17:56:57 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xb, 0x0, 0x0) 17:56:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000013c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@sndrcv={0x2c}], 0x2c}, 0x0) 17:56:57 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 17:56:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f00000000c0)='htcp\x00', 0x5) [ 820.802211][T11225] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 821.042332][T11225] usb 3-1: Using ep0 maxpacket: 16 [ 821.163974][T11225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.175782][T11225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.186002][T11225] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 821.195452][T11225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.249742][T11225] usb 3-1: config 0 descriptor?? [ 821.713814][T13847] UDC core: couldn't find an available UDC or it's busy: -16 [ 821.721422][T13847] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 821.732575][T13847] UDC core: couldn't find an available UDC or it's busy: -16 [ 821.742005][T13847] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 821.754152][T11225] hid (null): bogus close delimiter [ 821.782050][T11225] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.003C/input/input126 [ 821.872294][T11225] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.003C/input/input127 [ 821.937367][T11225] kye 0003:0458:5019.003C: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 821.974064][T11225] usb 3-1: USB disconnect, device number 21 [ 822.178353][ T1194] ieee802154 phy0 wpan0: encryption failed: -22 [ 822.185186][ T1194] ieee802154 phy1 wpan1: encryption failed: -22 17:56:59 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1c, &(0x7f00000001c0)=@string={0x1c, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc5574"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:56:59 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000100), &(0x7f0000000180)=0x63) 17:56:59 executing program 3: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000140), 0x90) 17:56:59 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) 17:56:59 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x68}, 0x0) 17:56:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x14) 17:56:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r3 = dup2(r2, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000040)={r4}, 0x8) 17:56:59 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) read(r0, &(0x7f0000000040)=""/216, 0xd8) 17:56:59 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev}, @mcast1, @loopback={0x0, 0x5100}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804a0013, r1}) 17:56:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r2, 0x3}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000000)={0x7fff}) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:56:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2261, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "000016000000000000000000000000000400"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8f7b10111e2fc0ffd79b1cb9434429cfb4cb69"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) dup3(r1, r0, 0x0) [ 823.052272][T11225] usb 3-1: new high-speed USB device number 22 using dummy_hcd 17:57:00 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002640)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev, 0x8}, 0x1c, 0x0}, 0x0) [ 823.322304][T11225] usb 3-1: Using ep0 maxpacket: 16 [ 823.442908][T11225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.454686][T11225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.464786][T11225] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 823.474089][T11225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.551448][T11225] usb 3-1: config 0 descriptor?? [ 824.004147][T13875] UDC core: couldn't find an available UDC or it's busy: -16 [ 824.011666][T13875] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 824.020981][T13875] UDC core: couldn't find an available UDC or it's busy: -16 [ 824.028602][T13875] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 824.044575][T11225] hid (null): bogus close delimiter [ 824.072594][T11225] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.003D/input/input128 [ 824.159673][T11225] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.003D/input/input129 [ 824.229198][T11225] kye 0003:0458:5019.003D: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 824.251852][ C0] raw-gadget gadget: ignoring, device is not running [ 824.266891][T11225] usb 3-1: USB disconnect, device number 22 17:57:01 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1c, &(0x7f00000001c0)=@string={0x1c, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc5574"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:57:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket(0x11, 0x800000003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 17:57:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="0f017786baf80c66b894bbf58f66efbafc0ced2e2e0f23340f0664f20f06f30f103625500f20c06635000000200f22c0660f38827d2366b8010000000f01c166b8010000000f01d9", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:57:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000700)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:57:01 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev}, @mcast1, @loopback={0x0, 0x5105}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x804a0013}) 17:57:01 executing program 0: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000380)="c4c2f9227800c461f35eebb949060000b8bd6d0000ba000000000f30ddc466ba6100ed470f326566470f3821d1b9180100000f3266baf80cb88260138bef66bafc0c66ed8f09409339", 0x49}], 0x1, 0x0, &(0x7f0000000080)=[@dstype0, @dstype0], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:57:02 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev}, @mcast1, @loopback={0x0, 0x5105}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x804a0013}) [ 824.864489][T13897] fs-verity (sda1, inode 1135): Unknown hash algorithm number: 0 [ 824.893450][T13903] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 824.985878][T13903] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 17:57:02 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback={0x0, 0x5105}, 0x0, 0x0, 0x0, 0x380, 0x0, 0x804a0013}) 17:57:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000700)={0x1, 0x1, 0x1000, 0x1, &(0x7f0000002840)="d0", 0x0, 0x0, 0x0}) 17:57:02 executing program 0: write(0xffffffffffffffff, &(0x7f0000000380)="0f5b0cd10ea810afdf01ffa5a121", 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:57:02 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev}, @mcast1, @loopback={0x0, 0x5105}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x804a0013}) 17:57:02 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8481, 0x0) [ 825.494784][ T3548] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 825.580147][T13924] fs-verity: sha256 using implementation "sha256-generic" [ 825.742005][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 825.862616][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.874305][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.884403][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 825.893708][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.924501][ T3548] usb 3-1: config 0 descriptor?? [ 826.377424][T13912] UDC core: couldn't find an available UDC or it's busy: -16 [ 826.385090][T13912] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 826.394253][T13912] UDC core: couldn't find an available UDC or it's busy: -16 [ 826.402166][T13912] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 826.414343][T13924] fs-verity (sda1, inode 1135): Error -4 building Merkle tree [ 826.434650][ T3548] hid (null): bogus close delimiter [ 826.473501][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.003E/input/input130 [ 826.571047][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.003E/input/input131 [ 826.637335][ T3548] kye 0003:0458:5019.003E: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 826.667626][ T3548] usb 3-1: USB disconnect, device number 23 17:57:04 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1e, &(0x7f00000001c0)=@string={0x1e, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:57:04 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x541b, 0x0) 17:57:04 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback={0x0, 0x5105}, 0x0, 0x0, 0x0, 0x380, 0x0, 0x804a0013}) 17:57:04 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev}, @mcast1, @loopback={0x0, 0x5105}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x804a0013}) 17:57:04 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x20) 17:57:04 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x214a43, 0x0) 17:57:04 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x18, 0x0, 0x0, 'r'}, {0x10}], 0x28}, 0x0) 17:57:04 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback={0x0, 0x5105}, 0x0, 0x0, 0x0, 0x380, 0x0, 0x804a0013}) 17:57:04 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@timestamping={{0x14}}], 0x18}, 0x0) 17:57:04 executing program 0: bpf$OBJ_GET_MAP(0xa, 0x0, 0x0) 17:57:04 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x0, 0x0, 0xfffffffd, 0x0, 0x1}, 0x48) 17:57:04 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback={0x0, 0x5105}, 0x0, 0x0, 0x0, 0x380, 0x0, 0x804a0013}) [ 827.783168][ T121] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 828.021892][ T121] usb 3-1: Using ep0 maxpacket: 16 [ 828.142686][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.154093][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.164702][ T121] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 828.174033][ T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.250969][ T121] usb 3-1: config 0 descriptor?? [ 828.708545][T13939] UDC core: couldn't find an available UDC or it's busy: -16 [ 828.716621][T13939] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 828.726460][T13939] UDC core: couldn't find an available UDC or it's busy: -16 [ 828.734553][T13939] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 828.763921][ T121] hid (null): bogus close delimiter [ 828.780460][ T121] hid (null): invalid report_count 31720 [ 828.797304][ T121] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.003F/input/input132 [ 828.888581][ T121] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.003F/input/input133 [ 828.972276][ T121] kye 0003:0458:5019.003F: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 828.996574][ T121] usb 3-1: USB disconnect, device number 24 17:57:06 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1e, &(0x7f00000001c0)=@string={0x1e, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:57:06 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000000b00)=""/226, 0x32, 0xe2, 0x1}, 0x20) 17:57:06 executing program 4: socketpair(0x1, 0x80005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) close(r0) 17:57:06 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0xa, 0x4, 0x4, 0x97, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0x0, 0x0, 0x0, &(0x7f0000001540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 17:57:06 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x5411, &(0x7f0000000040)={'team0\x00'}) 17:57:06 executing program 3: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8906, 0x0) 17:57:06 executing program 1: syz_clone(0x402032c0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) 17:57:06 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f00000017c0)='\n', 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) 17:57:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb}, 0x48) 17:57:06 executing program 3: bpf$OBJ_GET_MAP(0x3, 0x0, 0x0) 17:57:06 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f00000017c0)='\n', 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000080)=""/142, 0x8e}], 0x1}, 0x0) 17:57:07 executing program 4: mkdir(&(0x7f0000001780)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001980)={&(0x7f0000001940)='./file0\x00', 0x0, 0x8}, 0x10) [ 830.121953][T11225] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 830.362467][T11225] usb 3-1: Using ep0 maxpacket: 16 [ 830.482739][T11225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.494074][T11225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.504309][T11225] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 830.513664][T11225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.559005][T11225] usb 3-1: config 0 descriptor?? [ 831.024914][T13964] UDC core: couldn't find an available UDC or it's busy: -16 [ 831.032654][T13964] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 831.041483][T13964] UDC core: couldn't find an available UDC or it's busy: -16 [ 831.049328][T13964] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 831.084187][T11225] hid (null): bogus close delimiter [ 831.100825][T11225] hid (null): invalid report_count 31720 [ 831.118394][T11225] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0040/input/input134 [ 831.209877][T11225] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0040/input/input135 [ 831.278543][T11225] kye 0003:0458:5019.0040: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 831.302682][T11225] usb 3-1: USB disconnect, device number 25 17:57:08 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1e, &(0x7f00000001c0)=@string={0x1e, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:57:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 17:57:08 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f00000017c0)="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", 0xec1}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000016c0)={&(0x7f0000000000)=@x25, 0x80, &(0x7f0000001700)=[{&(0x7f0000000080)=""/142, 0x8e}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001600)=""/135, 0x87}, 0x7e99bd0540f9eee) 17:57:08 executing program 5: socketpair(0xa, 0x1, 0xfa, &(0x7f0000000000)) 17:57:08 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:57:08 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=0x1, 0xffffffffffffffff, 0x11}, 0x10) 17:57:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0xa, 0x4, 0x4, 0x97, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x6, 0x0, 0x7540, 0x1, 0x1c10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x48) 17:57:09 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {&(0x7f0000001480)='w', 0x1}], 0x3}, 0x0) 17:57:09 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f00000017c0)="0acb6c60468b763ea3200e525796fdb83b5ea1714d835084aabc0d1a081105d6c69e93a7f188e746ed1c8897e626e212bc2389ef638a1419f73ee82993a236e1d23d592de7d7f2bb04605ac2f21369", 0x4f}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)=[{0x0}, {&(0x7f0000000140)=""/79, 0x4f}], 0x2}, 0x0) 17:57:09 executing program 3: syz_clone(0x44002400, 0x0, 0x0, 0x0, 0x0, 0x0) [ 832.444858][ T121] usb 3-1: new high-speed USB device number 26 using dummy_hcd 17:57:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000080000000000000000000000095"], &(0x7f0000000480)='GPL\x00', 0x4, 0xb0, &(0x7f0000000100)=""/176, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000080)=r1, 0x4) 17:57:09 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@generic={0x3f}]}, &(0x7f0000000780)='syzkaller\x00', 0x3, 0x89, &(0x7f00000007c0)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 832.711930][ T121] usb 3-1: Using ep0 maxpacket: 16 [ 832.852990][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.864151][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.874239][ T121] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 832.883539][ T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.957050][ T121] usb 3-1: config 0 descriptor?? [ 833.421168][T13990] UDC core: couldn't find an available UDC or it's busy: -16 [ 833.428935][T13990] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 833.439162][T13990] UDC core: couldn't find an available UDC or it's busy: -16 [ 833.446807][T13990] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 833.474220][ T121] hid (null): bogus close delimiter [ 833.491007][ T121] hid (null): invalid report_count 31720 [ 833.508210][ T121] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0041/input/input136 [ 833.597743][ T121] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0041/input/input137 [ 833.668271][ T121] kye 0003:0458:5019.0041: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 833.691181][ T121] usb 3-1: USB disconnect, device number 26 17:57:11 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1f, &(0x7f00000001c0)=@string={0x1f, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f7"}}]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:57:11 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1, &(0x7f0000000400)=@raw=[@ldst={0x1}], &(0x7f0000000480)='syzkaller\x00', 0x4, 0x8c, &(0x7f0000000740)=""/140, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:57:11 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x2, &(0x7f00000000c0)=@raw=[@kfunc, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000500)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:57:11 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f00000004c0)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x4}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:57:11 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000480)='GPL\x00', 0x4, 0xb0, &(0x7f0000000100)=""/176, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x21) 17:57:11 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000040)={'team0\x00'}) 17:57:11 executing program 5: syz_clone(0x18021480, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 17:57:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x2dc, 0x110, 0xffffffff, 0x204, 0x0, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, 'bond_slave_0\x00', 'dummy0\x00', {}, {}, 0x0, 0x7}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @empty, @port, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 'veth0_virt_wifi\x00', 'batadv0\x00'}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @empty, @icmp_id, @gre_key}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x14}, 0xff, 0x0, 'bond_slave_0\x00', 'dummy0\x00', {0xff}, {}, 0x21, 0x1, 0x31}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @icmp_id=0x68, @icmp_id}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'bond_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @gre_key, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x394) 17:57:11 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x4e}}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:57:11 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, &(0x7f00000002c0)=""/207, 0x26, 0xcf, 0x1}, 0x20) 17:57:11 executing program 4: syz_clone(0x0, 0x0, 0xfffffffffffffcb3, 0x0, 0x0, 0x0) syz_clone(0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 17:57:11 executing program 5: socketpair$unix(0xa, 0x0, 0x48000000, &(0x7f0000000080)) [ 834.772167][ T3548] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 835.032248][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 835.182742][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.194022][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.204131][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 835.213536][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.239604][ T3548] usb 3-1: config 0 descriptor?? [ 835.698816][T14017] UDC core: couldn't find an available UDC or it's busy: -16 [ 835.706432][T14017] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 835.716370][T14017] UDC core: couldn't find an available UDC or it's busy: -16 [ 835.724089][T14017] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 835.822438][ T3548] usbhid 3-1:0.0: can't add hid device: -71 [ 835.828894][ T3548] usbhid: probe of 3-1:0.0 failed with error -71 [ 835.839221][ T3548] usb 3-1: USB disconnect, device number 27 17:57:13 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f00000002c0)=""/207, 0x29, 0xcf, 0x1}, 0x20) 17:57:13 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="8ca66639869dac5eab493d6fc31bd70500c48d75441e14c9f498d629f6fd3cc52f1cb6dda6d874ab7f760ad5926fcec21a7057e947e16bdc66d1a080f5d6c952f4f1814de54050ba7c9047614c9f3270675e0d70d3011b5cf464085ff69ad0cf0537094fceb3927fb8d73b2f3867940a97ff24628d74f1c255a175b99819d16bcf801e74707509be10d88e29b518f7", 0x8f}], 0x1, &(0x7f0000000400)=[{0xd, 0x0, 0x0, "72ca3b844150baba97ef92641ee05e4d8fe1e4f28209f8d59c0fbcd14f033250782398a79bc27e549e9518aeee93b87cd3d8f1b65069707d2b3e7c3ed8"}, {0x78, 0x0, 0x0, "9d8af08c9e2de8c86ae383df14980edf1962e145f1e28c34b4cfadf9bfb8b434e0ffa6733933422455654bc0802c0f7275cc7be65341c6852973daf83685f762804d52077a3648471a3d20ecfe5f0dce4f63b325b3ed1797a7f733b91a3377095b8d"}, {0xd0, 0x0, 0x0, "3feb6886bf768bfccac7658f258bad3db3e96691b8ecae279dfa278b06c6c21bd976d5d711c6e27aff781113234f6a153db27aec83f72ac318c464f2eb5a24578cf1d2a6ccb53b61dabc03f12e653da4549ec022ab71393ed7058ddc244d0498f950f65ba8e5ff6b69a6e168106c8783eab1b87cac9d83995beedb4bdad4e80036f657349457493770844eb86e8f756ad190395b2080f26653b1fda02a868a1b167e4cdee6991de8e821d8b5c295ae09633464a2062af664e4e7c124774c7e731f8c0c05f5de6a0364"}, {0x58, 0x0, 0x0, "e51eee651af6457b3fbd2f8f65cee373e2c6ef3b388843255ed51b9065a775edd1fbf1e4caf3eb6327f3d3714cf9ff8f69d5e29b5a00c8fe549bc66e2e4361fcd49b"}], 0x1f0}, 0xc0) 17:57:13 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1f, &(0x7f00000001c0)=@string={0x1f, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f7"}}]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:57:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000080)=@raw=[@alu], &(0x7f0000000100)='GPL\x00', 0x9, 0xac, &(0x7f0000000140)=""/172, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3, 0x7, 0xce5, 0x8000}, 0x10}, 0x80) 17:57:13 executing program 5: syz_clone(0x522075b5, 0x0, 0x1ffff000, 0x0, 0x0, 0x0) 17:57:13 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f00000017c0)="0acb6c60468b763ea3200e525796fdb83b5ea1714d835084aabc0d1a081105d6c69e93a7f188e746ed1c8897e626e212bc2389ef638a1419f73ee82993a236e1d23d592de7d7f2bb04605ac2f21369", 0x4f}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000140)=""/79, 0x4f}], 0x1}, 0x0) 17:57:13 executing program 5: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000480)='GPL\x00', 0x4, 0xb0, &(0x7f0000000100)=""/176, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) 17:57:13 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x20) 17:57:13 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f00000017c0)='\n', 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)=[{0x0}, {&(0x7f0000000140)=""/79, 0x4f}], 0x2}, 0x0) 17:57:13 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{}, [], {0x95, 0x0, 0x0, 0x5}}, &(0x7f0000000480)='GPL\x00', 0x4, 0xb0, &(0x7f0000000100)=""/176, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:57:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x35, &(0x7f0000000080), 0x4) 17:57:13 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xc, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:57:13 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd}, 0x48) 17:57:13 executing program 0: bpf$OBJ_GET_MAP(0x6, 0x0, 0x0) [ 836.886498][ T3548] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 837.162280][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 837.282902][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.294143][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.307381][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 837.317185][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.375797][ T3548] usb 3-1: config 0 descriptor?? [ 837.834267][T14044] UDC core: couldn't find an available UDC or it's busy: -16 [ 837.842049][T14044] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 837.850974][T14044] UDC core: couldn't find an available UDC or it's busy: -16 [ 837.858905][T14044] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 837.952181][ T3548] usbhid 3-1:0.0: can't add hid device: -71 [ 837.958432][ T3548] usbhid: probe of 3-1:0.0 failed with error -71 [ 837.968545][ T3548] usb 3-1: USB disconnect, device number 28 17:57:15 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1f, &(0x7f00000001c0)=@string={0x1f, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f7"}}]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:57:15 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x2, &(0x7f00000004c0)=@framed={{}, [@kfunc]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:57:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@gettaction={0x24, 0x10, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) 17:57:15 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x26480, 0x0) 17:57:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1e}, 0x48) 17:57:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000003800)={&(0x7f00000000c0), 0x200000cc, &(0x7f00000037c0)={&(0x7f0000000380)=@newtaction={0x1ec4, 0x30, 0x0, 0x0, 0x0, {}, [{0x594, 0x1, [@m_nat={0x1c8, 0x0, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast1, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @empty, @dev}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @dev, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x35, 0x6, "1c5620a02fdcf55e2fa788506d9cfe83eb449e4beceee03c1c86e91351e2898bed4e0bb9aed428b0d3ab0287cfa288d6ae"}, {0xc}, {0xc}}}, @m_mirred={0x178, 0x0, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}]}, {0xa9, 0x6, "0f1201b8c76ec75d974fede91b74253070a378ede7c149b344897890cec0b4e16a561d7c33161d34af9191f9707c37b81e057a2ea3e87bea6ea36e19a2d4685f6ed69b23dfe60d067fbf7ef7ac85fd28268ae8c18db89a2794bc01a041d21a7c1574d6e7a6e11a2141001fcf2850d1d179f0e3dc29fb929cd6671319401fdfc5a90880f406e48b36166079daa82f95cd409f27d58a651ba4e3701c1e5dc52b3f166e6d3366"}, {0xc}, {0xc}}}, @m_mirred={0x250, 0x0, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}]}, {0x101, 0x6, "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"}, {0xc}, {0xc}}}]}, {0x9ec, 0x1, [@m_xt={0x220, 0x0, 0x0, 0x0, {{0x7}, {0x1d8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x9d, 0x6, {0x0, 'raw\x00', 0x0, 0x0, "63f332443ce67fa8ca748f522b06527d766f3985d409d450122c0029276578111f81c1ae5431236a0d5e9ba5b6473b25db5812dbada88aca70c26af69569a7c32c562b643c3d4253571dbd37f4d11fa5f181e345623f599c01015c4fa24716345a8a6efeeb0f99328ac862e4ab0fed331f14a3"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xb5, 0x6, {0x0, 'raw\x00', 0x0, 0x0, "700ac439a77dbb0e9601d75d476d01fece2ecd07bd82ceb3e479f3406c5ef44304c2562d9b06950cd05278ed92fc73161ca49cace062498955368efc93bb05f35bcf2e400f64872725e0a030d4eff3a15bbabb4d2a395abadcef707b46b809eda798a9e4d741e9248b37c3e7bd85bd71a5ebcaea30ce871980a57451d0088bac2906d5aff74da6d1228c6b"}}]}, {0x21, 0x6, "90c5f6bde028604f35a967fd0abb1f88f5443454a0253721e613403e4c"}, {0xc}, {0xc}}}, @m_tunnel_key={0x10c, 0x0, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0xb1, 0x6, "d0c25e1ef88e2bce65036710263b26c03d48c7e7e6ff9ae3d732127cd49164c2f4b60e7fe6194c671b5e32a76571d01080ff553533dbdba826580e7c1d9fe8228fbf274f23f10cee601bbba9e1b6b7c93ebf1f155390df9d170e265b7f7b0425b03ad5963ef5d3eb46965b385c5762c670d7cec28f1b9c2e7e823f37b4ec1f886c68c89b0acef9056d7db56f8d15bb9748d369740865bc0bb2db8f54c2d92e477d85c9a4014c4fd5f9cb139f05"}, {0xc}, {0xc}}}, @m_skbedit={0xd4, 0x0, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4d, 0x6, "c49a90380da74f03f5b9bcabd33be1c48d7ae7c9d22af9fac74716c49c47c0de8aeb5077ff977f0f3d89383e8c62ed46da655bd944e1c2d7e6ad06269946ceffe023809651318d222e"}, {0xc}, {0xc}}}, @m_simple={0x9c, 0x0, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x18, 0x3, '/dev/dri/renderD128\x00'}]}, {0x55, 0x6, "7827f06254e146a531bf42ff51f3f6c3a88ce2dc9402629d9b23531028edfc59bdcf439287adc85b1b443e599146ef023b4b0c13bc21a31797b2cc3a5a8f813984219cbc4dd7070e887b38dce462c66ca7"}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x0, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc}, @TCA_GACT_PROB={0xc}]}, {0x8d, 0x6, "4186aada7227359598b55b2c4b10d6998cabfd36edb1370169af0850fe983da04395e9e2112a3a3dd7f925f589b611829eba381048f51e925937fd19f9192012a5faf252bfb7a12f44e3219b4f57fbd823e8d85e77a310c36893cd7b159ec126e29bf8c711ecf981c11305d8803b74487231e328e3d75b68afc2581a92a2a850f99adcebe0390da939"}, {0xc}, {0xc}}}, @m_connmark={0x19c, 0x0, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0xf9, 0x6, "4b71e4320b0f3c3557f67fbdf883057189a4917161fc41da6dd0450fe129bc57b167c99b365e5116ea02d99c7bf6c142bc34cd85ea409d98273b979539c80397428ca5ed00dfd65a09715aacc9cd79e0b330be660e8c3db916e7dfe4bb90d2294f279fe05b3ecccc0e6d20a6d85f5b98f861b71e0b4cff5dd8016d4ebb1f6e1039e7dbc5466a2727e6d683d3e0f620ac865eb17191de56f43cd30e3fdc67e262926380a8fd57951fab1fb8e6ee04a08d1410fb394248b69a6c425186e9f59adb936f207c24779e1be88ccfc7bbca2119c4cbc87d2542058d44d9b4f700414cf0cb5b69e28531758f773fe29f49da467d07f7e94ed0"}, {0xc}, {0xc}}}, @m_gact={0xd0, 0x0, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc}, @TCA_GACT_PROB={0xc}]}, {0x65, 0x6, "4991aa9f888fa353ff2fb7b8e87983d51b78c1a6259de64a7dc5c95f0d9ff051d5a206e1ddb8b6c807ad4d6d4ba5225654ed08280a6475ce6f6c2a980dee4388944bb8d5407f0a3cc6199f17c79bb352b5a9dff20f5aedcdacadbbb4529b2b6832"}, {0xc}, {0xc}}}, @m_bpf={0x16c, 0x0, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{}, {}, {}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{}]}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{}, {}]}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0xcd, 0x6, "7d52187ba38081795afe34fab3017512ba79a5b49ab25b4267ac27a1746b338a0839be3816f5ed9cca5fdb64e86c75170338d58a5b39a94c660970c32792af59a15751f7907fdaf602caa5dc0467c6c6988c6a1f0c73bfb69f0625b8ff2186f156de83197c186bfccc66b3934bbd154448ce2d9c005d9236a392709241c932d5484a2aa952dae513529d4270b07b0c391bf14f74681d1c4110c9fa92102ad58f48de8a12ac1dc30cb3e888e02637861c2f442b29be5d002f19250bd5eb2e10a38fe3d398b1a4c20d44"}, {0xc}, {0xc}}}, @m_bpf={0xa0, 0x0, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}]}, {0x6d, 0x6, "7df9c0fb33b882c9a85548eb40d0406c85834193bf21b3c86c1177da8dd2a741b5f4479790ee9dbc7cfdd22e63dd1e6b96a74776aa55804fbcf77620b3663818dac1c65be107384835efbd7d5f070c836c3e4f5bb6b32aa76a48d7c14a0b6e9d2434ffd0dee993c03d"}, {0xc}, {0xc}}}]}, {0xd8, 0x1, [@m_nat={0xd4, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @local}}]}, {0x81, 0x6, "1be6f10742a5af91c0efa48b1e5115f1090d07be3ca19c1ee6916448cc5b1d00f64c8fa2f1c6fcdb2963b9ae94fea563e703394102c620be3c4e219c6168168674f7a40139dae484e8c3e68bc750817c59c1eb1820a274de4f345131093199591ad2cb35042d0708a9adb36979c5b71d4023785adb1aba92181314e05f"}, {0xc}, {0xc}}}]}, {0x264, 0x1, [@m_csum={0xe0, 0x0, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}]}, {0x25, 0x6, "8bbaedaca1604cbe1e641153760b29b7241bcaa6262ed6112f88f96aa044e51857"}, {0xc}, {0xc}}}, @m_csum={0x180, 0x0, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}]}, {0x39, 0x6, "56bedccb08842324dd5be301168452ffe7a94645f18f41113481b43ba99839946b3a642c0dbb144fcba75ffa8a89f77394da940d5f"}, {0xc}, {0xc}}}]}, {0x3e4, 0x1, [@m_nat={0x160, 0x0, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @private, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @broadcast, @multicast1}}]}, {0xbd, 0x6, "7992863ab82681b08621b074fb1d2bc49780854495b4b609358c88956afb3a61cf9e1a2a0ea5ba832fb528205b8860b7a92ac9364aa58c8bfbd48bbdcc3e1c90cf39c37e29f0aebea85dbe7b915d6ba8861e1a9a0a6dd064a52fdeecc622b71b2338bb297c092eaad62313ccbda17fcfd5fb36ad8e0d1eb43d403c91437a46cc125d314fe069761edcc053d5d85e65b48c5eac5319bde2bc28edb0d18879ed29d146879e56b19623396c36bf5d0757df4bb15730e38050321d"}, {0xc}, {0xc}}}, @m_sample={0x124, 0x0, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0xb5, 0x6, "160f8bcad0f61bb362379ca81ac88a26a11f9c982c257be230a9532aeae8a0e47bce24d8f417ed6e53bfc47caab6537af698f4848e51cfb37ff6ced325d1cfbca47df27f9d5fc572c1f1cced1280607e97957bed248a6da767b3d062e85d272038416078b720306b49ca5fc853fb7f31fac0a1cb8c2256cb7127f143733fab201e9ff9a7a2dc4527713a218c66bef8982e102a9764f639a49fd0cd1dfdeda9d841a1bd1f680c2a959e125d6234f89b0d3f"}, {0xc}, {0xc}}}, @m_csum={0xdc, 0x0, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x91, 0x6, "8531d6db23f8949b0f6008ee41272764945a116159461d48b2472c572bc77eef826925281083dbe129a47503bdbaffdd79546ea5053eae08be07f7d4da7e2f8acffb99f3ef227e0a9934512f8e30e97de1b923fcc0862aaccce82b22f9103c0b6f7b42bb43af31dc5d4f0e570fec17e376343a5a76c9cf7663456a972ec87013483ae2cdacac175be01c82b9b4"}, {0xc}, {0xc}}}, @m_skbedit={0x80, 0x0, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_MARK={0x8}]}, {0x29, 0x6, "49e9ef75f06512ba4e5a81a1323cc0c3717cf4d5f504070e6ce8653ed42db4a86c308258e6"}, {0xc}, {0xc}}}]}, {0x6cc, 0x1, [@m_ct={0x70, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_MARK_MASK={0x8}]}, {0x2d, 0x6, "d34ffa57214517c4616602ee42e305df5fc02c4a762152de7385a2c8e8b9f7b3bf63fc9f2b22e81e40"}, {0xc}, {0xc}}}, @m_tunnel_key={0xb8, 0x0, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}]}, {0x75, 0x6, "7727400e6d91b1b67c80ce1da05b977e30c82d7dd83fd03594fc67e0e072a3b604ac5e7fe5b1df7e3d9dc2b2bac2202d19356551a002ddf3d2d0d747f2181715f8a77ec424505d752aa3c80227a95a5c4dc18fc31f7c34754a6e5d35a1135502d52f3bd8b0f39bdf0c196ab489b6a06497"}, {0xc}, {0xc}}}, @m_mpls={0x170, 0x0, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c}, @TCA_MPLS_PARMS={0x1c}, @TCA_MPLS_PARMS={0x1c}]}, {0xc9, 0x6, "f244d5520c627c78d2ed26924fd5a923092c2ca9b296b595b327d3b956b84fd86ce8686624ea3bd46ff0f06ed7a4086bfc9b217090b5021e72c3f69f06a26b81baed082496d674e1dcda130043f7a1d04ddfc7506afdc75216935a11734210d31646cfae24405024778875b55d2f41fb4ea5ee2128b2fd1f8dccf8ddd01b2d22803c4bab91da024c45e3ea067a40b3e76fde28ab0b46a519e1ab033e1cdcb7e9644f12521826a2d3445811e2b6e9d6ddf65cab0e47fd4278858c23a2192da62ded6a8c1abe"}, {0xc}, {0xc}}}, @m_tunnel_key={0x10c, 0x0, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0x7d, 0x6, "a0ad2e77b4d834e323b83b07bd21bccafcf766adbbd4f5f229f9ea7566f59d3c3c7a0dc5c97abfeeb65e35d2d4f2937b44f9939d86c68bdd778b8c6a19ab4141ce2e421db1a8446d5c75242172bf7450c93962560ae000e1b7f4b90f146f8b4738cdb1dcd52bdfae196659c857c9f9dcd190941f7155848ff4"}, {0xc}, {0xc}}}, @m_mpls={0x114, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}]}, {0xdd, 0x6, "3215edf0df826cfbe0c2ef12d4262dc15fef5c9a704a3256ee3cd597bdb44c332c451225fb1e10c502d50de5640d83bb6f3d822c2689ca639d6f7cbbd8ebb83801276ceba8ea24eb6696072e615902fa01f70fd65f73de80a9fb8742fea30d7e922147efd230a378f14e79446ead0d3fbc5bf99f2f35670d76b6f9b41c93f767b5cdb2d18331608f759ee374ffe1a5db5fc899e69fad4433e4f40024af958a5cf437dcb2359503f26986f0215c772ddf9d99a80111e1b997f9ca39ec23ce25bae96f87a508ad437f82b7f105aae38ab9fcca1fe1ed2846d459"}, {0xc}, {0xc}}}, @m_xt={0x210, 0x0, 0x0, 0x0, {{0x7}, {0x16c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0xc9, 0x6, {0x0, 'nat\x00', 0x0, 0x0, "fdbac27378821b239231415ee84ef3c37d5ea7c69d3ce7da2f224ab823fc770a23a9446171dce2c37dc9302f7f6217364d94b8db6efa4c2071bff3f09f9791b9145b9d1970056d223703d987b09f64635379beec75faf4c080521cf0095d6c38201b4814306d60fffbe639c359c29cb0079ec79829c4904d4d691828d71efa0e24fb7ff9307456bffb5e7db2573c4e562e4c1f7219dda194af677f22d742c4"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x65, 0x6, {0x0, 'nat\x00', 0x0, 0x0, "8edadfdc4f2944c3ae41547b7710b8b0b8f9f470d8be63b90d6a22b214a44babdf0e0fd08bafaaad3409052386556a59d04fcc327b925295d256a5"}}]}, {0x7d, 0x6, "50bd30e11fbc6baef86ed5bd7bbfdb64a68ae449e8e48298a6550adf8d64bf44115192f061d1cb04abc83f4003ee105efbffdc5a4f62bc653079a9f31f92363d630ff4a738096b9652c8ad30c5375445054888e32b95008c32fc05ae95950472e70ee9fc6ea1207d8ae4ef8c6dc53557f0591c70811b164a24"}, {0xc}, {0xc}}}]}, {0x144, 0x1, [@m_connmark={0x140, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0xb9, 0x6, "70a22cc69a561f7c9557181b0983cfbcc5a2431ed75100c8bb006647b992bd745beefd895982d08ed58639557c509fd49c1388e4cf590134ba8e4c63df93145416cc31e2bd708a6add0eb9f32094c320beb2ab41d231f8b9bdfea7ae437e8a3dfc006b90feff7523597e7660788e2918ade79388c47f73b90acd0b0efbbcce80782e4c45131ae6963fded65780816fa19fee3acf6d626bea3274d47735df35d62037d3f72843bd41c28f35ad4fcfb25b6ce5b14911"}, {0xc}, {0xc}}}]}]}, 0x1ec4}}, 0x0) [ 838.467047][T14066] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:57:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xa, 0x0, &(0x7f00000000c0)) 17:57:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newchain={0x23, 0x64, 0xf7a1ddf53a479dff}, 0x24}}, 0x0) 17:57:15 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 17:57:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080), 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:57:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@gettaction={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x2c}}, 0x0) 17:57:15 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5451, 0x0) [ 838.962758][ T3548] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 839.224285][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 839.366993][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.378377][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.388524][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 839.397855][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.471930][ T3548] usb 3-1: config 0 descriptor?? [ 839.934490][T14072] UDC core: couldn't find an available UDC or it's busy: -16 [ 839.942394][T14072] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 839.959858][T14072] UDC core: couldn't find an available UDC or it's busy: -16 [ 839.969077][T14072] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 840.082325][ T3548] usbhid 3-1:0.0: can't add hid device: -71 [ 840.088643][ T3548] usbhid: probe of 3-1:0.0 failed with error -71 [ 840.117383][ T3548] usb 3-1: USB disconnect, device number 29 17:57:17 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1f, &(0x7f00000001c0)=@string={0x1f, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f7"}}]}) syz_usb_control_io(r0, 0x0, 0x0) 17:57:17 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040), 0x10) 17:57:17 executing program 3: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="6400000016001fffff75a6203f00001706"], 0x64}], 0x1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) 17:57:17 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x4008700c, 0x0) 17:57:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000040"]) 17:57:17 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x26, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f0000000480)=""/215, 0x26, 0xd7, 0x1}, 0x20) 17:57:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newchain={0x24, 0x64, 0xf7a1ddf53a479dff}, 0x24}}, 0x0) 17:57:17 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)={0x14, 0x16, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) 17:57:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001200010000000000080003000800000014"], 0x44}}, 0x0) 17:57:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000040"]) [ 841.002140][ T121] usb 3-1: new high-speed USB device number 30 using dummy_hcd 17:57:18 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) 17:57:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000580)={0x0, 0xa, &(0x7f0000000240)={&(0x7f00000005c0)={0x4c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x1c}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) [ 841.065859][T14110] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.5'. [ 841.242109][ T121] usb 3-1: Using ep0 maxpacket: 16 [ 841.372786][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.383985][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.394155][ T121] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 841.406876][ T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.512880][ T121] usb 3-1: config 0 descriptor?? [ 841.964031][T14102] UDC core: couldn't find an available UDC or it's busy: -16 [ 841.971511][T14102] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 841.981057][T14102] UDC core: couldn't find an available UDC or it's busy: -16 [ 841.988719][T14102] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 842.072235][ T121] usbhid 3-1:0.0: can't add hid device: -71 [ 842.079011][ T121] usbhid: probe of 3-1:0.0 failed with error -71 [ 842.090130][ T121] usb 3-1: USB disconnect, device number 30 17:57:19 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1f, &(0x7f00000001c0)=@string={0x1f, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f7"}}]}) syz_usb_control_io(r0, 0x0, 0x0) 17:57:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000120001"], 0x44}}, 0x0) 17:57:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000100)={'custom0\x00'}) 17:57:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000040"]) 17:57:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x24, 0x0, &(0x7f00000000c0)) 17:57:19 executing program 3: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, 0x0) [ 842.622087][T14130] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.5'. 17:57:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xd90}]}) 17:57:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettaction={0x44, 0x12, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x44}}, 0x0) 17:57:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10, 0xc0002) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 17:57:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000040"]) 17:57:19 executing program 4: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00') ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0x3, 0x3, 0x2, 0x2, 0x80000001}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00') unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00') ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000100)={0x3, 0x0, 0x3a, 0x3, 0x5}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x400, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x430100) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x480280, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/custom0\x00', 0x400, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0xa0, 0x0, &(0x7f0000000440)=[@request_death, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x8, 0x0, 0x1c}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}, @flat=@weak_handle={0x77682a85, 0x900}}, &(0x7f0000000300)={0x0, 0x20, 0x38}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/54, 0x36, 0x2, 0x3a}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000400)={0x0, 0x18, 0x40}}, 0x40}], 0x2, 0x0, &(0x7f0000000500)="aa06"}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000580)={0x0, 0x3, 0x4, 0x0, 0x100}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0), 0xc2140, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000600)={{0x3, 0x2, 0x8, 0x1, 0x10000}, 0x4, 0xcf}) [ 843.060105][T14142] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 17:57:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IE={0x9, 0x2a, [@measure_req={0x26, 0x3}]}]}, 0xf}}, 0x0) [ 843.143925][ T3548] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 843.392422][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 843.512601][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.524203][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.534755][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 843.544095][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.588345][ T3548] usb 3-1: config 0 descriptor?? [ 844.065005][T14134] UDC core: couldn't find an available UDC or it's busy: -16 [ 844.072724][T14134] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 844.081453][T14134] UDC core: couldn't find an available UDC or it's busy: -16 [ 844.089160][T14134] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 844.164886][ T3548] usbhid 3-1:0.0: can't add hid device: -71 [ 844.171218][ T3548] usbhid: probe of 3-1:0.0 failed with error -71 [ 844.189257][ T3548] usb 3-1: USB disconnect, device number 31 17:57:21 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1f, &(0x7f00000001c0)=@string={0x1f, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f7"}}]}) syz_usb_control_io(r0, 0x0, 0x0) 17:57:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 17:57:21 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 17:57:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@gettaction={0x40, 0x11, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff44c}}]}]}, 0x40}}, 0x0) 17:57:21 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x2}]}}, &(0x7f0000000480)=""/215, 0x26, 0xd7, 0x1}, 0x20) 17:57:21 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x4c, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000480)=""/215, 0x1a, 0xd7, 0x1}, 0x20) [ 844.707118][T14162] netlink: 'syz-executor.3': attribute type 28 has an invalid length. 17:57:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xb}, @val={0xc}}}}, 0x28}}, 0x0) 17:57:21 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5421, 0x0) 17:57:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, 0x0, &(0x7f00000000c0)) 17:57:21 executing program 1: syz_mount_image$nfs(0x0, &(0x7f0000004a00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$binder(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{}]}) 17:57:22 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="6400000016001fffff75a6203f00001706"], 0x64}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 17:57:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newpolicy={0xb8, 0x13, 0x788c2ae3ae2ec281, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) [ 845.192222][ T3548] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 845.245085][T14174] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 845.432529][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 845.439412][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 845.562793][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.573960][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.584052][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 845.593354][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.624283][ T3548] usb 3-1: config 0 descriptor?? [ 846.084660][T14164] UDC core: couldn't find an available UDC or it's busy: -16 [ 846.092389][T14164] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 846.101231][T14164] UDC core: couldn't find an available UDC or it's busy: -16 [ 846.110583][T14164] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 846.202137][ T3548] usbhid 3-1:0.0: can't add hid device: -71 [ 846.208342][ T3548] usbhid: probe of 3-1:0.0 failed with error -71 [ 846.234021][ T3548] usb 3-1: USB disconnect, device number 32 17:57:23 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1f, &(0x7f00000001c0)=@string={0x1f, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f7"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 17:57:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x5}, @val={0xc}}}}, 0x28}}, 0x0) 17:57:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newchain={0x24, 0x25, 0xf7a1ddf53a479dff}, 0x24}}, 0x0) 17:57:23 executing program 1: bpf$BPF_BTF_LOAD(0xe, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 17:57:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x400000b0}]}) 17:57:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) 17:57:23 executing program 4: clock_gettime(0x8a06afcf8dec2331, 0x0) 17:57:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000084}]}) 17:57:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0x3}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x44}}, 0x0) 17:57:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x1d9}]}) 17:57:24 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x0, 0x0, 0x5}, 0x48) 17:57:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 847.172040][ T3548] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 847.275089][T14196] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 847.421920][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 847.553063][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.564557][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.574666][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 847.583991][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.623049][ T3548] usb 3-1: config 0 descriptor?? [ 848.073337][T14191] UDC core: couldn't find an available UDC or it's busy: -16 [ 848.080814][T14191] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 848.090080][T14191] UDC core: couldn't find an available UDC or it's busy: -16 [ 848.097901][T14191] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 848.172245][ T3548] usbhid 3-1:0.0: can't add hid device: -71 [ 848.178504][ T3548] usbhid: probe of 3-1:0.0 failed with error -71 [ 848.212620][ T3548] usb 3-1: USB disconnect, device number 33 17:57:25 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1f, &(0x7f00000001c0)=@string={0x1f, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f7"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 17:57:25 executing program 5: syz_open_dev$usbfs(&(0x7f0000000180), 0x10, 0x0) 17:57:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000008900)=ANY=[@ANYBLOB="400000001000010800000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="21887496000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b00000000000a0002"], 0x40}}, 0x0) 17:57:25 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000480)=""/215, 0x1a, 0xd7, 0x1}, 0x20) 17:57:25 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r2 = dup(r1) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)={0x108, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x41, 0x5b, "f0fa1b6136a1f594edc76d356e6aee31fd9e57e9707db59f6d5ff79f780c120bdfcc40bf9fc592d5f6188e3ba3db7847a4159315570138ba9e995e3862"}, @NL80211_ATTR_FRAME_MATCH={0x11, 0x5b, "31edd12fe404d26597e3ed7ce0"}, @NL80211_ATTR_FRAME_MATCH={0x69, 0x5b, "81828710d5d6beed552227df559e339ed945a580856d6e086ad37913a4b2e655a98a0ba16791a600d82161ccd0c37dca1a5670e77613a1258e4fa665b348e9be2cecad6319f444e97f831b3a3738c8e85f6ada39ec1d4f66b6227ec454b886ba186fd4b14b"}, @NL80211_ATTR_FRAME_MATCH={0xc, 0x5b, "0974b79c7e5b177d"}]}, 0x108}}, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30}, 0x30) write$FUSE_LK(r2, &(0x7f0000001100)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="38010000000000"], 0x138) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0]) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) 17:57:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x1d9, 0x0, 0x80ffff}]}) 17:57:25 executing program 4: syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000000280)="d73e611429e170d47e82d44614a73bee54e01df4cd7ee0310dbb6265877b2c336f306553dfabad53fc7fac0b07600a6181d88e738cad11f41fe45d25cd3de15d331c90d80306e27f8e4c6b", 0x4b, 0x5a72}, {&(0x7f0000000340)="715d2159f8aa24212741f4739ca4f00bf814591d39fb5a4046d68c93784c877422c02f11d32ffbc99ef0251acb", 0x2d, 0xfffffffffffffffb}], 0x40000, &(0x7f0000000480)={[{@nojoliet}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}], [{@subj_type={'subj_type', 0x3d, ':]{%:^'}}, {@appraise_type}]}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000540)) socket(0x0, 0x0, 0x5) setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000880), 0x0, 0x0, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0), 0x204090, 0xffffffffffffffff) socketpair(0x0, 0x3, 0x3, &(0x7f0000000d00)) socket$nl_generic(0x10, 0x3, 0x10) 17:57:26 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r2 = dup(r1) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)={0x108, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x41, 0x5b, "f0fa1b6136a1f594edc76d356e6aee31fd9e57e9707db59f6d5ff79f780c120bdfcc40bf9fc592d5f6188e3ba3db7847a4159315570138ba9e995e3862"}, @NL80211_ATTR_FRAME_MATCH={0x11, 0x5b, "31edd12fe404d26597e3ed7ce0"}, @NL80211_ATTR_FRAME_MATCH={0x69, 0x5b, "81828710d5d6beed552227df559e339ed945a580856d6e086ad37913a4b2e655a98a0ba16791a600d82161ccd0c37dca1a5670e77613a1258e4fa665b348e9be2cecad6319f444e97f831b3a3738c8e85f6ada39ec1d4f66b6227ec454b886ba186fd4b14b"}, @NL80211_ATTR_FRAME_MATCH={0xc, 0x5b, "0974b79c7e5b177d"}]}, 0x108}}, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30}, 0x30) write$FUSE_LK(r2, &(0x7f0000001100)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="38010000000000"], 0x138) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0]) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) 17:57:26 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r2 = dup(r1) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)={0x108, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x41, 0x5b, "f0fa1b6136a1f594edc76d356e6aee31fd9e57e9707db59f6d5ff79f780c120bdfcc40bf9fc592d5f6188e3ba3db7847a4159315570138ba9e995e3862"}, @NL80211_ATTR_FRAME_MATCH={0x11, 0x5b, "31edd12fe404d26597e3ed7ce0"}, @NL80211_ATTR_FRAME_MATCH={0x69, 0x5b, "81828710d5d6beed552227df559e339ed945a580856d6e086ad37913a4b2e655a98a0ba16791a600d82161ccd0c37dca1a5670e77613a1258e4fa665b348e9be2cecad6319f444e97f831b3a3738c8e85f6ada39ec1d4f66b6227ec454b886ba186fd4b14b"}, @NL80211_ATTR_FRAME_MATCH={0xc, 0x5b, "0974b79c7e5b177d"}]}, 0x108}}, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30}, 0x30) write$FUSE_LK(r2, &(0x7f0000001100)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="38010000000000"], 0x138) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0]) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) 17:57:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@gettaction={0x14, 0x32, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) [ 849.058388][T14222] loop4: detected capacity change from 0 to 264192 17:57:26 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x401) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"d28a1ed789ffc05ef63b8cc4"}}], 0x1c) [ 849.249512][ T3542] usb 3-1: new high-speed USB device number 34 using dummy_hcd 17:57:26 executing program 1: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x4020940d, &(0x7f0000000100)={'custom0\x00'}) [ 849.492228][ T3542] usb 3-1: Using ep0 maxpacket: 16 [ 849.622756][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.634055][ T3542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.644190][ T3542] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 849.653463][ T3542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.756543][ T3542] usb 3-1: config 0 descriptor?? [ 850.224581][T14220] UDC core: couldn't find an available UDC or it's busy: -16 [ 850.232494][T14220] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 850.243355][T14220] UDC core: couldn't find an available UDC or it's busy: -16 [ 850.250852][T14220] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 850.332275][ T3542] usbhid 3-1:0.0: can't add hid device: -71 [ 850.338549][ T3542] usbhid: probe of 3-1:0.0 failed with error -71 [ 850.360224][ T3542] usb 3-1: USB disconnect, device number 34 17:57:27 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1f, &(0x7f00000001c0)=@string={0x1f, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f7"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 17:57:27 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000480)=""/215, 0x2e, 0xd7, 0x1}, 0x20) 17:57:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r2 = dup(r1) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)={0x108, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x41, 0x5b, "f0fa1b6136a1f594edc76d356e6aee31fd9e57e9707db59f6d5ff79f780c120bdfcc40bf9fc592d5f6188e3ba3db7847a4159315570138ba9e995e3862"}, @NL80211_ATTR_FRAME_MATCH={0x11, 0x5b, "31edd12fe404d26597e3ed7ce0"}, @NL80211_ATTR_FRAME_MATCH={0x69, 0x5b, "81828710d5d6beed552227df559e339ed945a580856d6e086ad37913a4b2e655a98a0ba16791a600d82161ccd0c37dca1a5670e77613a1258e4fa665b348e9be2cecad6319f444e97f831b3a3738c8e85f6ada39ec1d4f66b6227ec454b886ba186fd4b14b"}, @NL80211_ATTR_FRAME_MATCH={0xc, 0x5b, "0974b79c7e5b177d"}]}, 0x108}}, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30}, 0x30) write$FUSE_LK(r2, &(0x7f0000001100)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="38010000000000"], 0x138) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0]) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) 17:57:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r2 = dup(r1) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)={0x108, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x41, 0x5b, "f0fa1b6136a1f594edc76d356e6aee31fd9e57e9707db59f6d5ff79f780c120bdfcc40bf9fc592d5f6188e3ba3db7847a4159315570138ba9e995e3862"}, @NL80211_ATTR_FRAME_MATCH={0x11, 0x5b, "31edd12fe404d26597e3ed7ce0"}, @NL80211_ATTR_FRAME_MATCH={0x69, 0x5b, "81828710d5d6beed552227df559e339ed945a580856d6e086ad37913a4b2e655a98a0ba16791a600d82161ccd0c37dca1a5670e77613a1258e4fa665b348e9be2cecad6319f444e97f831b3a3738c8e85f6ada39ec1d4f66b6227ec454b886ba186fd4b14b"}, @NL80211_ATTR_FRAME_MATCH={0xc, 0x5b, "0974b79c7e5b177d"}]}, 0x108}}, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30}, 0x30) write$FUSE_LK(r2, &(0x7f0000001100)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="38010000000000"], 0x138) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0]) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) 17:57:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IE={0x9, 0x2a, [@measure_req={0x26, 0x4}]}]}, 0x34}}, 0x0) 17:57:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@gettaction={0x14, 0x32, 0x1}, 0x14}}, 0x0) 17:57:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x512}, @val={0xc}}}}, 0x28}}, 0x0) 17:57:28 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000280)={0x81, 0x0, 'client1\x00', 0x0, "723870d8964c15ec", "626f21a397579728d86ce5f31907ae7149ebe565b3d317f948ffd5052acadf3e"}) 17:57:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@gettaction={0x14, 0x10, 0x1}, 0x14}}, 0x0) 17:57:28 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r2 = dup(r1) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)={0x108, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x41, 0x5b, "f0fa1b6136a1f594edc76d356e6aee31fd9e57e9707db59f6d5ff79f780c120bdfcc40bf9fc592d5f6188e3ba3db7847a4159315570138ba9e995e3862"}, @NL80211_ATTR_FRAME_MATCH={0x11, 0x5b, "31edd12fe404d26597e3ed7ce0"}, @NL80211_ATTR_FRAME_MATCH={0x69, 0x5b, "81828710d5d6beed552227df559e339ed945a580856d6e086ad37913a4b2e655a98a0ba16791a600d82161ccd0c37dca1a5670e77613a1258e4fa665b348e9be2cecad6319f444e97f831b3a3738c8e85f6ada39ec1d4f66b6227ec454b886ba186fd4b14b"}, @NL80211_ATTR_FRAME_MATCH={0xc, 0x5b, "0974b79c7e5b177d"}]}, 0x108}}, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30}, 0x30) write$FUSE_LK(r2, &(0x7f0000001100)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="38010000000000"], 0x138) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0]) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) 17:57:28 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r2 = dup(r1) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)={0x108, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x41, 0x5b, "f0fa1b6136a1f594edc76d356e6aee31fd9e57e9707db59f6d5ff79f780c120bdfcc40bf9fc592d5f6188e3ba3db7847a4159315570138ba9e995e3862"}, @NL80211_ATTR_FRAME_MATCH={0x11, 0x5b, "31edd12fe404d26597e3ed7ce0"}, @NL80211_ATTR_FRAME_MATCH={0x69, 0x5b, "81828710d5d6beed552227df559e339ed945a580856d6e086ad37913a4b2e655a98a0ba16791a600d82161ccd0c37dca1a5670e77613a1258e4fa665b348e9be2cecad6319f444e97f831b3a3738c8e85f6ada39ec1d4f66b6227ec454b886ba186fd4b14b"}, @NL80211_ATTR_FRAME_MATCH={0xc, 0x5b, "0974b79c7e5b177d"}]}, 0x108}}, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30}, 0x30) write$FUSE_LK(r2, &(0x7f0000001100)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="38010000000000"], 0x138) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0]) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) 17:57:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 851.372110][ T3548] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 851.632247][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 851.773071][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.784764][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.794831][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 851.804123][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.837161][ T3548] usb 3-1: config 0 descriptor?? [ 852.303819][T14252] UDC core: couldn't find an available UDC or it's busy: -16 [ 852.311531][T14252] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 852.323491][T14252] UDC core: couldn't find an available UDC or it's busy: -16 [ 852.331096][T14252] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 852.412185][ T3548] usbhid 3-1:0.0: can't add hid device: -71 [ 852.418535][ T3548] usbhid: probe of 3-1:0.0 failed with error -71 [ 852.429618][ T3548] usb 3-1: USB disconnect, device number 35 17:57:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0xcb286ec77e4c811f, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:57:29 executing program 1: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x4, @tid=0xffffffffffffffff}, 0x0) 17:57:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f00000000c0)) 17:57:29 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30}, 0x30) write$FUSE_LK(r2, &(0x7f0000001100)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 17:57:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newchain={0x24, 0x1d, 0xf7a1ddf53a479dff}, 0x24}}, 0x0) 17:57:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001200010a"], 0x44}}, 0x0) 17:57:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newchain={0x24, 0x66, 0xf7a1ddf53a479dff}, 0x24}}, 0x0) 17:57:30 executing program 3: bpf$BPF_BTF_LOAD(0x14, &(0x7f00000000c0)={0x0, &(0x7f0000000480)=""/215, 0x0, 0xd7}, 0x20) 17:57:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x2c}}, 0x0) 17:57:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r3, r2, 0x0) 17:57:30 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000005000000000000000100000d"], &(0x7f0000000480)=""/207, 0x31, 0xcf, 0x1}, 0x20) 17:57:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x5000}, 0x0) [ 853.517781][T14285] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 853.527624][T14285] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 17:57:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x3) bind(r0, &(0x7f0000000280)=@nl, 0x80) 17:57:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x3a}]}) 17:57:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@gettaction={0x14, 0x2e, 0x1}, 0x14}}, 0x0) 17:57:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@gettaction={0x10, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 17:57:31 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 17:57:31 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x275a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="6400000016001fffff75a6203f000017064a06511ad4c27ac2e9025c210c46e095f6b3b8fd4e8f093a672935b7105b34dad1"], 0x64}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r3}}}}}}]}, 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)={0x14, 0x16, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 17:57:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IE={0x9, 0x2a, [@measure_req={0x26, 0x3}]}]}, 0x33fe0}}, 0x0) 17:57:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010800000000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="21887496000000000c002b8008000100", @ANYRESDEC], 0x40}}, 0x0) 17:57:31 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x1}]}}, &(0x7f0000000480)=""/215, 0x26, 0xd7, 0x1}, 0x20) 17:57:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 17:57:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000022}]}) [ 854.416114][T14314] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 854.446618][T14315] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 17:57:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f00000000c0)) 17:57:31 executing program 1: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc020660b, 0x0) 17:57:31 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x401) write$sndseq(r0, 0x0, 0x0) 17:57:31 executing program 0: syslog(0x3, &(0x7f0000000480)=""/228, 0xe4) 17:57:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b800000013008100000000000000000000000000000000000000ffffac1414bbff010000000000000000000000000001000000000000000002"], 0xb8}}, 0x0) 17:57:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008700", @ANYBLOB], 0x34}}, 0x0) 17:57:32 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, &(0x7f0000000480)=""/210, 0x26, 0xd2, 0x1}, 0x20) 17:57:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48, 0x0, 0x7}]}) 17:57:32 executing program 1: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x2, &(0x7f0000000100)={'custom0\x00'}) 17:57:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@gettaction={0x14, 0x1e, 0x1}, 0x14}}, 0x0) [ 855.594759][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 17:57:32 executing program 5: socketpair(0xa, 0x2, 0x0, &(0x7f0000000340)) 17:57:32 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x3, 0x3, &(0x7f0000001740)=@framed, &(0x7f0000001780)='syzkaller\x00', 0x2, 0xd9, &(0x7f0000000040)=""/217, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:57:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5c00}, 0x0) 17:57:32 executing program 3: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 17:57:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@gettaction={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x28}}, 0x0) 17:57:33 executing program 0: socketpair(0xf, 0x3, 0x0, &(0x7f0000000380)) 17:57:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000300)={0x0, 0x0, "b77da6"}) 17:57:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000100)=""/209, &(0x7f0000000080)=0xd1) 17:57:33 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0xfffff, 0xc, 0xc, 0x2, [@const]}}, &(0x7f0000000480)=""/215, 0x26, 0xd7, 0x1}, 0x20) 17:57:33 executing program 3: timer_create(0x2, 0x0, &(0x7f0000000580)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, r0+60000000}}, 0x0) timer_gettime(0x0, &(0x7f0000000540)) 17:57:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) 17:57:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) ftruncate(r0, 0x3) 17:57:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CHANNEL(r0, 0xffffffffffffffff, 0x0) 17:57:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000300)={0x0, 0x0, "b77da6"}) 17:57:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newchain={0x24, 0x10, 0xf7a1ddf53a479dff}, 0x24}}, 0x0) 17:57:33 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x4020940d, 0x0) 17:57:33 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01719239dedf466b46004300000008000300", @ANYRES32=r3], 0x2c}}, 0x0) [ 856.943768][T14377] loop2: detected capacity change from 0 to 4096 [ 856.993781][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:57:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@gettaction={0x14, 0x26, 0x1}, 0x14}}, 0x0) 17:57:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000300)={0x0, 0x0, "b77da6"}) 17:57:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x400000b0}]}) 17:57:34 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="6400000016001fffff75a6203f000017064a06511ad4c27ac2"], 0x64}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r3}}}}}}]}, 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)={0x14, 0x16, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 857.176294][T14388] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 857.204595][T14377] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. 17:57:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newchain={0x24, 0x2d, 0xf7a1ddf53a479dff}, 0x24}}, 0x0) 17:57:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000300)={0x0, 0x0, "b77da6"}) 17:57:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000140)=0x5, 0x4) 17:57:34 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000005000000000000000100000d0000000005"], &(0x7f0000000480)=""/207, 0x31, 0xcf, 0x1}, 0x20) [ 857.506145][T14393] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 17:57:34 executing program 2: socketpair(0x26, 0x0, 0x0, &(0x7f0000000200)) 17:57:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="6400000016001fffff75a6203f00001706"], 0x64}], 0x1}, 0x0) 17:57:34 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x1, 0x9a, &(0x7f0000000280)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:57:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettaction={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x44}}, 0x0) 17:57:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x25, 0x0, &(0x7f00000000c0)) 17:57:35 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000580)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, r0+60000000}, {0x0, r1+60000000}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x77359400}}, &(0x7f00000002c0)) 17:57:35 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000001280), 0x1aa1, 0x0) mmap(&(0x7f0000167000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) 17:57:35 executing program 2: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x4b47, 0x0) [ 858.215212][T14417] netlink: 'syz-executor.3': attribute type 19 has an invalid length. 17:57:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@gettaction={0x14, 0x2d, 0x1}, 0x14}}, 0x0) 17:57:35 executing program 4: linkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) 17:57:35 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x26, &(0x7f0000000300)={r3}, &(0x7f0000000700)=0x8) 17:57:35 executing program 5: futimesat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 17:57:35 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@init={0x14}], 0x14}, 0x84) 17:57:35 executing program 1: msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 17:57:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IE={0x9, 0x2a, [@measure_req={0x26, 0x3}]}]}, 0x34}}, 0x0) 17:57:35 executing program 3: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000000)=@file={0xa}, 0xa, &(0x7f0000000440)=[{&(0x7f0000000040)="5f7d5b7e3593b2699307a234e73072710f15a8e572d92cabd599ef221390a4f39bfe0ebd38ae2acb76645e819b559e50b3a11c6526862079e012e9ac9608b298cda1689baaba73951c583224520b8331052618c7345f97e91dc59f73346174660105ff6866e6938ab2c8f5bb39426048df014709551601108645e7b82164bfee61bc7a5f3c64b1837007e252bb5f0855f6", 0x91}, {&(0x7f0000000100)="4f783d1a84cfc2f0178f4939968cba59636ffd67", 0x14}, {&(0x7f0000000140)}, {&(0x7f0000000180)="64121165e4d3aa8aa4a3a742907872457ed8b3ee34b8660de0783ba0992ba2a9715449c307b21a9fa9b15758e38f87a2999dcf89248509d4cfbd1abbf388971d835101cff18b1598395fcfe04187e572acb784c78d1f3551de8887dcad77ae9a81030082f7f15b53d7a2909b59dd0e99648d61ee7f28f2ac1c6d36d851bd40a3975f905569d66741416fc62a6271104b8d637b59054dccda83a8554269449e4317", 0xa1}, {&(0x7f0000000240)="81a22711ff2392173a68d1e37a3b65142b8fca7d11a77811950bf0202519a0ae935e39a3ca68de196f911eba30b7ce2dbd4c14914c108dc79057b728110cfddd774e3b915e2567da5ebfde299a7e271b9767cd6f2f9329b199f4f96faf4d88814eaf7ac0f8e712c6abc51bea02bd4cbd9b45b650681a2d9add11318d0b098d70f234cf4d2a8ba82a9542a57d5615c90f943517537843e15625f7c0a43282c4ab50750b490bfc67fc8614717fca1b3186f829f3f1566ee99787380a285a28696dca39e52b6349970c0a40355bf58e19a2cd", 0xd1}, {&(0x7f0000000340)="038cc7c2dea4458000e6b9bd53efbf3c5376093d54de2ccf002143788449e87b04e5b61421d5a4a94360478bbb81eea6422800f890a55ca8d5779aef4fb736da7a922b354c2299445589500ef99e69f628e6406833a99c9413c018ae6ccc0c636f40cc3d9b0be7bd0be459eb93e3d2340a2d237673265f6ac0dfad66792209af277b7e99feb1cb625a9fa53fe3ccc665584c59c925cd556dd6b05387eab5960d4aabaf0881e5077c33e2bf93c7f05bb860ee601552fe75f17c6dc508cf2e9880d19a928b7d51a1aed34c9c3124e3ae546dfc12a3463d8609dec90f7e05b4e508b0b09a682222b5d591", 0xe9}], 0x6, &(0x7f0000000840)=[@rights, @cred, @rights, @rights], 0xb4}, 0x0) 17:57:35 executing program 0: r0 = socket(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@dstaddrv4={0x10, 0x84, 0x9}], 0x10}, 0x0) 17:57:35 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x2}, 0x1c) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 17:57:36 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000740)=ANY=[], 0xa) 17:57:36 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 17:57:36 executing program 4: r0 = socket(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000100), &(0x7f0000000140)=0xc) 17:57:36 executing program 3: fchown(0xffffffffffffff9c, 0xffffffffffffffff, 0xffffffffffffffff) 17:57:36 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9}, 0xb) 17:57:36 executing program 5: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000180)={@local={0xfe, 0x80, '\x00', 0x0}}, 0x14) 17:57:36 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000140), &(0x7f0000000200)=0x8) 17:57:36 executing program 4: shmctl$IPC_SET(0xffffffffffffffff, 0x3, &(0x7f00000002c0)={{0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 17:57:36 executing program 1: getresuid(0x0, &(0x7f0000000080), 0x0) 17:57:36 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r2, &(0x7f0000000340)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f0000000000)={r3}, 0x14) 17:57:36 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f0000000240)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@sndrcv={0x2c}], 0x2c}, 0x0) 17:57:36 executing program 5: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{0x0, 0x80000000}}, 0x0) 17:57:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) 17:57:37 executing program 4: r0 = socket(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000180), &(0x7f00000001c0)=0x8) 17:57:37 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000d80)="16", 0x1, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) 17:57:37 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x400, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) mount(&(0x7f0000001380), 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 17:57:37 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f00000002c0)={0x10, 0x2}, 0x10) 17:57:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000080)="145811af3c606f0df65db07253a392cb2fe059d4265b96f736cf8b5214cbcd8816ae32a3f3fa6a07267e605794a9007da4883e772653fa6558aef92552bb8c5e48d4ad3e76f24f05765b9bde1659626a1af473f3", 0x54) 17:57:37 executing program 2: mkdir(&(0x7f0000000540)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') 17:57:37 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0xb) 17:57:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000000000)=""/249, 0xf9, 0x0, 0x0, 0x0) 17:57:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000080)="145811af3c606f0df65db07253a392cb2fe059d4265b96f736cf8b5214cbcd8816ae32a3f3fa6a07267e605794a9007da4883e772653fa6558aef92552bb8c5e48d4ad3e76f24f05765b9bde1659626a1af473f3c2b482d1e3049890f1d5398a6c866c16e8a0760c8dcb3bdb1b9fd2f8c8325e249b3be86f644836554420bed374f850669d243b2e067cad13c78168e4c70d02f9c80e560cd656981337953bd766e8d0f3495fd5845ffebd5e4214d6afea6f0488ba4d67ba6cda6f1554d5683fa331e6040b2d7c6ab76d74077bb6d27e969aa2fa2d88f5ae44afad116ca37ded", 0xe0) 17:57:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000080)="14", 0x1) 17:57:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000040), 0x8) 17:57:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x82, 0x0, 0x0) 17:57:38 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x102, &(0x7f00000001c0), &(0x7f0000000240)=0x8) 17:57:38 executing program 3: mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 17:57:38 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x69, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20108, 0x0, 0x0) 17:57:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000ffff000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="28000000ffff000001000000", @ANYRES32, @ANYRES32=0xffffffffffffff9c, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="60000000ffff000003000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="10000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='`'], 0x104}, 0x1) 17:57:38 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000000), &(0x7f00000000c0)=0xb0) 17:57:38 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x2}, 0x1c) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/81, 0xffffffffffffff72}, 0x0) 17:57:38 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000001240)={0x1c, 0x1c}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x2}, 0x1c) 17:57:39 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="19", 0x1, 0x0, &(0x7f00000000c0)={0x1c, 0x1c, 0x3}, 0x1c) 17:57:39 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x10, 0x2}, 0x10) dup2(r1, r0) sendto$inet(r0, &(0x7f0000000140)="a4", 0x1, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 17:57:39 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000240)={0x0, 0x200}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:57:39 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x901, &(0x7f0000000180)=ANY=[], 0x12) 17:57:39 executing program 3: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x0) 17:57:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)=[{0x0}, {&(0x7f0000000240)="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", 0x801}], 0x2}, 0x0) 17:57:39 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:57:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8946, &(0x7f0000000540)={'tunl0\x00', 0x0}) 17:57:39 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) 17:57:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000640)=[{r0}], 0x1, 0x0) 17:57:40 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002ec0)='cgroup\x00') fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x582920278d0e04bd}) 17:57:40 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002ec0)='cgroup\x00') ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000002400)={0x0, 0x0, 0x80000000, 0x4}) 17:57:40 executing program 2: syz_mount_image$udf(&(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a80)=[{0x0, 0x0, 0x1ff}], 0x0, &(0x7f0000004c40)) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) 17:57:40 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d00, 0x0) 17:57:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000740)='net/psched\x00') readv(r0, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/80, 0x50}], 0x1) 17:57:40 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x2}]}, {0x0, [0x0]}}, &(0x7f00000005c0)=""/223, 0x27, 0xdf, 0x1}, 0x20) 17:57:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000004c0)=[{r0}], 0x1, 0x0) [ 863.360621][T14560] loop2: detected capacity change from 0 to 1 17:57:40 executing program 3: r0 = syz_io_uring_setup(0x79d4, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x30013, r0, 0x8000000) syz_io_uring_setup(0x3b13, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 863.423331][T14560] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 863.480468][T14560] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 863.492423][T14560] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 863.502292][T14560] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 863.513072][T14560] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 17:57:40 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002ec0)='cgroup\x00') r1 = socket$pppoe(0x18, 0x1, 0x0) poll(&(0x7f0000000140)=[{r0, 0x4}, {r1}], 0x2, 0x0) [ 863.523860][T14560] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 863.531623][T14560] UDF-fs: Scanning with blocksize 512 failed [ 863.565188][T14560] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 863.575303][T14560] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 863.585227][T14560] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 863.593119][T14560] UDF-fs: Scanning with blocksize 1024 failed 17:57:40 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 17:57:40 executing program 5: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x8}, 0x0, 0x0) [ 863.700433][T14560] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 863.711231][T14560] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 863.721142][T14560] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 863.729042][T14560] UDF-fs: Scanning with blocksize 2048 failed [ 863.785876][T14560] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 863.796766][T14560] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 863.806714][T14560] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 863.814663][T14560] UDF-fs: Scanning with blocksize 4096 failed [ 863.820831][T14560] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) 17:57:40 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x3f5, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000000ac0)=""/149, 0x32, 0x95, 0x1}, 0x20) 17:57:41 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/45, 0x2d}], 0x1) 17:57:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 17:57:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x1f, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) 17:57:41 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) preadv2(r0, &(0x7f0000000b40)=[{&(0x7f00000005c0)=""/146, 0x92}], 0x1, 0x0, 0x0, 0x33) 17:57:41 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89b1, &(0x7f0000000540)={'tunl0\x00', 0x0}) 17:57:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@abs, 0x6e) 17:57:41 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x67aa4dd54395ea0e}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 17:57:41 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:57:41 executing program 0: syz_io_uring_setup(0x79d4, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x6000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 17:57:41 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002ec0)='cgroup\x00') r1 = io_uring_setup(0xa97, &(0x7f0000000040)={0x0, 0x0, 0x1}) dup3(r0, r1, 0x0) 17:57:41 executing program 2: r0 = syz_io_uring_setup(0x79d4, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x228013, r0, 0x0) 17:57:41 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) dup3(r1, r0, 0x0) 17:57:42 executing program 3: r0 = syz_io_uring_setup(0x79d4, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x978c7000) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 17:57:42 executing program 1: syz_io_uring_setup(0x79d4, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000000200), 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffb000/0x3000)=nil) 17:57:42 executing program 0: poll(&(0x7f00000004c0)=[{}], 0x1ffffffffffffef4, 0x0) 17:57:42 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000002f00)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c49e8e27de4d77cbd7860beaf1680e6c8a67f755dcb17864efacef0b819061f811f7710e99d5d330d6fe61c2844b038479237aff9573775f3844de685d809b"}, 0x60) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 17:57:42 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x30013, r0, 0x8000000) syz_io_uring_setup(0x787d, &(0x7f0000000280), &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000500), &(0x7f0000000340)) 17:57:42 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) dup3(r1, r0, 0x0) 17:57:42 executing program 0: syz_io_uring_setup(0x79d4, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x6000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) 17:57:42 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000200)=@un=@abs, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)="1eed", 0x2}], 0x1}, 0x0) 17:57:42 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r0, r1, 0x0) 17:57:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r0, &(0x7f0000000500), &(0x7f0000000540)=0xc) 17:57:42 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) dup3(r1, r0, 0x0) 17:57:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0xf, 0x4) 17:57:42 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0}}], 0x300, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0}}], 0x300, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8914, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0xa) 17:57:42 executing program 5: syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x0) 17:57:42 executing program 0: syz_io_uring_setup(0x588d, &(0x7f0000000100), &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 17:57:43 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) dup3(r1, r0, 0x0) 17:57:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}}, 0x0) 17:57:43 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$nfc_llcp(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x40081) 17:57:43 executing program 5: futex(0x0, 0x80, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 17:57:43 executing program 0: syz_io_uring_setup(0x3b13, &(0x7f0000000000)={0x0, 0x0, 0x700}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 17:57:43 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 17:57:43 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002ec0)='cgroup\x00') r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x0, r1}) 17:57:43 executing program 2: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89e0, &(0x7f00000000c0)) 17:57:43 executing program 0: recvmsg$unix(0xffffffffffffffff, 0x0, 0xc0012102) 17:57:45 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0}}], 0x300, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0}}], 0x300, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8914, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0xa) 17:57:45 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002ec0)='cgroup\x00') fcntl$setsig(r0, 0xa, 0x404) 17:57:45 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f00000007c0)=""/152, 0x26, 0x98, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r0, 0x20, &(0x7f0000000200)={&(0x7f00000002c0)=""/195, 0xc3, 0x0, 0x0}}, 0x10) 17:57:45 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004d40)={0x2020}, 0x2020) syz_mount_image$efs(&(0x7f0000006d80), &(0x7f0000006dc0)='./file0\x00', 0x0, 0x2, &(0x7f0000007380)=[{&(0x7f0000006e00)="d7", 0x1}, {&(0x7f0000007240)="28d1e8784947", 0x6, 0xfffffffffffffffb}], 0x0, &(0x7f0000007440)) 17:57:45 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 17:57:45 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002ec0)='cgroup\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) [ 868.215934][T14664] loop2: detected capacity change from 0 to 264192 17:57:45 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private2, 0x7800}}) 17:57:45 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 17:57:45 executing program 3: syz_genetlink_get_family_id$wireguard(&(0x7f0000000940), 0xffffffffffffffff) 17:57:45 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) syz_io_uring_setup(0x79d4, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 17:57:45 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 17:57:46 executing program 3: pipe2$watch_queue(0x0, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000180)=""/142, 0x8e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0, 0x0) 17:57:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x0, 0x0, 0x0, 0x324}, 0x48) 17:57:47 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') 17:57:47 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 17:57:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x891d, &(0x7f0000000540)={'tunl0\x00', 0x0}) 17:57:47 executing program 3: r0 = timerfd_create(0x1, 0x0) timerfd_gettime(r0, &(0x7f00000004c0)) 17:57:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8911, &(0x7f0000000540)={'tunl0\x00', 0x0}) 17:57:47 executing program 2: syz_clone(0x84000600, 0x0, 0x0, 0x0, 0x0, 0x0) 17:57:47 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = syz_io_uring_setup(0x51, &(0x7f0000000100), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, r1, r0, r2], 0x4) 17:57:47 executing program 5: syz_mount_image$efs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)) 17:57:47 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 17:57:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x0, 0x0, 0x0, &(0x7f0000002340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 17:57:48 executing program 1: r0 = add_key$keyring(&(0x7f0000004cc0), &(0x7f0000004d00)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0x0, 0x0) 17:57:48 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) dup3(r1, r0, 0x0) 17:57:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x13, 0x8, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 17:57:48 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:57:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) fstatfs(r0, &(0x7f0000000040)=""/98) 17:57:48 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x0, 0x0) 17:57:48 executing program 1: r0 = add_key$keyring(&(0x7f0000004cc0), &(0x7f0000004d00)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0x0, 0x0) 17:57:48 executing program 0: select(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)) 17:57:48 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) dup3(r1, r0, 0x0) 17:57:48 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002ec0)='cgroup\x00') fcntl$addseals(r0, 0x409, 0x0) 17:57:48 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3309) 17:57:48 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002300), 0x101000, 0x0) 17:57:48 executing program 1: syz_open_procfs(0x0, &(0x7f0000000780)='net/rfcomm\x00') 17:57:49 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 17:57:49 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x76}, 0x8) 17:57:49 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) dup3(r1, r0, 0x0) 17:57:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0xc0189436, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 17:57:49 executing program 1: connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000002f00)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c49e8e27de4d77cbd7860beaf1680e6c8a67f755dcb17864efacef0b819061f811f7710e99d5d330d6fe61c2844b038479237aff9573775f3844de685d809b"}, 0x60) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 17:57:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) 17:57:49 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002ec0)='cgroup\x00') preadv2(r0, &(0x7f00000011c0)=[{&(0x7f00000000c0)=""/36, 0x24}], 0x1000000000000093, 0x0, 0x0, 0x0) 17:57:49 executing program 3: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0205647, &(0x7f0000000280)=@multiplanar_userptr={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e006a6bb"}, 0x0, 0x2, {0x0}}) 17:57:49 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) 17:57:49 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) 17:57:49 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000001200)=[{&(0x7f0000001040)=""/161, 0xa1}], 0x1, 0x10000, 0x0, 0x12) 17:57:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x4}]}}}}}) 17:57:50 executing program 2: socket$inet6(0xa, 0x0, 0x0) syz_io_uring_setup(0x5d6e, &(0x7f00000040c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000004140), &(0x7f0000004180)) 17:57:50 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) 17:57:50 executing program 0: add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="aafd24d81bc27657f460174f6f09", 0xe, 0xfffffffffffffffb) 17:57:50 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 17:57:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8929, &(0x7f0000000540)={'tunl0\x00', 0x0}) 17:57:50 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004d40)={0x2020}, 0x2020) syz_mount_image$efs(&(0x7f0000006d80), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007440)) [ 873.368156][T14760] trusted_key: encrypted_key: master key parameter '' is invalid 17:57:50 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, r1}, 0x18) 17:57:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000400), 0x4) 17:57:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000609000/0x3000)=nil, &(0x7f0000ff1000/0xd000)=nil, &(0x7f00005f9000/0x9000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f00005fa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000280)="440f20c0663506000000440f22c00f0f47bbb60f013c0f01c90f01d166b8b6bc00000f23c80f21f866350c0040000f23f866b98b02000066b8c900000066ba000000000f30b800008ed80f350f09", 0x4e}], 0x1, 0x25, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:57:50 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) [ 873.816565][T14775] fuse: Bad value for 'fd' 17:57:51 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 17:57:51 executing program 5: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) syz_io_uring_complete(0x0) 17:57:51 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x1, &(0x7f0000000080)=@raw=[@call], &(0x7f00000000c0)='GPL\x00', 0x6, 0x84, &(0x7f0000000100)=""/132, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:57:51 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:57:51 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 17:57:51 executing program 3: add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 17:57:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x29, 0x2c, 0x0, 0x0) 17:57:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xa, 0x0, &(0x7f0000000940)) 17:57:51 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='\x00', r0) 17:57:51 executing program 3: syz_mount_image$vfat(&(0x7f0000001800), 0x0, 0x0, 0x0, &(0x7f0000001940), 0x0, &(0x7f0000001980)) 17:57:51 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 17:57:51 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x2200c0, 0x0) fcntl$setflags(r0, 0x2, 0x0) 17:57:51 executing program 5: io_uring_setup(0x2a1f, &(0x7f0000000140)) io_uring_setup(0x534d, &(0x7f00000001c0)) syz_io_uring_setup(0x4386, &(0x7f0000000280), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5556, &(0x7f0000000340), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:57:51 executing program 1: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f00000005c0), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:57:51 executing program 0: io_uring_setup(0x346c, &(0x7f0000000340)={0x0, 0x0, 0x20}) 17:57:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f00000001c0), 0x4) 17:57:52 executing program 4: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 17:57:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 17:57:52 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 17:57:52 executing program 5: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="d0", 0x1, 0xffffffffffffffff) getresgid(0x0, 0x0, 0x0) 17:57:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1d}, 0x48) 17:57:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f00000001c0), 0x4) 17:57:52 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x11, r0, 0xfffffffffffffffe, 0x0, 0x0) 17:57:52 executing program 4: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 17:57:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0xb, &(0x7f00000001c0), 0x4) 17:57:52 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000001840), 0x0, 0x101901) ioctl$BLKDISCARD(r0, 0x1277, 0x0) 17:57:52 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind(r0, &(0x7f0000000400)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80) 17:57:52 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 17:57:52 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$P9_RXATTRCREATE(r0, 0x0, 0x0) 17:57:52 executing program 4: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 17:57:53 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:57:53 executing program 5: migrate_pages(0x0, 0x3f, &(0x7f0000000140), &(0x7f0000000180)=0x4) 17:57:53 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind(r0, &(0x7f0000000400)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80) 17:57:53 executing program 3: syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000001840)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)) 17:57:53 executing program 4: add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000080)="d0", 0x1, 0xffffffffffffffff) 17:57:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x83, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 17:57:53 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x11, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 17:57:53 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x0, 0x0, 0x0, 0x800}, 0x48) 17:57:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="00000000000000002e2f00006c6530006c3a1d98c022ad0a9882ca94fa7d9a26ba33194984325bf2413eafd28a2e9e115bc0d25f5198"]) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0xffd) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:57:53 executing program 4: syz_io_uring_setup(0x508b, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x5be9, &(0x7f0000000100), &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 17:57:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2279, 0x0) 17:57:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000380)={[{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) 17:57:54 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f00000001c0), 0x4) 17:57:54 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$link(0x8, r1, r0) 17:57:54 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0xa}, 0x8) 17:57:54 executing program 3: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x6c, &(0x7f0000001280), 0x0, &(0x7f0000001340)={[{@fat=@gid}]}) 17:57:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000980)={'ip6gre0\x00', &(0x7f0000000900)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @local}}) 17:57:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x300, 0xf0, 0xffffffff, 0x210, 0x0, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@loopback, @ipv6=@mcast2, @icmp_id}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@multicast1, @icmp_id, @icmp_id}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'bond0\x00', 'vcan0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@private, @gre_key, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 17:57:54 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) 17:57:54 executing program 5: r0 = getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 17:57:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000380)={[{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) [ 877.640804][T14887] FAT-fs (loop3): Unrecognized mount option "gid=" or missing value 17:57:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000002700)) 17:57:54 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000400)=""/257, 0x101}], 0x1, 0x4e17f242, 0x0) 17:57:54 executing program 5: keyctl$KEYCTL_MOVE(0x11, 0x0, 0xfffffffffffffffe, 0x0, 0x0) 17:57:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$unix(r1, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}], 0x18}, 0xc050) 17:57:55 executing program 4: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000100)) 17:57:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000380)={[{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) 17:57:55 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$unlink(0x9, r2, r0) 17:57:55 executing program 0: add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="aafd24d81bc27657f460174f6f09def5d496250b369f187c4bac75d411178d569ca05f9f35ad6b8bd680ffd1c6c2d370f60a2e4afdf24c17eb959e7a86140b91d3a2fb34d5af7f96cf68a5d8238581d816c059342e998bb4a215771f8b876ace3a6c5f2a45854068fb9de6308e27d84a0a", 0x71, 0xfffffffffffffffb) 17:57:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x7000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:57:55 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @private}}}, &(0x7f0000000100)=0x100) 17:57:55 executing program 4: syz_clone(0x224000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 878.492860][T14914] trusted_key: encrypted_key: master key parameter 'Ԗ% 6|KuV_5kրp [ 878.492860][T14914] .JL땞z Ӣ4կh#Y4.wj:l_*E@h0'J [ 878.492860][T14914] ' is invalid 17:57:55 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80) 17:57:55 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) 17:57:55 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f00000003c0)=@framed={{}, [@initr0]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:57:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f00000001c0), 0x4) 17:57:56 executing program 0: add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="aafd24d81bc27657f460174f6f09def5d496250b369f187c4bac75d411178d569ca05f9f35ad6b8bd680ffd1c6c2d370f60a2e4afdf24c17eb959e7a86140b91d3a2fb34d5af7f96cf68a5d8238581d816c059342e998bb4a215771f8b876ace3a6c5f2a45854068fb9de6308e27d84a0a", 0x71, 0xfffffffffffffffb) 17:57:56 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) 17:57:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000200)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 17:57:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@nat={'nat\x00', 0x1b, 0x5, 0x5a8, 0x300, 0xf0, 0xffffffff, 0x210, 0x0, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@loopback, @ipv6=@mcast2, @icmp_id}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@multicast1, @icmp_id, @icmp_id}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'bond0\x00', 'vcan0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "90e8b5bcc195e07bed99ba2c7bf82e2b92217956e6c624adbaea937fe439ab7c3bc3ea2a6fd176b59b14ef6be9fea5c8d0342c52c57b251a82d0fdfcb916f9aa3c9cd87418aaba5c2aea1f9490e8ebdd03a549a661c787bc1a853deaf8cdc7130f1925199d757f3aa6acc573525b408cce9d57335fbd38bf1c64d6a1e297bcde"}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@private, @gre_key, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) 17:57:56 executing program 3: syz_mount_image$vfat(&(0x7f0000001800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000004640), 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 17:57:56 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$msr(r0, 0x0, 0x0) [ 879.293285][T14935] trusted_key: encrypted_key: master key parameter 'Ԗ% 6|KuV_5kրp [ 879.293285][T14935] .JL땞z Ӣ4կh#Y4.wj:l_*E@h0'J [ 879.293285][T14935] ' is invalid 17:57:56 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000480)=@assoc_value, 0x8) 17:57:56 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0x43, &(0x7f00000001c0), 0x4) 17:57:56 executing program 0: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@map, 0xffffffffffffffff, 0x2e}, 0x14) 17:57:56 executing program 3: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x29, 0x93, 0xfa, 0x37, 0x29, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x20, 0x8000, 0x1, 0x401}}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000880)={'syztnl2\x00', 0x0}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000880)={'syztnl2\x00', 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x7, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x41}, 0x700, 0x40, 0x9, 0x12c58c95}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x9, 0xda, 0x4, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x1, 0x8000, 0x0, 0xad}}) 17:57:56 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f00000000c0)) ftruncate(r0, 0x400) 17:57:56 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast2}}) 17:57:56 executing program 5: syz_io_uring_setup(0x4dc0, &(0x7f0000000c40)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000cc0)) 17:57:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) [ 880.119052][T14957] loop2: detected capacity change from 0 to 87 17:57:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000200)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 17:57:57 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x0) 17:57:57 executing program 5: syz_io_uring_setup(0x4664, &(0x7f0000000200)={0x0, 0xbf1f, 0x0, 0x2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000003c0)) syz_io_uring_setup(0x508b, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000001c0)) 17:57:57 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, r0) 17:57:57 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x61adc0, 0x0) writev(r0, 0x0, 0x0) 17:57:57 executing program 3: syz_io_uring_setup(0x4d78, &(0x7f0000000000)={0x0, 0x1ea5, 0x10, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) creat(&(0x7f0000000200)='./file0\x00', 0x82) 17:57:57 executing program 4: syz_io_uring_setup(0x4624, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1887, &(0x7f0000000040), &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:57:57 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) fsmount(r0, 0x0, 0x0) 17:57:58 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0x0, 0x0, 0x0, 0x1014, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x48) 17:57:58 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0xe, 0x0) 17:57:58 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x29, 0x4c, 0x0, 0x0) 17:57:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) 17:57:58 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private1}}) 17:57:58 executing program 4: r0 = getpgrp(0xffffffffffffffff) ioprio_set$pid(0x1, r0, 0x6000) 17:57:58 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xbb3541, 0x0) bpf$BPF_LINK_CREATE(0x3, &(0x7f0000000000)={r0}, 0x10) 17:57:58 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:57:58 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) 17:57:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x7000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000040)={0x0, 0x7cec}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:57:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x17, 0x0, 0x10001, 0x66, 0x14, 0x1}, 0x48) 17:57:58 executing program 4: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f00000000c0)={0x2c}, 0x0) 17:57:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0, 0xf0ff7f00000000}}, 0x0) 17:57:59 executing program 1: syz_mount_image$ext4(&(0x7f0000008980)='ext2\x00', &(0x7f00000089c0)='./file0\x00', 0x0, 0x1, &(0x7f0000009a00)=[{&(0x7f0000008a00)="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", 0x1fc, 0x4}], 0x0, &(0x7f0000009a40)={[], [{@uid_eq={'uid', 0x3d, 0xee00}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) 17:57:59 executing program 5: add_key(&(0x7f0000001180)='asymmetric\x00', 0x0, &(0x7f0000000180)="a1b7", 0x2, 0xfffffffffffffffb) 17:57:59 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f00000017c0)='ns/time_for_children\x00') 17:57:59 executing program 0: syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$vga_arbiter(r0, 0x0, 0x24) 17:57:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0), 0x4) [ 882.375166][T15019] loop1: detected capacity change from 0 to 1 [ 882.428042][T15019] ext2: Unknown parameter 'uid' 17:57:59 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005380)='_') getresgid(&(0x7f0000005c00), &(0x7f0000005c40), &(0x7f0000005c80)) 17:57:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x29, 0x2e, 0x0, 0x0) 17:57:59 executing program 1: rmdir(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus/file0\x00') 17:57:59 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) signalfd(r0, &(0x7f0000000000), 0x8) 17:57:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x90, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3300}}, 0x1c}}, 0x0) [ 882.773443][T15025] sctp: [Deprecated]: syz-executor.4 (pid 15025) Use of int in maxseg socket option. [ 882.773443][T15025] Use struct sctp_assoc_value instead 17:58:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2287, 0x0) 17:58:00 executing program 5: add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "41f4fbfaa9069f1a4318cc198f0011b0e864bf2d529a8bf321344174f01cf21c8275c5caa509441ee9cf2c481e8f9031f96cab23e9260ff8057f7ebdd333447f"}, 0x48, 0xfffffffffffffffb) 17:58:00 executing program 4: futex(&(0x7f0000000000), 0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x1) 17:58:00 executing program 3: keyctl$KEYCTL_MOVE(0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0) 17:58:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000087c0)=[{{0x0, 0x0, &(0x7f0000005b80)=[{0x0}, {&(0x7f0000003840)='6', 0x1}], 0x2}}], 0x1, 0x0) 17:58:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000400)=0xc0, 0x4) 17:58:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x84, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 17:58:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0xffffffff, 0x1f0, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'rose0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@icmp6={{0x28}, {0x3, 'u,'}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], '\x00', 'veth1_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) 17:58:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000380)={[{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) 17:58:00 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1c, 0x2, &(0x7f0000000040)=@raw=[@map_fd], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 17:58:00 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) [ 883.619317][ T1194] ieee802154 phy0 wpan0: encryption failed: -22 [ 883.626447][ T1194] ieee802154 phy1 wpan1: encryption failed: -22 17:58:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f00000001c0), 0x4) 17:58:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x13) socket(0x9, 0x80003, 0xffffffff) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000180)={0x80000001, {{0xa, 0x4e23, 0x0, @local, 0x4}}}, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @private=0xa010101}, 0x10) 17:58:00 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000380)=0x90) 17:58:01 executing program 3: add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) 17:58:01 executing program 1: syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x1c040) 17:58:01 executing program 0: request_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='\xf6Q\x12\xcc\xf56\xdd\x84\xe9b\x1dB\x86\xa8(I\fF\x10w\x108\xf8\xac\xe8Y\xd4m\xa1\xb9\x14\xd9\xf3\x92\xa7\xb7\xcc\xadC_xr\xa2\xb1V\x93\xc1\x94\xdb\xb6\xc7;\x95\xc66e\x94\'\xcb\x10s\x8b\xa1K\x96L\xf2*\xf5\xd8e\xcb\x7ftC4\xaa\xdd\x7f~J\xe4DB\xd6Y\xe2s:O\x81`PP\v^\'m\xb1u\xd9t\x03\xa2\x02\xceF\xe1%5\xe5\x81\x03\xcb\x9c\xa6\xd6r\xfa\x03\xb0\xfcL\xf7\xaa\xa2\xa3\xf5\xe1\xc4\x99r\xc9\x19^\x92F\xdf\xca\x83C\x9f\xd5\x9d\xf1\'m\x1b\x8a\x93\x82\xc7\x8c\x91i2\xe9\x98\xc9\x1d\xee\x0f}\b\x00\x00\x00\xb4QMmu\xba\xa5>\xa4\x89q\xadpc5\xb4l\xfa\xf1\xfa\xc1{\x88R_\xa3\t\xff\x0e\xc0\x8es\x1cxe>m\xf6\x94\x8c', 0xffffffffffffffff) 17:58:01 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 17:58:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:01 executing program 4: open(&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus/file0\x00', 0x0, 0x0) 17:58:01 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000040)) 17:58:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0xfffffff8) 17:58:01 executing program 0: syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) 17:58:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@nat={'nat\x00', 0x1b, 0x5, 0x4c0, 0x300, 0xf0, 0xffffffff, 0x210, 0x0, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@loopback, @ipv6=@mcast2, @icmp_id}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@multicast1, @icmp_id, @icmp_id}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'bond0\x00', 'vcan0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@private, @gre_key, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 17:58:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0x4, &(0x7f00000001c0), 0x4) 17:58:01 executing program 3: add_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, &(0x7f0000000080)="dd", 0x1, 0x0) 17:58:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:01 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') 17:58:01 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f00000001c0), 0x4) 17:58:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@rights={{0x10}}], 0x10}, 0xc050) 17:58:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x1016, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 17:58:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0xffd) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) 17:58:02 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:58:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 17:58:02 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:02 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) 17:58:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x85, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 17:58:02 executing program 0: keyctl$KEYCTL_MOVE(0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x0) 17:58:02 executing program 1: sigaltstack(&(0x7f0000000100)={0x0, 0x100000001}, 0x0) 17:58:02 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)) 17:58:02 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080), 0x10) 17:58:03 executing program 4: syz_io_uring_setup(0x5448, &(0x7f0000000000), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x1e00, &(0x7f0000000100), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 17:58:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000280)=ANY=[]}) 17:58:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x29, 0x4d, 0x0, 0x0) 17:58:03 executing program 1: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6e65, &(0x7f00000000c0)={0x0, 0x9950}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000140)) 17:58:03 executing program 3: pipe2$9p(0x0, 0x84080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:58:03 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080), 0x10) 17:58:03 executing program 2: syz_io_uring_setup(0x4d78, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x22c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x81) 17:58:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [], [], 'macsec0\x00', 'bridge0\x00'}, 0x0, 0x118, 0x138, 0x0, {}, [@common=@dst={{0x48}}, @common=@mh={{0x28}, {"ccba"}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 17:58:03 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/254, 0xfe}], 0x1, 0x2a, 0x0) 17:58:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0xffd) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000500)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:58:03 executing program 4: syz_io_uring_setup(0x6381, &(0x7f0000000100)={0x0, 0x3691, 0x8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 17:58:03 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080), 0x10) 17:58:03 executing program 0: creat(&(0x7f0000000200)='./file0\x00', 0x0) removexattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@known='trusted.overlay.upper\x00') 17:58:03 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000180)=@raw=[@func, @jmp, @initr0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:58:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000087c0)=[{{0x0, 0x0, &(0x7f0000005b80)=[{&(0x7f00000037c0)="422390a8efedf84451a84c377227f2ac790aba7f5d9e9cb533d11408d8260fa56c93528c3bcbb5fb60f56c528dbd32fb78a4616db64de4292421326410564591d23523c7de32204e06ad2af64562", 0x4e}, {&(0x7f0000003840)="36be6b0bb282b15a2258025ff4feb94dec2f90a5dccaee816a0eb2912cfe99d5c0704a291168680e2c042cdffc0d74a33055252e45cf4c8464e89773f38265f3e6d0308568f9c8a48a7f49ee8ae37a45dac52305db28d1f520ebfe7ca6e572df6f1a8950b97caababba6e8efa0e1915745d1be22b6281b909f6608ea1f49bcc0333ad975f21fd33c75e50e08d0d01469cf49ad2d6422215933bd8c70ad538b6f0b96ddc9222ad01f", 0xa8}, {&(0x7f0000003900)="19262f1bdd34ff309752e5018f2c90db5dd40303abf3e9c5463386c7d59b0a35610a8870ab8efa5a5f7d012bd09dce4faae6f7c9d624803edb0ea72c0216f0ec7c28fc9f4dfb92901bf729cfc0de47f497962d656750cb54652a26cccc0f9381cd53cc7a2b02fc35818ffd43aaa93865a73d6fc5b684564fd5233d9f1aaabd25114ed67323c54d85bf760bd9a2e43929eb98c77f49b6b12a62ebb17ad3e83ee2fd1eafd0f3666040d5a2733cf665a3716405811f35d898f5fa9d8fe2375e5909bdec1cfd84239aa514770ce8602d9d64c554160e295eb7d5", 0xd8}, {&(0x7f0000003a00)="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", 0xcf3}], 0x4}}], 0x1, 0x0) 17:58:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 17:58:04 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:04 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x85272a1ce862017) 17:58:04 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 17:58:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x40842, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x104e042, 0x0) sendfile(r3, r2, 0x0, 0xfffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600204, 0x7ffffe, 0x4002011, r0, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000180)={0x18}, 0x18) 17:58:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x14}, 0x14}}, 0x0) 17:58:04 executing program 2: rt_sigaction(0x2, &(0x7f0000000080)={&(0x7f0000000000)="4e0f38f90d00000000c4e1f971d32b260f38caa5de0000000f01d44699f2430f5fd4f26e0f38051bd08f720610500f01f9", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000180)) 17:58:04 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:04 executing program 1: keyctl$KEYCTL_MOVE(0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x0) 17:58:04 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) [ 887.674655][T15170] loop4: detected capacity change from 0 to 16 17:58:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000340)='encrypted\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, r0) 17:58:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote}, @in={0x2, 0x0, @private}, @nl=@proc, 0xffff}) [ 887.817993][ T24] audit: type=1804 audit(1653501484.874:33): pid=15170 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir828953859/syzkaller.ad2LhC/770/file0/bus" dev="loop4" ino=1048598 res=1 errno=0 [ 887.962547][ T24] audit: type=1804 audit(1653501484.904:34): pid=15170 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir828953859/syzkaller.ad2LhC/770/file0/bus" dev="loop4" ino=1048598 res=1 errno=0 [ 887.991955][ T24] audit: type=1804 audit(1653501484.944:35): pid=15170 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir828953859/syzkaller.ad2LhC/770/file0/bus" dev="loop4" ino=1048598 res=1 errno=0 17:58:05 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x40842, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x104e042, 0x0) sendfile(r3, r2, 0x0, 0xfffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600204, 0x7ffffe, 0x4002011, r0, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000180)={0x18}, 0x18) 17:58:05 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 17:58:05 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x10, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:58:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote}, @in={0x2, 0x0, @private}, @nl=@proc, 0xffff}) 17:58:05 executing program 3: socketpair(0x10, 0x80803, 0x7fff, &(0x7f0000000140)) [ 888.547452][T15192] loop4: detected capacity change from 0 to 16 17:58:05 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 17:58:05 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:05 executing program 1: request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) [ 888.666402][ T24] audit: type=1804 audit(1653501485.724:36): pid=15192 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir828953859/syzkaller.ad2LhC/771/file0/bus" dev="loop4" ino=1048599 res=1 errno=0 17:58:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote}, @in={0x2, 0x0, @private}, @nl=@proc, 0xffff}) [ 888.813985][ T24] audit: type=1804 audit(1653501485.764:37): pid=15192 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir828953859/syzkaller.ad2LhC/771/file0/bus" dev="loop4" ino=1048599 res=1 errno=0 [ 888.839874][ T24] audit: type=1804 audit(1653501485.824:38): pid=15192 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir828953859/syzkaller.ad2LhC/771/file0/bus" dev="loop4" ino=1048599 res=1 errno=0 17:58:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x40842, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x104e042, 0x0) sendfile(r3, r2, 0x0, 0xfffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600204, 0x7ffffe, 0x4002011, r0, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000180)={0x18}, 0x18) 17:58:06 executing program 3: r0 = syz_io_uring_setup(0x57d0, &(0x7f0000000040), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 17:58:06 executing program 1: bpf$MAP_CREATE(0x13, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 17:58:06 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 17:58:06 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote}, @in={0x2, 0x0, @private}, @nl=@proc, 0xffff}) [ 889.294171][T15206] loop4: detected capacity change from 0 to 16 [ 889.489653][ T24] audit: type=1804 audit(1653501486.544:39): pid=15206 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir828953859/syzkaller.ad2LhC/772/file0/bus" dev="sda1" ino=1160 res=1 errno=0 17:58:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="00000000000000002e2f00006c6530006c3a1d98c022ad0a9882ca94fa7d9a26ba33194984325bf2413eafd28a2e9e115bc0d25f5198feee6e10607eddab4fefe8fd57e1f7e4"]) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0xffd) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 889.516258][ T24] audit: type=1804 audit(1653501486.544:40): pid=15206 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir828953859/syzkaller.ad2LhC/772/file0/bus" dev="sda1" ino=1160 res=1 errno=0 [ 889.541807][ T24] audit: type=1804 audit(1653501486.574:41): pid=15206 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir828953859/syzkaller.ad2LhC/772/file0/bus" dev="sda1" ino=1160 res=1 errno=0 17:58:06 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "41f4fbfaa9069f1a4318cc198f0011b0e864bf2d529a8bf321344174f01cf21c8275c5caa509441ee9cf2c481e8f9031f96cab23f9260ff8057f7ebdb033447f"}, 0x48, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0x0, r0) 17:58:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 17:58:06 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 17:58:06 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:06 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 17:58:07 executing program 1: r0 = io_uring_setup(0x2a1f, &(0x7f0000000140)={0x0, 0x7418}) r1 = io_uring_setup(0x534d, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x3ac, 0x0, r0}) syz_io_uring_setup(0xd92, &(0x7f0000000000)={0x0, 0x1bf13, 0x2, 0x0, 0x2c, 0x0, r1}, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000000c0)) syz_io_uring_setup(0x4386, &(0x7f0000000280)={0x0, 0x70f9, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000300)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000840)={0xa6, 0xfffffffffffffffc, 0x25, 0x3e, @buffer={0x0, 0x54, &(0x7f0000000700)=""/84}, &(0x7f0000000780)="edb1b63b5a7ea3109102690a3d61139480abb7fa1c7d0c825a531ea32dc73d3c7fd9a1501d", &(0x7f00000007c0)=""/59, 0x5, 0x22, 0xffffffffffffffff, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) 17:58:07 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x29, 0x43, 0x0, 0x0) 17:58:07 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 17:58:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@gettfilter={0x24, 0x2e, 0x1}, 0x24}}, 0x0) 17:58:07 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4c81, 0x0) 17:58:07 executing program 5: setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r0}, 0x10) 17:58:07 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000001940), 0x0, 0x0) 17:58:07 executing program 1: migrate_pages(0x0, 0x0, 0x0, 0x0) 17:58:07 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 17:58:07 executing program 4: syz_io_uring_setup(0x321, &(0x7f0000000140), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) 17:58:07 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4c81, 0x0) 17:58:07 executing program 5: setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r0}, 0x10) 17:58:08 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 17:58:08 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, @remote}}) 17:58:08 executing program 3: creat(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000a00)='./file0\x00', 0x0) 17:58:08 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4c81, 0x0) 17:58:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2283, &(0x7f00000000c0)) 17:58:08 executing program 5: setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r0}, 0x10) 17:58:08 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 17:58:08 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000ec0)={'sit0\x00', 0x0}) 17:58:08 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff}, 0xc) 17:58:08 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4c81, 0x0) 17:58:08 executing program 4: mq_open(&(0x7f0000000000)=',,S/*', 0x0, 0x0, 0x0) 17:58:08 executing program 5: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:08 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @local, @loopback}}) 17:58:08 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 17:58:08 executing program 3: add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) 17:58:09 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4c81, 0x0) 17:58:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:58:09 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000280), 0x12) 17:58:09 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 17:58:09 executing program 3: rt_sigaction(0x2, &(0x7f0000000080)={&(0x7f0000000000)="4e0f38f90d00000000c4e1f971d32b260f38caa5de0000000f01d44699f2430f5fd4f26e0f38051bd08f720610500f01f9", 0x0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000180)) 17:58:09 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4c81, 0x0) 17:58:09 executing program 5: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:58:09 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 17:58:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x824}, 0x48) 17:58:09 executing program 3: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000003ec0)={{0x0, 0x3938700}}, 0x0) 17:58:10 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4c81, 0x0) 17:58:10 executing program 5: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:10 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 17:58:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x16, 0x3, &(0x7f0000001500)=@framed, &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 17:58:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f00000001c0), 0x4) 17:58:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:58:10 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4c81, 0x0) 17:58:10 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x610340, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 17:58:10 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4c81, 0x0) 17:58:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x17, 0xffffffff, 0x0, 0x66, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48) 17:58:11 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x17, 0x0, 0x10001, 0x66, 0x0, 0x1}, 0x48) socketpair(0x0, 0x0, 0x0, &(0x7f00000003c0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, 0x0, 0x0, 0x4}, 0x20) 17:58:11 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4c81, 0x0) 17:58:11 executing program 4: add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_io_uring_setup(0x33bc, &(0x7f0000000900), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000980), &(0x7f00000009c0)) syz_io_uring_setup(0x4dc0, &(0x7f0000000c40)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000cc0)) 17:58:11 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:11 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x610340, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 17:58:11 executing program 3: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x1}, &(0x7f0000000180)={0x0, r0+60000000}, 0x0) 17:58:11 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4c81, 0x0) 17:58:11 executing program 4: syz_clone(0x1000, 0x0, 0x0, &(0x7f0000005380), 0x0, 0x0) 17:58:11 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x610340, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 17:58:11 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:11 executing program 1: syz_io_uring_setup(0x321, &(0x7f0000000140), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) 17:58:12 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4c81, 0x0) 17:58:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e19b) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000040)=@v2, 0x14, 0x0) 17:58:12 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 17:58:12 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:12 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4c81, 0x0) 17:58:12 executing program 1: io_uring_setup(0x534d, &(0x7f00000001c0)) syz_io_uring_setup(0x4386, &(0x7f0000000280), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5556, &(0x7f0000000340), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:58:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) connect(r0, &(0x7f0000000000)=@l2, 0x80) 17:58:12 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 17:58:12 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:12 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4c81, 0x0) 17:58:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @loopback}}}, &(0x7f0000000240)=0x100) 17:58:13 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 17:58:13 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4c81, 0x0) 17:58:13 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xbb3541, 0x0) bpf$BPF_LINK_CREATE(0x1d, &(0x7f0000000000)={r0}, 0x10) 17:58:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000280)="3472013a58ea558e6c29d3efeff090750ddd592d2237d71aeb780cf6da9dba3d9e26fcb290c1c257850d285a70607888e6ed0e25e24ec5a3185013eb4d123d88d51ab779008c545dda69cbfbad6afb9a3fbd2ceda4c06e5cf0969b3661", 0x5d) 17:58:13 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:13 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 17:58:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000200)={'sit0\x00', 0x0}) 17:58:13 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4c81, 0x0) 17:58:13 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, 0x8) 17:58:13 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:13 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 17:58:13 executing program 1: add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "fb7452412c622d3693435ab790ff4ff3caaa4c74f0a8f21cfac9042dfd4d2779a91e2d319f1f12998bb442436e8491f4d43dba1f09b03c8220b4e1b517105efb"}, 0x48, 0xfffffffffffffffe) 17:58:14 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4c81, 0x0) 17:58:14 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x71, &(0x7f0000000100)={r1}, &(0x7f0000000140)=0x14) 17:58:14 executing program 3: keyctl$KEYCTL_MOVE(0x1b, 0x0, 0xfffffffffffffffe, 0x0, 0x0) 17:58:14 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:14 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 17:58:14 executing program 1: write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xcf95) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x880}, 0xc, 0x0}, 0x1) pipe2$9p(0x0, 0x84080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:58:14 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4c81, 0x0) 17:58:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x40842, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) mmap(&(0x7f00000ad000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000180)={0x18}, 0x20000198) 17:58:14 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x0, 0x0, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 17:58:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x62) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x2806, 0x4) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r0, r1, 0x0, 0x101000002) recvmsg(r0, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x0) 17:58:14 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 897.820802][T15436] loop4: detected capacity change from 0 to 16 17:58:15 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4c81, 0x0) 17:58:15 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x0, 0x0, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) [ 898.014301][T15444] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 17:58:15 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2271, &(0x7f00000000c0)) 17:58:15 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x29, 0x3e, 0x0, 0x0) 17:58:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) 17:58:15 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x0, 0x0, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 17:58:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2271, &(0x7f00000000c0)) 17:58:15 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:15 executing program 3: bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)={@map, 0xffffffffffffffff, 0x1b}, 0x14) 17:58:15 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 17:58:15 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 17:58:16 executing program 2: syz_mount_image$ext4(&(0x7f0000008980)='ext2\x00', &(0x7f00000089c0)='./file0\x00', 0x0, 0x1, &(0x7f0000009a00)=[{&(0x7f0000008a00)="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", 0x1fc, 0x4}], 0x0, &(0x7f0000009a40)) 17:58:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2271, &(0x7f00000000c0)) 17:58:16 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, {[@ra={0x94, 0x4}]}}}}}) [ 899.285612][T15474] loop2: detected capacity change from 0 to 1 17:58:16 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 17:58:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x0, 0x0, 0x66, 0x0, 0x1}, 0x48) [ 899.329886][T15474] EXT4-fs (loop2): unable to read superblock 17:58:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(r0, 0x0, 0xfffffffffffffffc) 17:58:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2271, &(0x7f00000000c0)) 17:58:16 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) read$msr(r0, 0x0, 0x0) 17:58:16 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 17:58:16 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2284, &(0x7f0000002700)) 17:58:16 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xbb3541, 0x0) finit_module(r0, 0x0, 0x0) 17:58:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2271, &(0x7f00000000c0)) 17:58:17 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x18080, 0x0) 17:58:17 executing program 3: syz_clone(0x0, &(0x7f0000005200), 0x0, 0x0, 0x0, &(0x7f0000005380)='_') 17:58:17 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 17:58:17 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xbb3541, 0x0) finit_module(r0, 0x0, 0x0) 17:58:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2271, &(0x7f00000000c0)) 17:58:17 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:17 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x1, &(0x7f0000000380)=@raw=[@kfunc], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:58:17 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 17:58:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2271, &(0x7f00000000c0)) 17:58:17 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xbb3541, 0x0) finit_module(r0, 0x0, 0x0) 17:58:17 executing program 3: syz_clone(0x0, &(0x7f0000005200), 0x0, 0x0, 0x0, &(0x7f0000005380)='_') 17:58:17 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="190000000104000005000000691de678a3a9127901f66f6237de868b406a59d753037eb544"]) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000080)={@broadcast, @broadcast}, 0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r0, @ANYRESOCT=r1]) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000000)) 17:58:18 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) 17:58:18 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x610340, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 17:58:18 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xbb3541, 0x0) finit_module(r0, 0x0, 0x0) [ 901.169680][T15530] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:58:18 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:18 executing program 1: syz_mount_image$ext4(&(0x7f0000008980)='ext2\x00', &(0x7f00000089c0)='./file0\x00', 0x0, 0x1, &(0x7f0000009a00)=[{&(0x7f0000008a00)="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", 0x7fc, 0x4}], 0x0, &(0x7f0000009a40)={[], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) 17:58:18 executing program 3: migrate_pages(0x0, 0x3f, &(0x7f0000000140)=0xfffffffffffffffa, 0x0) 17:58:18 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000980)={0x2, 0x0, @private=0xa010102}, 0x10) 17:58:18 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:58:18 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) [ 901.653413][T15545] loop1: detected capacity change from 0 to 4 [ 901.686915][T15545] ext2: Unknown parameter 'mask' 17:58:18 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080), 0x10) 17:58:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000004c0)={'team0\x00', 0x600}) 17:58:18 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x802c0, 0x0) 17:58:18 executing program 0: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 17:58:19 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) 17:58:19 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:58:19 executing program 3: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="d7", 0x1}], 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) execve(&(0x7f0000000ac0)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000d80), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 17:58:19 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080), 0x10) 17:58:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) 17:58:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8912, 0x0) 17:58:19 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:58:19 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2271, &(0x7f00000000c0)) 17:58:19 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x9, 0x0, 0x0, &(0x7f0000000380)) 17:58:19 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080), 0x10) 17:58:19 executing program 3: socketpair(0x10, 0x2, 0x11, &(0x7f0000000040)) 17:58:19 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x4ca8, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) 17:58:19 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xbb3541, 0x0) finit_module(r0, 0x0, 0x0) 17:58:19 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2271, &(0x7f00000000c0)) 17:58:20 executing program 0: add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 17:58:20 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:20 executing program 1: r0 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x1f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xff, 0x1, 0xba}}, [{{0x9, 0x5, 0x82, 0x2, 0x3df, 0x7, 0xf7, 0x7}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x20, 0x3, 0x80, 0x40, 0xda}, 0x31, &(0x7f0000000080)={0x5, 0xf, 0x31, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x9e, 0x3, 0x8, 0x0, 0x20, [0x3fc0, 0xc0, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xf8, 0x4, 0xff00}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0x5, 0x1}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x41c}}]}) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x20, 0x10, 0xa5, {0xa5, 0x8, "b7d4dd3ccf9f5d1d05d5cc0850919db208b199341f99d98cd4106b6e44d733a74295005b5f4ff1a480ab6ef7487a9a0f61b6c6c8e8cd40d168a4c82643aca226f9fda3bd0981791c494188eb028e5adb982b8b9e40b29b71889a0b7fb28695ee91b7a33e69969bcf5d584989a8ff80df79f93bbdd3997e02961a82b8a84bf56f2872128e188a3b72f0d809922bdcfd43cb939d0be33ca3fc97c740aa7020932e58ac35"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x20, 0x10, 0xbc, "792a8376430268667b7a7a85fdafac4a0a38d779029512105f7951611d02a2ccf767a6bfb4ffcf5e46bcfdd0346baea2d3b2b5fa14c21405ba9ef3bf5b92b2217c19777be199624a4f535f84382e8640a8b53d86c8a25003a54259e636dd50a407a348452d0789947fe5aff3d237273aecc09024c9471db55b057679b71fbe562bbf4b28020d9367d85dd2ba268a9c9817e739e666353501bada7e2980230cb8ca0f7481dc625e0d73121491933bcaa43cbd06677a7422e3ce5e7c95"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000400)={0x20, 0x0, 0x7c, {0x7a, "8bf547fcf4b7e9c0af0d75cb40c543fa539c841d88fbc236f1fb0a56b418be6336dfe36a1c4f5eed1693735a5f12729789431ae54a552d3370d126dd3b927b387c373ec3ecafb7346ee287b1b7786eceaedd20ecc2cd447ddbde663fff14514bd855cad6c7368cbd3890c1bbcef5db94fec9713431b74255fa62"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x1f}}) r1 = syz_open_dev$evdev(&(0x7f0000000580), 0x6e774b3a, 0x48a402) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000005c0)=0x1ff) r2 = syz_open_dev$evdev(&(0x7f0000000600), 0xfffffffffffffffd, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000680)=""/175) r5 = syz_open_dev$evdev(&(0x7f0000000740), 0x1, 0x800) ioctl$EVIOCGABS2F(r5, 0x8018456f, &(0x7f0000000780)=""/164) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000840)=""/124) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r3) r6 = socket(0x9cf342c2efa308ea, 0x6, 0xffff26b9) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x64, r4, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3e2}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x24020010) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000a80)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x39, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x8, 0x1, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0xfd, 0x4, 0x1}}]}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x300, 0x81, 0x8f, 0x0, 0x10, 0x80}, 0xcf, &(0x7f0000000b00)={0x5, 0xf, 0xcf, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x72, 0x0, 0x5, 0x4, 0x1}, @generic={0xab, 0x10, 0xa, "3ff6218a76a87172d907b660fa3d3987bcba352e550fb21c7cc486f5f1bb7bd81b9d76c05e4ec0904f8a0e29267b7427ceca93ecdd46911d7894ffe8ae408f2b559eabe231f244d1d88274ae6d1187b12d7cc076fdf8cd21c5d2cba1c67fa771eed42c129c111be0f182065a3349f937cf6ed254777176ccd7d7b3eb72aa2778ca57d27e1f31767c256c3cf68bbd80fe9c6be4dd9790acb5ddc62166777cdee7a1cbc994cd2deab8"}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "a48a5b714bde0a55e4212ae537f95c42"}]}, 0x2, [{0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}]}) r7 = socket(0x11, 0x5, 0xffffff7f) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r7, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x44, r4, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r6) 17:58:20 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xbb3541, 0x0) finit_module(r0, 0x0, 0x0) 17:58:20 executing program 3: syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x20400) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) 17:58:20 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2271, &(0x7f00000000c0)) 17:58:20 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000980)={0x2, 0x0, @loopback}, 0x10) 17:58:20 executing program 3: syz_open_dev$hidraw(0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 17:58:20 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xbb3541, 0x0) finit_module(r0, 0x0, 0x0) 17:58:20 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2271, &(0x7f00000000c0)) 17:58:20 executing program 0: syz_open_dev$sndmidi(&(0x7f0000001ec0), 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000001ec0), 0x2, 0x0) [ 903.832704][ T121] usb 2-1: new high-speed USB device number 18 using dummy_hcd 17:58:20 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xbb3541, 0x0) finit_module(r0, 0x0, 0x0) 17:58:21 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) [ 904.072957][ T121] usb 2-1: Using ep0 maxpacket: 32 [ 904.282765][ T121] usb 2-1: config 1 interface 0 altsetting 57 bulk endpoint 0x1 has invalid maxpacket 1024 [ 904.293156][ T121] usb 2-1: config 1 interface 0 altsetting 57 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 904.306487][ T121] usb 2-1: config 1 interface 0 has no altsetting 0 [ 904.563007][ T121] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 904.572392][ T121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.580574][ T121] usb 2-1: Product: syz [ 904.585013][ T121] usb 2-1: Manufacturer: ъ [ 904.589665][ T121] usb 2-1: SerialNumber: syz [ 904.732815][T15601] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 904.740023][T15601] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 905.085640][ T121] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 57 proto 1 vid 0x0525 pid 0xA4A8 [ 905.140172][ T121] usb 2-1: USB disconnect, device number 18 [ 905.164645][ T121] usblp0: removed 17:58:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2271, &(0x7f00000000c0)) 17:58:22 executing program 3: socketpair(0x23, 0x0, 0x200000, &(0x7f00000008c0)) 17:58:22 executing program 1: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)) lsetxattr$trusted_overlay_opaque(&(0x7f0000002b40)='./file1\x00', 0x0, 0x0, 0x0, 0x0) 17:58:22 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:22 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @local, @local={0xac, 0x14, 0x0}, @remote, @loopback}}}}, 0x0) 17:58:22 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xbb3541, 0x0) finit_module(r0, 0x0, 0x0) 17:58:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2271, &(0x7f00000000c0)) 17:58:23 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:23 executing program 0: syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 17:58:23 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xbb3541, 0x0) finit_module(r0, 0x0, 0x0) 17:58:23 executing program 3: sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x1052b3c2da37289b) 17:58:23 executing program 1: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="90", 0x1}], 0x1024, &(0x7f00000002c0)) 17:58:23 executing program 4: syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) 17:58:23 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0xbb3541, 0x0) finit_module(r0, 0x0, 0x0) 17:58:23 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5460, 0x0) 17:58:23 executing program 3: keyctl$unlink(0x9, 0x0, 0xfffffffffffffff9) 17:58:23 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000200)={0x1b, 0x1}) 17:58:24 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0xbb3541, 0x0) finit_module(r0, 0x0, 0x0) 17:58:24 executing program 4: syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) 17:58:24 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:24 executing program 0: syz_mount_image$qnx4(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x2, &(0x7f0000001800)=[{&(0x7f00000004c0)="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", 0xffc, 0x5}, {&(0x7f00000014c0)='H', 0x1}], 0x0, &(0x7f00000018c0)) socket$kcm(0x29, 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) syz_mount_image$qnx4(0x0, 0x0, 0x0, 0x0, &(0x7f0000003dc0), 0x0, 0x0) socket(0x0, 0x0, 0x0) 17:58:24 executing program 3: socketpair(0x25, 0x5, 0x5, &(0x7f00000001c0)) 17:58:24 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0xbb3541, 0x0) finit_module(r0, 0x0, 0x0) 17:58:24 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:24 executing program 4: syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) 17:58:24 executing program 3: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffb, &(0x7f0000000200)='cifs.spnego\x00', &(0x7f0000000240)='!:L#\x00') 17:58:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc72}}) 17:58:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0xc020660b, 0x0) 17:58:25 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:58:25 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2271, 0x0) 17:58:25 executing program 3: capget(&(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) 17:58:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0xb95}, 0x14}}, 0x0) 17:58:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x8, "b36b5a1a11c1ad2e"}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:58:25 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2271, 0x0) 17:58:25 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:58:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000b00), 0xffffffffffffffff) 17:58:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{}, 'syz1\x00'}) 17:58:25 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2271, 0x0) 17:58:25 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:58:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00'}) 17:58:26 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x4020940d, 0x0) 17:58:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 17:58:26 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xbb3541, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:58:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}]}]}, 0x3c}}, 0x0) 17:58:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x401c5820, 0x0) 17:58:26 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 17:58:26 executing program 1: socketpair(0x18, 0x0, 0x8001, &(0x7f00000001c0)) 17:58:26 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xbb3541, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:58:26 executing program 4: syz_clone(0x16001000, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) 17:58:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000140)) 17:58:26 executing program 1: socketpair(0x8, 0x0, 0x0, &(0x7f00000008c0)) 17:58:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) 17:58:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) 17:58:27 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xbb3541, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:58:27 executing program 3: getrandom(&(0x7f0000000300)=""/98, 0x62, 0x0) 17:58:27 executing program 4: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000080)) 17:58:27 executing program 1: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40400) 17:58:27 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x18, 0x0, &(0x7f00000004c0)=[@increfs_done, @register_looper], 0x1, 0x0, &(0x7f0000000300)="ed"}) 17:58:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) 17:58:27 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000ac000000ac0000000b0000000900000002000006"], &(0x7f0000000240)=""/244, 0xcf, 0xf4, 0x1}, 0x20) 17:58:27 executing program 3: syz_clone(0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) 17:58:27 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time_for_children\x00') 17:58:27 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x3}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000080)=""/247, 0x31, 0xf7, 0x1}, 0x20) 17:58:28 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a024}], 0x1}, 0x0) 17:58:28 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) 17:58:28 executing program 2: socketpair(0x25, 0x5, 0x0, &(0x7f00000001c0)) 17:58:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240500c2, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1e) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000240), 0x4) 17:58:28 executing program 4: setresuid(0x0, 0x0, 0xee01) 17:58:28 executing program 1: socketpair(0x2a, 0x0, 0x0, &(0x7f00000001c0)) 17:58:28 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080), 0x10) 17:58:28 executing program 2: socketpair(0x25, 0x5, 0x0, &(0x7f00000001c0)) 17:58:28 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a024}], 0x1}, 0x0) 17:58:28 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000000980)={0x2, 0x0, @loopback}, 0x10) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 17:58:28 executing program 1: bind$l2tp(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) 17:58:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0x1, 0x4c8}, 0x48) 17:58:29 executing program 2: socketpair(0xb, 0x0, 0x0, &(0x7f00000001c0)) 17:58:29 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080), 0x10) 17:58:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 17:58:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x7650}]}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000580)={0x0, 0xd, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000, 0xf0f8}, 0x700) 17:58:29 executing program 3: socketpair(0x1a, 0x0, 0x0, &(0x7f00000001c0)) 17:58:29 executing program 0: setresuid(0xee01, 0xee01, 0xffffffffffffffff) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 17:58:29 executing program 2: bpf$MAP_CREATE(0x3, &(0x7f00000000c0)=@bloom_filter, 0x48) 17:58:29 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080), 0x10) 17:58:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x18, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) [ 912.697248][T15801] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 17:58:29 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 17:58:30 executing program 2: add_key(&(0x7f0000000000)='logon\x00', 0x0, &(0x7f0000000080)="a3", 0x1, 0xfffffffffffffffc) 17:58:30 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f0000000000)="d8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) 17:58:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xa}, 0x0) 17:58:30 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:58:30 executing program 5: syz_clone3(&(0x7f00000012c0)={0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {}, &(0x7f0000000180)=""/193, 0xc1, &(0x7f0000000280)=""/4096, &(0x7f0000001280)}, 0x40) 17:58:30 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000640)='z', 0x1, 0x0, &(0x7f0000000540)={0x1c, 0x1c, 0x1}, 0x1c) 17:58:30 executing program 2: process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:58:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xa00}}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x0) [ 913.525769][T15821] loop3: detected capacity change from 0 to 87 17:58:30 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r0, &(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80) [ 913.668052][ T24] audit: type=1804 audit(1653501510.724:42): pid=15822 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3270036454/syzkaller.DbTQQl/894/file1/bus" dev="sda1" ino=1161 res=1 errno=0 [ 913.695799][ T24] audit: type=1800 audit(1653501510.724:43): pid=15822 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1161 res=0 errno=0 17:58:30 executing program 3: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_init1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x80) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) read(r0, &(0x7f000001a340)=""/102400, 0x19000) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000000)={0x4, 0x4, 0x0, 0x0, 0x0, "ac1a94c38e502536"}) 17:58:31 executing program 4: syz_clone(0x34843000, 0x0, 0x0, 0x0, 0x0, 0x0) 17:58:31 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$inet(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000040)="b8", 0x1}], 0x1}, 0x0) 17:58:31 executing program 5: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000fee000/0x11000)=nil, 0x11000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ff7000/0x2000)=nil) 17:58:31 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000100)={'batadv_slave_1\x00'}) 17:58:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0) 17:58:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}, 0x300}, 0x0) 17:58:31 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000380), 0x18) 17:58:31 executing program 4: syz_clone(0x34843000, 0x0, 0x0, 0x0, 0x0, 0x0) 17:58:32 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$sndseq(r0, 0x0, 0x0) 17:58:32 executing program 3: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) 17:58:32 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000080)='./file1\x00', 0x2000, 0x0) stat(&(0x7f0000000180)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0\x00') 17:58:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 17:58:32 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000040)) 17:58:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8919, 0x0) 17:58:32 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) 17:58:32 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1, &(0x7f0000000040)=@raw=[@alu={0x0, 0x0, 0x3, 0x9ba8a364dd834c76, 0x5, 0xffffffffffffffe0, 0xfffffffffffffffc}], &(0x7f00000000c0)='syzkaller\x00', 0x81, 0x3c, &(0x7f0000000100)=""/60, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x7, 0x5f3b, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) 17:58:32 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 17:58:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)='a', 0x1}], 0x1, &(0x7f0000000740)=[{0x10}], 0x10}, 0x0) 17:58:32 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, 0x0) 17:58:32 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1, &(0x7f0000000040)=@raw=[@alu], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:58:32 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$nfc_llcp(r0, &(0x7f00000021c0)={0x0, 0x0, 0x0}, 0x0) 17:58:33 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmmsg$nfc_llcp(r0, &(0x7f0000000380)=[{&(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "27255030f3879a70e3fef6fd764838426a7e1f39708df85dff10d1ec6cff6d2c41e60e3fdc3b1329c1a3cc3d728c4fcc4558fa6c86bea7d37dd67fb9d6bdb8"}, 0x60, 0x0}], 0x1, 0x0) 17:58:33 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:58:33 executing program 1: socket(0x11, 0x2, 0x6) 17:58:33 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8901, 0x0) 17:58:33 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x989680}, 0x0) 17:58:33 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x891a, &(0x7f00000000c0)={'wlan0\x00', @ifru_ivalue}) 17:58:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:58:33 executing program 5: connect$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) 17:58:33 executing program 2: syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) 17:58:33 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'caif0\x00', @ifru_map}) 17:58:33 executing program 1: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x20001, 0x0) pwritev(r0, &(0x7f0000001180)=[{&(0x7f0000000100)="ae47f44f67c3f470e42d3707", 0xc}], 0x1, 0x0, 0x0) 17:58:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x0) 17:58:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 17:58:33 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_names='nr0\x00'}) 17:58:33 executing program 0: syz_usb_connect$uac1(0x0, 0xbc, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0x0, 0x50, 0x89, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xff, 0x81}, [@mixer_unit={0x5, 0x24, 0x4, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x0, 0x5}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xb1, 0x3, 0x0, 0x6, "cb12", "e314"}, @as_header={0x7, 0x24, 0x1, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0xd2, 0x0, {0x7, 0x25, 0x1, 0x80, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1}, @as_header={0x7, 0x24, 0x1, 0x5, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x9, 0x1, 0x20, 0xb5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x3, 0x0, 0x0, "1e0d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x5, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x2, &(0x7f00000002c0)=@string={0x2}}, {0x68, &(0x7f0000000380)=@string={0x68, 0x3, "bb24ef2581e405b147ea1c582244f0839dd23b4793d3a5f42cb66cf97970b973ba082984d2f7535be447f21e361a651674012e9e03bf30eced2077ec64eca96f4a8547eed046a942da33e0872bb0de582aadea1d788153cbcf4e7094c509930655e80569ed62"}}, {0xa2, &(0x7f0000000400)=@string={0xa2, 0x3, "07f2f69ed95aaa6ba5f9ff63ccf6b2be7c0ec58443150d6a91925762c59e7c8db2cb8f8787ccbd509ca1cc2236451e7dd0e6d52989294a7976a3173351c173a52ca171c7d3a2f85c6cb0419fc7048cf1a192d63f69970e92031476baa77f45a721685fa13157c4a4ec9f5ad08e8b23da5fdd0cfa37838c4a147cbee9f50afc823192f157c7ec62bf97f7cbea69748b16f239f16269a3a3350e88ffad3b492738"}}]}) 17:58:33 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) sendmmsg$nfc_llcp(r0, 0x0, 0x0, 0x0) 17:58:33 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@remote, @rand_addr=' \x01\x00', @remote, 0x0, 0x6}) 17:58:34 executing program 4: syz_usb_connect$uac1(0x0, 0x85, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x0, 0x7, {0x7, 0x25, 0x1, 0x80, 0x22}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x0, 0x4}, @format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x5, 0x0, {0x7}}}}}}}]}}, 0x0) 17:58:34 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8982, 0x0) 17:58:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) 17:58:34 executing program 3: clock_gettime(0x2, &(0x7f0000000240)) 17:58:34 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x661) write$sndseq(r0, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c) [ 917.752325][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd 17:58:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000040)={0x10, 0x0, {}, {0x0, 0x0, 0x0, {}, {}, @ramp}}) 17:58:35 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_names='nr0\x00'}) 17:58:35 executing program 3: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) [ 917.982210][T10966] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 918.122289][ T25] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 918.133070][ T25] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 918.142368][ T25] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 12 17:58:35 executing program 2: r0 = socket(0x25, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) [ 918.363004][T10966] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 918.373608][T10966] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 918.382796][T10966] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 918.393473][T10966] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 918.523092][ T25] usb 1-1: string descriptor 0 read error: -22 [ 918.529658][ T25] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 918.539699][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.681337][ T25] usb 1-1: 0:2 : does not exist [ 918.728973][T10966] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 918.738445][T10966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.746742][T10966] usb 5-1: Product: syz [ 918.751050][T10966] usb 5-1: Manufacturer: syz [ 918.756076][T10966] usb 5-1: SerialNumber: syz [ 918.878282][ T25] usb 1-1: USB disconnect, device number 11 [ 919.092287][T10966] usb 5-1: 0:2 : does not exist [ 919.134330][T10966] usb 5-1: USB disconnect, device number 83 [ 919.233789][T12076] udevd[12076]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory 17:58:36 executing program 0: syz_usb_connect$uac1(0x0, 0xbc, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0x0, 0x50, 0x89, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xff, 0x81}, [@mixer_unit={0x5, 0x24, 0x4, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x0, 0x5}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xb1, 0x3, 0x0, 0x6, "cb12", "e314"}, @as_header={0x7, 0x24, 0x1, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0xd2, 0x0, {0x7, 0x25, 0x1, 0x80, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1}, @as_header={0x7, 0x24, 0x1, 0x5, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x9, 0x1, 0x20, 0xb5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x3, 0x0, 0x0, "1e0d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x5, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x2, &(0x7f00000002c0)=@string={0x2}}, {0x68, &(0x7f0000000380)=@string={0x68, 0x3, "bb24ef2581e405b147ea1c582244f0839dd23b4793d3a5f42cb66cf97970b973ba082984d2f7535be447f21e361a651674012e9e03bf30eced2077ec64eca96f4a8547eed046a942da33e0872bb0de582aadea1d788153cbcf4e7094c509930655e80569ed62"}}, {0xa2, &(0x7f0000000400)=@string={0xa2, 0x3, "07f2f69ed95aaa6ba5f9ff63ccf6b2be7c0ec58443150d6a91925762c59e7c8db2cb8f8787ccbd509ca1cc2236451e7dd0e6d52989294a7976a3173351c173a52ca171c7d3a2f85c6cb0419fc7048cf1a192d63f69970e92031476baa77f45a721685fa13157c4a4ec9f5ad08e8b23da5fdd0cfa37838c4a147cbee9f50afc823192f157c7ec62bf97f7cbea69748b16f239f16269a3a3350e88ffad3b492738"}}]}) 17:58:36 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) 17:58:36 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x6400, 0x0) 17:58:36 executing program 4: syz_usb_connect$uac1(0x0, 0x85, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x0, 0x7, {0x7, 0x25, 0x1, 0x80, 0x22}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x0, 0x4}, @format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x5, 0x0, {0x7}}}}}}}]}}, 0x0) 17:58:36 executing program 5: syz_usb_connect$uac1(0x0, 0x85, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x0, 0x0, 0x89, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xff}, [@selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x22}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:58:36 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000000)={{}, 'port1\x00'}) 17:58:36 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, 0x0, 0x7) 17:58:36 executing program 1: mount$binderfs(&(0x7f0000000400), &(0x7f0000000440)='./binderfs2\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)) 17:58:36 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x6, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @map_idx, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000240)='syzkaller\x00', 0x20, 0xde, &(0x7f0000000280)=""/222, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:58:36 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000500)) [ 919.812618][T10966] usb 1-1: new high-speed USB device number 12 using dummy_hcd 17:58:37 executing program 1: socket$inet(0x2, 0x0, 0x1000000) 17:58:37 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) [ 920.072401][T11225] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 920.192398][T10966] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 920.203821][T10966] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 920.213131][T10966] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 920.434397][T11225] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 920.444931][T11225] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 920.454156][T11225] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 920.464874][T11225] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 920.503550][T10966] usb 1-1: string descriptor 0 read error: -22 [ 920.510100][T10966] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 920.519532][T10966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.620519][T10966] usb 1-1: 0:2 : does not exist [ 920.652869][T11225] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 920.663809][T11225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.672623][T11225] usb 5-1: Product: syz [ 920.676931][T11225] usb 5-1: Manufacturer: syz [ 920.681757][T11225] usb 5-1: SerialNumber: syz [ 920.842872][T10966] usb 1-1: USB disconnect, device number 12 [ 921.012205][T11225] usb 5-1: 0:2 : does not exist [ 921.058304][T11225] usb 5-1: USB disconnect, device number 84 [ 921.145150][T12180] udevd[12180]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory 17:58:38 executing program 0: syz_usb_connect$uac1(0x0, 0xbc, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0x0, 0x50, 0x89, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xff, 0x81}, [@mixer_unit={0x5, 0x24, 0x4, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x0, 0x5}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xb1, 0x3, 0x0, 0x6, "cb12", "e314"}, @as_header={0x7, 0x24, 0x1, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0xd2, 0x0, {0x7, 0x25, 0x1, 0x80, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1}, @as_header={0x7, 0x24, 0x1, 0x5, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x9, 0x1, 0x20, 0xb5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x3, 0x0, 0x0, "1e0d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x5, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x2, &(0x7f00000002c0)=@string={0x2}}, {0x68, &(0x7f0000000380)=@string={0x68, 0x3, "bb24ef2581e405b147ea1c582244f0839dd23b4793d3a5f42cb66cf97970b973ba082984d2f7535be447f21e361a651674012e9e03bf30eced2077ec64eca96f4a8547eed046a942da33e0872bb0de582aadea1d788153cbcf4e7094c509930655e80569ed62"}}, {0xa2, &(0x7f0000000400)=@string={0xa2, 0x3, "07f2f69ed95aaa6ba5f9ff63ccf6b2be7c0ec58443150d6a91925762c59e7c8db2cb8f8787ccbd509ca1cc2236451e7dd0e6d52989294a7976a3173351c173a52ca171c7d3a2f85c6cb0419fc7048cf1a192d63f69970e92031476baa77f45a721685fa13157c4a4ec9f5ad08e8b23da5fdd0cfa37838c4a147cbee9f50afc823192f157c7ec62bf97f7cbea69748b16f239f16269a3a3350e88ffad3b492738"}}]}) 17:58:38 executing program 5: syz_open_dev$media(&(0x7f00000004c0), 0xffffffffffff0000, 0x0) 17:58:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) 17:58:38 executing program 3: r0 = epoll_create(0x400) r1 = epoll_create(0x29f1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 17:58:38 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5452, 0x0) 17:58:38 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:58:38 executing program 4: syz_usb_connect$uac1(0x0, 0x85, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x0, 0x7, {0x7, 0x25, 0x1, 0x80, 0x22}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x0, 0x4}, @format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x5, 0x0, {0x7}}}}}}}]}}, 0x0) 17:58:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000140)=ANY=[]}) 17:58:38 executing program 5: openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 17:58:38 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f00000000c0)) 17:58:38 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000000c0)={{}, {0x0, 0x9}}) [ 921.824158][T11225] usb 1-1: new high-speed USB device number 13 using dummy_hcd 17:58:39 executing program 2: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 922.113189][ T3542] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 922.194467][T11225] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 922.204837][T11225] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 922.214153][T11225] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 922.493061][ T3542] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 922.503431][ T3542] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 922.512640][ T3542] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 922.523354][ T3542] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 922.552291][T11225] usb 1-1: string descriptor 0 read error: -22 [ 922.559019][T11225] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 922.568539][T11225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.630792][T11225] usb 1-1: 0:2 : does not exist [ 922.713058][ T3542] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 922.722786][ T3542] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.730955][ T3542] usb 5-1: Product: syz [ 922.735529][ T3542] usb 5-1: Manufacturer: syz [ 922.740268][ T3542] usb 5-1: SerialNumber: syz [ 922.836727][T11225] usb 1-1: USB disconnect, device number 13 [ 923.092506][ T3542] usb 5-1: 0:2 : does not exist [ 923.145728][ T3542] usb 5-1: USB disconnect, device number 85 [ 923.210012][T12076] udevd[12076]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory 17:58:40 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x989680}, &(0x7f00000005c0)={&(0x7f0000000580), 0x8}) 17:58:40 executing program 3: mount$binderfs(0x0, 0x0, &(0x7f0000000480), 0x0, 0x0) 17:58:40 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5451, 0x0) 17:58:40 executing program 1: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4402) 17:58:40 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg(r0, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x60, 0x0, 0x0, "87c670387c0d67bceb85375992fe17a851d1070131feb5ae12dbf710a3b51c7856ac86ec73edd6bbf7ddc2098fc5dff78041776daf52c89e73699a32e016212888ae25d146b967a0515d"}], 0x60}, 0x40) 17:58:40 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 17:58:40 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x46000, 0x0) 17:58:40 executing program 5: pselect6(0x40, &(0x7f0000000140)={0x200}, &(0x7f0000000180)={0x10000}, &(0x7f00000001c0)={0x6}, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={[0x6]}, 0x8}) 17:58:40 executing program 3: r0 = socket(0x25, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gre0\x00', 0x0}) 17:58:40 executing program 4: syz_usb_connect$uac1(0x0, 0x85, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x0, 0x7, {0x7, 0x25, 0x1, 0x80, 0x22}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x0, 0x4}, @format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x5, 0x0, {0x7}}}}}}}]}}, 0x0) 17:58:40 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x582, 0x0) 17:58:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000180)) 17:58:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@bloom_filter={0x1e, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 17:58:41 executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000600)='0\x00', 0x2) 17:58:41 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000140)={0x0, 0x0, 0x10001}) [ 924.172667][T10966] usb 5-1: new high-speed USB device number 86 using dummy_hcd 17:58:41 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000080)=@raw=[@func, @cb_func, @func], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:58:41 executing program 3: socket(0x1e, 0x0, 0x10000) 17:58:41 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1, &(0x7f0000000040)=@raw=[@alu], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x3c, &(0x7f0000000100)=""/60, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:58:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x20044001) [ 924.542981][T10966] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 924.556543][T10966] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 924.566758][T10966] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 924.577535][T10966] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 17:58:41 executing program 5: pselect6(0x40, &(0x7f00000002c0), &(0x7f0000000480), &(0x7f00000004c0)={0xffffffffffffff7e}, &(0x7f0000000500)={0x0, 0x989680}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x1ff]}, 0x8}) 17:58:41 executing program 3: r0 = socket(0x11, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) [ 924.813123][T10966] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 924.822782][T10966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.830945][T10966] usb 5-1: Product: syz [ 924.835439][T10966] usb 5-1: Manufacturer: syz [ 924.840522][T10966] usb 5-1: SerialNumber: syz [ 925.342334][T10966] usb 5-1: 0:2 : does not exist [ 925.362573][T10966] usb 5-1: USB disconnect, device number 86 [ 925.415389][T12180] udevd[12180]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 17:58:42 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) bind$can_j1939(r0, 0x0, 0x0) 17:58:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) 17:58:42 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x80086601, 0x0) 17:58:42 executing program 1: sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x0) 17:58:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x1c0}, 0x0) 17:58:42 executing program 4: socket(0xa, 0x806, 0x0) 17:58:43 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x10000) 17:58:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 17:58:43 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg(r0, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0xb0, 0x0, 0x0, "87c670387c0d67bceb85375992fe17a851d1070131feb5ae12dbf710a3b51c7856ac86ec73edd6bbf7ddc2098fc5dff78041776daf52c89e73699a32e016212888ae25d146b967a0515d15590b0712c9e611f980e99a20364c86e4fe2138f42ba551542dc58868ae37cc38d54cf3db77ba15531fa5fcc5d94aed39e1d0213a5cc5933d2e387acc654079b1a03c48d4adff035010e03c948273"}, {0x78, 0x0, 0x0, "69ed590b7e0a48fef274aac59451730b7d6592e03947344b4ed2a60da01e984264988bf98dbfec454d3683d6cf5f1cf8e38746893d748a2bf416a32aa4a1e19c78130c0210d416737734932e72c19cd0db4a3ebb7c6439435b9854553c353be033"}, {0x100, 0x0, 0x0, "70b9a1ed715b348e1b115cc164b972f8fce790f6806a00b9028a856872f53d923cb72b5a92d94d504fe841efdaf3dd091fb333362d5c583b827fd592df908fa7c1c85038c7fadc2d5a30509e6cc586d036c9d6b1e4b82675e23220e7d747d8554cab0c219a2292907ebd79889f752e2040c31e0b896363d38d787a596bc149c86cba4ab720be9a9168afb1b09fe96c0826943157f4f4df7e8715d9f4b31e84bd923d06b54c5e0ec03d461c34bd3e2d327df6b99f68bd7d8a40eff8e39cdf2824829eb5c852eb71c8a8374fa7017ae138d35bfd3ea1e21aee0f62d39380d940fa5566ce8a285da19731"}, {0x1010, 0x0, 0x0, "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"}, {0xd0, 0x0, 0x0, "f00a5cda9f5399908d047789f52a57cbfadf8423db4227df7cf4192908bbc90202ef5c805119a16460ec0c4bc5f55f1eb14b7907258aa186d36069f760947d36d182ac63edbdb38345e9cf770ec7ca90645134baa8d139d0f96285e94e8e4cc2fc77f25a2bd74207823234098b8ad1dd70094390baa85b762ef71f33d4cda63ff3c4a43c022db9951bcc690951577dd868c98d4617dd9970710b9ba83d284c9262dd20fad66a95b2711e8f50578ff7a609c537edc9b1d043b2"}, {0x100, 0x0, 0x0, "2235b8d60530fb90b3860409822e4db4076dfcd9723d2e78c379117f7330bbe2f927d196a236d048b2e931b8f08e948f5b3e2a7418cc62b02891cce534402cfe169f1622ada236fe076f890adebacb0ea3f6ddbbaf80cb53ba30819a914c5c99fc15c2d7192240bc603ef3e62b416ec2a39c5ca966929983e8571f799e622cabe8e57ae00f59d0584e893df45506a30e72ead34215adda9ad005a86aeaf91e81b8a00a63392191db281ca9b14f2d4edf8ca386261e9d832317410ed989718f63078082c2d752fb5da3acb017dc3d834522316e2b48bb4e3c458db638edb5fb2870e81c63c62b308766"}, {0xc00, 0x0, 0x0, "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"}], 0x2008}, 0x0) 17:58:43 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000440)={0x2}, 0x18) 17:58:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) 17:58:43 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x9) 17:58:43 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8983, 0x0) 17:58:43 executing program 1: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) 17:58:43 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000080), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 17:58:43 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$VT_SETMODE(r0, 0x5602, 0x0) 17:58:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x0, 0x0) 17:58:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7ff5"], 0x17) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "d535cf8fd93114dd90200a5f4a06f494ea105f"}) write$P9_RATTACH(r0, 0x0, 0x0) 17:58:43 executing program 5: syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), 0xffffffffffffffff) 17:58:43 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000140)={0x0, 0x3, [{}, {}, {0xffffffffffffffff, 0x0, 0x0, 0xfffff000}]}) 17:58:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 17:58:44 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x6, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @map_idx, @initr0], &(0x7f0000000240)='syzkaller\x00', 0x20, 0xde, &(0x7f0000000280)=""/222, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:58:44 executing program 4: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)) 17:58:44 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 17:58:44 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) 17:58:44 executing program 1: setresgid(0xffffffffffffffff, 0x0, 0xee00) 17:58:44 executing program 0: memfd_create(&(0x7f0000000040)='/dev/dlm-monitor\x00', 0x6) 17:58:44 executing program 2: socket(0x25, 0x1, 0x0) 17:58:44 executing program 3: mq_open(&(0x7f0000000100)='$\xa6]*,\x00', 0x0, 0x0, 0x0) 17:58:44 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) 17:58:44 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x80108906, 0x0) 17:58:44 executing program 4: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0xf6}, 'port0\x00', 0x0, 0x48, 0x0, 0x7, 0x9, 0x8, 0x9, 0x0, 0x5, 0x6}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000280)={0x5, 0x6, 0xfffffffa, {0x80000001, 0xba8f}, 0x7}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x8000) 17:58:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, 0x0, 0x0) 17:58:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x14}}, 0x0) 17:58:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)='a', 0x1}, {0x0}, {0x0}], 0x3, &(0x7f0000000740)=[{0x18, 0x0, 0x0, "fc"}, {0x10}], 0x28}, 0x0) 17:58:45 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)) 17:58:45 executing program 1: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000040)='/dev/dlm-monitor\x00', 0x6) 17:58:45 executing program 4: r0 = socket(0x25, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000a40)=ANY=[]}) 17:58:45 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) 17:58:45 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x1) 17:58:45 executing program 4: setgroups(0x6, &(0x7f0000000040)=[0xee01, 0xee01, 0xee01, 0xee01, 0xee01, 0x0]) 17:58:45 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000080)=@raw=[@cb_func, @func], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:58:45 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5450, 0x0) 17:58:45 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x801c581f, 0x0) 17:58:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000ec8541"], 0x14}}, 0x0) 17:58:45 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x2, 0xb, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 17:58:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000003c0)="b4", 0x1}], 0x1, &(0x7f0000000740)=[{0x10}], 0x10}, 0x0) 17:58:45 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, 0x0, 0x700) 17:58:45 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) 17:58:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) 17:58:46 executing program 0: pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={0xffffffffffffff7e}, 0x0, 0x0) 17:58:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0xc0}, 0x14}}, 0x0) 17:58:46 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8907, 0x0) 17:58:46 executing program 1: r0 = socket(0x25, 0x5, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008011) 17:58:46 executing program 5: r0 = socket(0x25, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32, @ANYBLOB="7800780000000005fffffff7477b00dc00650000f404"]}) 17:58:46 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) 17:58:46 executing program 0: syz_mount_image$udf(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='umask=000000000020000000000']) 17:58:46 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, "9781e1f0c081892a5d37aeaf5bb26e4ad151e9"}) 17:58:46 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{}, 'syz1\x00'}) 17:58:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8918, &(0x7f0000000040)={'veth0_to_bond\x00', @ifru_ivalue}) 17:58:46 executing program 5: socket(0x3, 0x0, 0x7fffffff) [ 929.793066][T16142] block nbd3: NBD_DISCONNECT 17:58:46 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) 17:58:47 executing program 4: syz_usb_connect$uac1(0x0, 0x79, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0xfc, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xca, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 17:58:47 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) 17:58:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 17:58:47 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f00000000c0)="03", 0x1}, {&(0x7f0000000200)='\t', 0x1, 0x80000001}, {&(0x7f0000001480)="d1", 0x1, 0xffff}], 0x0, &(0x7f0000002b80)=ANY=[@ANYBLOB='\x00', @ANYRESHEX]) 17:58:47 executing program 5: r0 = socket(0x2a, 0x802, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) [ 930.241931][T16153] block nbd3: NBD_DISCONNECT 17:58:47 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000080), 0x18) [ 930.329571][T16161] loop1: detected capacity change from 0 to 264192 17:58:47 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) 17:58:47 executing program 5: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340), 0x8003, 0x0) 17:58:47 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 930.480715][T12105] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 930.562350][ T25] usb 5-1: new high-speed USB device number 87 using dummy_hcd 17:58:47 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000500)=@req={0x28, &(0x7f00000004c0)={'macvlan1\x00', @ifru_data=0x0}}) 17:58:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x0, 0x70bd28}, 0x14}}, 0x0) [ 930.849650][T16168] block nbd3: NBD_DISCONNECT 17:58:48 executing program 5: getgroups(0x2, &(0x7f00000000c0)=[0x0, 0x0]) [ 930.932974][ T25] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 930.942032][ T25] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 930.952825][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 931.273680][ T25] usb 5-1: string descriptor 0 read error: -22 [ 931.280335][ T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 931.289864][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.430768][ T25] usb 5-1: 0:2 : does not exist [ 931.636093][ T25] usb 5-1: USB disconnect, device number 87 17:58:49 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000001c0)) 17:58:49 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0xfff) 17:58:49 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000180), 0x6, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 17:58:49 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x46000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) 17:58:49 executing program 1: add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "65e13a680800aa8877961856312fe1bbdb945e6a9e73e05c6081a8b67bff2c98cabcaf4283eec762d7d2d937c7944e1f17f597bef2e8d043c457e632e126a098"}, 0x48, 0xffffffffffffffff) 17:58:49 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0xffffffffffffffff]}, 0x80) 17:58:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 17:58:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 17:58:49 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x2, 0x0) 17:58:49 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x53b084634a1e1bc3, 0x0) 17:58:49 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8bc6695c3af0d6ca, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:58:49 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0xfff) 17:58:49 executing program 3: socket(0x2, 0x5, 0x0) 17:58:49 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) connect$can_j1939(r0, 0x0, 0x0) 17:58:49 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x40049409, 0x0) 17:58:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x2}, 0x0) 17:58:49 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:58:50 executing program 3: socket(0x25, 0x5, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x1ff}, &(0x7f0000000040)={0x74b}, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x8]}, 0x8}) 17:58:50 executing program 5: syz_usb_connect$uac1(0x0, 0x7e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x3, 0x1, 0x0, 0x50, 0x89, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xff, 0x81}, [@mixer_unit={0x5, 0x24, 0x4, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0xd2, 0x0, {0x7, 0x25, 0x1, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 17:58:50 executing program 0: mount$binderfs(0x0, 0x0, 0x0, 0x200000, &(0x7f00000004c0)) 17:58:50 executing program 1: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)) 17:58:50 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0xfff) 17:58:50 executing program 4: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x1001, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000040)) 17:58:50 executing program 3: r0 = socket(0x11, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={0x0}}, 0x0) 17:58:50 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x4) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x50582, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0x1) 17:58:50 executing program 4: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)) 17:58:50 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0xfff) 17:58:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)='a', 0x1}, {&(0x7f00000003c0)="b4", 0x1}, {0x0}], 0x3, &(0x7f0000000740)=[{0x18, 0x0, 0x0, "fc"}, {0x10}], 0x28}, 0x0) 17:58:51 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 17:58:51 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000000c0)) 17:58:51 executing program 3: select(0x40, &(0x7f0000000000), &(0x7f0000000100)={0x6}, 0x0, &(0x7f00000000c0)={0x0, 0xea60}) 17:58:51 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x4) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x50582, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0x1) 17:58:51 executing program 2: ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000040)=0xfff) 17:58:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x33fe0}}, 0x0) 17:58:51 executing program 5: mq_open(&(0x7f0000000000)='+%,---\x00', 0x40, 0x0, &(0x7f0000000040)={0x5, 0xd06, 0x10000, 0xdb}) 17:58:51 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x6}, 0x4) 17:58:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x300}, 0x0) 17:58:51 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f00000000c0)) 17:58:51 executing program 4: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 17:58:51 executing program 2: ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000040)=0xfff) 17:58:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x2ee, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) 17:58:52 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) mount$binderfs(&(0x7f0000000400), &(0x7f0000000440)='./binderfs2\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)) 17:58:52 executing program 2: ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000040)=0xfff) 17:58:52 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000001c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x1000000}, {}]}) 17:58:52 executing program 4: openat$capi20(0xffffffffffffff9c, &(0x7f0000000340), 0xc401, 0x0) 17:58:52 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={@remote, @rand_addr=' \x01\x00', @remote, 0x0, 0x0, 0x0, 0x400, 0x1, 0x20000, r2}) 17:58:52 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000100)={'syztnl2\x00', 0x0}) 17:58:52 executing program 3: pselect6(0x40, &(0x7f0000000380), 0x0, &(0x7f0000000400)={0x3}, &(0x7f0000000440)={0x0, 0x3938700}, 0x0) 17:58:52 executing program 5: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0xffffffff}, 0x8) 17:58:52 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000280)={0x1d, r2, 0x3, {0x0, 0x0, 0x4}}, 0x18) 17:58:52 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000180)) 17:58:52 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0xfff) 17:58:53 executing program 3: ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 17:58:53 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89a0, 0x0) 17:58:53 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xbf6faf9f57f99834) 17:58:53 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, 0x0) 17:58:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)='a', 0x1}, {&(0x7f00000003c0)="b4", 0x1}], 0x2, &(0x7f0000000740)=[{0x18, 0x0, 0x0, "fc"}, {0x10}], 0x28}, 0x0) 17:58:53 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0xfff) 17:58:53 executing program 3: pselect6(0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)={0x0, 0x989680}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x1ff]}, 0x8}) 17:58:53 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)={0x4b}) 17:58:53 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 17:58:53 executing program 1: socket(0x28, 0x0, 0xf56) 17:58:53 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0xfff) 17:58:53 executing program 4: pselect6(0x40, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) 17:58:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x33fe0}}, 0x0) 17:58:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x6, 0x0, "9781e1f0c081892a5d37aeaf5bb26e4ad151e9"}) 17:58:54 executing program 0: socket(0x22, 0x0, 0x6) 17:58:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000000)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x1c0}, 0x0) 17:58:54 executing program 2: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000040)=0xfff) 17:58:54 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000c40), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) 17:58:54 executing program 5: inotify_add_watch(0xffffffffffffffff, 0x0, 0x82000d10) 17:58:54 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @cb_func, @func], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:58:54 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0) 17:58:54 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, 0x0, 0x18) 17:58:54 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) 17:58:54 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 17:58:54 executing program 2: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000040)=0xfff) 17:58:54 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 17:58:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@bloom_filter={0x1e, 0x0, 0xffff, 0xd6b, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 17:58:55 executing program 3: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0xffffff7f) 17:58:55 executing program 5: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180), 0x10) 17:58:55 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x40, 0x0) 17:58:55 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000000)) getresgid(&(0x7f0000000100), 0x0, 0x0) 17:58:55 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8906, 0x0) 17:58:55 executing program 2: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000040)=0xfff) 17:58:55 executing program 3: syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) 17:58:55 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000140)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x8000}]}) 17:58:55 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:58:55 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 17:58:55 executing program 1: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6001) 17:58:55 executing program 3: memfd_create(&(0x7f00000000c0)='batadv\x00', 0x2) 17:58:55 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmmsg$nfc_llcp(r0, &(0x7f0000000380)=[{&(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "27255030f3879a70e3fef6fd764838426a7e1f39708df85dff10d1ec6cff6d2c41e60e3fdc3b1329c1a3cc3d728c4fcc4558fa6c86bea7d37dd67fb9d6bdb8"}, 0x60, 0x0, 0x0, &(0x7f0000000300)={0x28, 0x0, 0x0, "7ac7269e7d93f6d87d2e9ee7272d45aff5"}, 0x28}], 0x1, 0x0) 17:58:55 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) 17:58:56 executing program 1: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x3c440, 0x0) 17:58:56 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8902, 0x0) 17:58:56 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, 0x0) 17:58:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) 17:58:56 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8904, 0x0) 17:58:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) 17:58:56 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a40)={0x6, 0x2, &(0x7f0000000840)=@raw=[@map_val], &(0x7f0000000880)='GPL\x00', 0x0, 0x1000, &(0x7f00000008c0)=""/4096, 0x1f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001940)={0x3, 0x3, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 17:58:56 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) 17:58:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={0x0}}, 0x0) 17:58:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8919, &(0x7f0000000000)={'veth1_to_bridge\x00', @ifru_names='hsr0\x00'}) 17:58:56 executing program 5: r0 = socket(0x1e, 0x4, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={0x0}}, 0x0) 17:58:56 executing program 4: syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x0, 0x50, 0x89, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xff}, [@selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0xd2, 0x0, {0x7, 0x25, 0x1, 0x80, 0x22, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x6, 0x4}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x3f, 0x7f, 0x20, "7db30c714142bf"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x2}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x1, 0x20, 0xb5, "8437", "ec81"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x3, 0x9, 0x7, "1e0d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xca, 0x5, 0x1, {0x7, 0x25, 0x1, 0x0, 0x0, 0x7fff}}}}}}}]}}, 0x0) 17:58:56 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) 17:58:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00'}) 17:58:57 executing program 3: syz_open_dev$vim2m(&(0x7f0000000200), 0x8, 0x2) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 17:58:57 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) 17:58:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) 17:58:57 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:58:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) 17:58:57 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmmsg$nfc_llcp(r0, 0x0, 0x0, 0x0) [ 940.351869][ T3633] usb 5-1: new high-speed USB device number 88 using dummy_hcd 17:58:57 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000006b00)={0x2020}, 0x2020) 17:58:57 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)) 17:58:57 executing program 3: r0 = socket(0x25, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback}}}}) [ 940.750847][ T3633] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 940.759813][ T3633] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 940.770184][ T3633] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 940.779375][ T3633] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 940.790121][ T3633] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 941.113055][ T3633] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 941.122597][ T3633] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.130768][ T3633] usb 5-1: Product: syz [ 941.137168][ T3633] usb 5-1: Manufacturer: syz [ 941.142505][ T3633] usb 5-1: SerialNumber: syz [ 941.512340][ T3633] usb 5-1: 0:2 : does not exist [ 941.552764][ T3633] usb 5-1: USB disconnect, device number 88 [ 941.628680][T12180] udevd[12180]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 17:58:59 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f00000000c0)) 17:58:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) 17:58:59 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)) 17:58:59 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:58:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e19b) lseek(r0, 0x0, 0x0) write(r0, &(0x7f0000000380), 0x0) 17:58:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x20, r1, 0xb01, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 17:58:59 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nfc={0x27, 0x1}, 0x80, 0x0}}], 0x1, 0x0) 17:58:59 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0xfef4, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:58:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560e, &(0x7f0000000100)) 17:58:59 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)) 17:58:59 executing program 0: socketpair(0xf, 0x0, 0x0, &(0x7f0000000080)) 17:58:59 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:58:59 executing program 5: pselect6(0x40, &(0x7f0000000040)={0x800}, 0x0, &(0x7f00000000c0)={0x3}, 0x0, 0x0) 17:58:59 executing program 0: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 17:58:59 executing program 2: openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000b00), 0x7ffffffff000) 17:59:00 executing program 3: request_key(&(0x7f0000000000)='.dead\x00', 0x0, 0x0, 0xfffffffffffffff9) 17:59:00 executing program 0: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) 17:59:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000080000000700000005000004"], &(0x7f00000002c0)=""/220, 0x68, 0xdc, 0x1}, 0x20) 17:59:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x1}, {}, {0x0, 0x3}]}]}}, &(0x7f0000000480)=""/215, 0x3e, 0xd7, 0x1}, 0x20) 17:59:01 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x20}}, 0x0) 17:59:01 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8912, &(0x7f0000000080)={'sit0\x00', 0x0}) 17:59:01 executing program 2: openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x9452a18f354a395b}, 0x18) 17:59:01 executing program 5: request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000540)={'syz', 0x2}, 0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:59:02 executing program 0: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:59:02 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:02 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) connect$caif(r0, &(0x7f0000000100)=@dgm, 0x18) 17:59:02 executing program 3: request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0) 17:59:02 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "45505f648155ce2f557bc9ed2a57c6dcc41b975490b34f5684ee285718b8dc8219d61debb79958c9deef459fedd33f9bf1818029c5482e738f2f7f99069db248"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000001c0)='ceph\x00', 0x0) [ 945.060390][ T1194] ieee802154 phy0 wpan0: encryption failed: -22 [ 945.067037][ T1194] ieee802154 phy1 wpan1: encryption failed: -22 17:59:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_netprio_ifpriomap(r1, 0x0, 0x0) close(r0) 17:59:02 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090018105e04da05400080000001090224000100000000090480000903000000092100"], 0x0) 17:59:02 executing program 4: clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) select(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x4}, 0x0, &(0x7f0000000300)={0x0, r0/1000+10000}) 17:59:02 executing program 3: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) [ 945.364681][ T3633] usb 1-1: new high-speed USB device number 14 using dummy_hcd 17:59:02 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0) 17:59:02 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:02 executing program 4: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x1) [ 945.922260][ T3633] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 945.931501][ T3633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.940385][ T3633] usb 1-1: Product: syz [ 945.942186][ T25] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 945.944777][ T3633] usb 1-1: Manufacturer: syz [ 945.958640][ T3633] usb 1-1: SerialNumber: syz [ 946.164011][ T3633] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 946.192847][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 946.313765][ T25] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 946.322371][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.332776][ T25] usb 3-1: config 0 has no interface number 0 [ 946.339009][ T25] usb 3-1: config 0 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 946.433051][ T25] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.40 [ 946.442655][ T25] usb 3-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 946.451075][ T25] usb 3-1: Manufacturer: syz [ 946.466689][ T25] usb 3-1: config 0 descriptor?? [ 946.513767][ T25] hub 3-1:0.128: bad descriptor, ignoring hub [ 946.520084][ T25] hub: probe of 3-1:0.128 failed with error -5 [ 946.533192][ T25] usbhid 3-1:0.128: couldn't find an input interrupt endpoint [ 946.842630][ T3633] usb 3-1: USB disconnect, device number 36 [ 946.873385][T11225] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 947.088312][ T3633] usb 1-1: USB disconnect, device number 14 17:59:04 executing program 0: add_key(&(0x7f0000000000)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x32, 0x0) 17:59:04 executing program 5: syz_clone3(&(0x7f0000000580)={0x2000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:59:04 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:04 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "45505f648155ce2f557bc9ed2a57c6dcc41b975490b34f5684ee285718b8dc8219d61debb79958c9deef459fedd33f9bf1818029c5482e738f2f7f99069db248"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 17:59:04 executing program 4: r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000000180)) 17:59:04 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000040), 0x10) [ 947.686077][T16496] tipc: Can't bind to reserved service type 0 17:59:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3c}}, 0x0) 17:59:04 executing program 4: request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)=',\x9d\x00', 0xfffffffffffffffb) 17:59:04 executing program 2: syz_clone3(&(0x7f0000000340)={0x2210000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:59:04 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:04 executing program 5: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0) [ 947.932021][T11225] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 947.939320][T11225] ath9k_htc: Failed to initialize the device [ 947.999419][ T3633] usb 1-1: ath9k_htc: USB layer deinitialized 17:59:05 executing program 0: open$dir(0x0, 0x200000, 0x0) 17:59:05 executing program 4: timer_create(0x4, 0x0, 0x0) 17:59:05 executing program 3: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') 17:59:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000440)={0x74, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x50, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @val={0x4, 0x6}, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @void, @val={0x71, 0x7}, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x32a}]}, 0x74}}, 0x0) 17:59:05 executing program 5: openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000b00)={0x410900}, 0x18) 17:59:05 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:05 executing program 0: r0 = shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) shmdt(r0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 17:59:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@sndrcv={0x2c}], 0x2c}, 0x0) 17:59:05 executing program 2: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) 17:59:05 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "45505f648155ce2f557bc9ed2a57c6dcc41b975490b34f5684ee285718b8dc8219d61debb79958c9deef459fedd33f9bf1818029c5482e738f2f7f99069db248"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f0000000200)='+]!\x00') 17:59:05 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0xe402, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x412800, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x22800, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat(r0, &(0x7f00000008c0)='./file0\x00', 0x2b0102, 0x0) 17:59:05 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:05 executing program 0: syz_clone3(&(0x7f0000000240)={0x6200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:59:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0) 17:59:06 executing program 4: add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffff8) 17:59:06 executing program 3: socketpair(0x28, 0x0, 0x8, &(0x7f0000000040)) 17:59:06 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 17:59:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:59:06 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:06 executing program 3: connect$caif(0xffffffffffffffff, 0x0, 0x0) 17:59:06 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x7, 0xffffffffffffff69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x7}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_open_dev$hidraw(0x0, 0x3, 0x40) syz_usb_connect$cdc_ncm(0x4, 0x76, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x7, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "d7"}, {0x5, 0x24, 0x0, 0x3}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@network_terminal={0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xaa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0xf5, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x9}}}}}}}]}}, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc12, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xf7, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x6}]}, 0x1, [{0x74, &(0x7f00000001c0)=@string={0x74, 0x3, "e796e87bbb8d1046d1126c01a396121126b86e4ccae8f8dc557440b7f700c0d88d694a6a3be9f91f721e488fd7ba7dbccb471e448df83343cea5772d33665c062fb02954327c2eabc5f6d7118f97a4399070218b84967fe7c2d5cf571bbea70f8a05942a65d9d7939aa589ebad1ac8230303"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 17:59:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCSETS(r0, 0x10, 0x0) 17:59:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "5088b651c0f56bfb", "5bdffe00fc443d000000000200", "20a8a6be", "0ac3765f61437c46"}, 0x28) 17:59:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x1b) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 17:59:06 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup3(0xffffffffffffffff, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:07 executing program 5: syz_usb_connect$uac1(0x0, 0xc5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902"], 0x0) 17:59:07 executing program 3: openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 950.072202][ T3633] usb 1-1: new high-speed USB device number 15 using dummy_hcd 17:59:07 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup3(0xffffffffffffffff, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 950.312700][ T3633] usb 1-1: Using ep0 maxpacket: 16 17:59:07 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x103}) [ 950.454623][ T3633] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.466451][ T3633] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.476553][ T3633] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 950.485861][ T3633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.642135][ T3633] usb 1-1: config 0 descriptor?? 17:59:07 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup3(0xffffffffffffffff, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 950.772800][ T25] usb 4-1: new high-speed USB device number 17 using dummy_hcd 17:59:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @loopback}, {0x0, @multicast}, 0x8, {0x2, 0x0, @dev}, 'lo\x00'}) 17:59:07 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000180)={0xa}) [ 951.116729][T16556] UDC core: couldn't find an available UDC or it's busy: -16 [ 951.124812][T16556] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 951.303233][ T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 951.312768][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.321014][ T25] usb 4-1: Product: syz [ 951.325914][ T25] usb 4-1: Manufacturer: syz [ 951.330650][ T25] usb 4-1: SerialNumber: syz [ 951.392908][ T3633] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0042/input/input150 [ 951.488256][ T3633] input: HID 0458:5019 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5019.0042/input/input151 [ 951.525985][ T25] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 951.575110][ T3633] kye 0003:0458:5019.0042: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.0-1/input0 [ 951.646675][ T3633] usb 1-1: USB disconnect, device number 15 17:59:09 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000000c0)={0x0, 0x10}) 17:59:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) 17:59:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) 17:59:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x4f, 0xf31}, 0x24}}, 0x0) 17:59:09 executing program 4: write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1, 0x4, 0xa58d) 17:59:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) [ 952.103986][T16597] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 952.195813][T10966] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 952.417494][ T25] usb 4-1: USB disconnect, device number 17 17:59:10 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='lockproto=lock_nolock,data=ordered,lockproto=dlm,norecovery,commit=0x0000000000000080,loccookie']) 17:59:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) 17:59:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) 17:59:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x1, 0x0, 0x0, 't'}) 17:59:10 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000001c0)={0x78, r2, 0x133, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x5c, 0x33, @beacon={@with_ht={{{}, {}, @device_b}}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{}]}, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @val={0x71, 0x7}, @void}}]}, 0x78}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x541b, 0x0) 17:59:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) [ 953.026769][T16609] Restarting kernel threads ... done. [ 953.075662][T16613] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:59:10 executing program 5: syz_mount_image$gfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='lockproto=lock_nolock,data=ordered,lockproto=dlm,norecovery,commit=']) 17:59:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) 17:59:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) 17:59:10 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000001c0)={0x78, r2, 0x133, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x5c, 0x33, @beacon={@with_ht={{{}, {}, @device_b}}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{}]}, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @val={0x71, 0x7}, @void}}]}, 0x78}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x541b, 0x0) 17:59:10 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000001c0)={0x78, r2, 0x133, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x5c, 0x33, @beacon={@with_ht={{{}, {}, @device_b}}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{}]}, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @val={0x71, 0x7}, @void}}]}, 0x78}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x541b, 0x0) [ 953.275000][T16615] gfs2: not a GFS2 filesystem [ 953.292322][T10966] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 953.300159][T10966] ath9k_htc: Failed to initialize the device [ 953.307983][ T25] usb 4-1: ath9k_htc: USB layer deinitialized 17:59:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) 17:59:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) 17:59:10 executing program 1: r0 = creat(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:10 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000001c0)={0x78, r2, 0x133, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x5c, 0x33, @beacon={@with_ht={{{}, {}, @device_b}}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{}]}, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @val={0x71, 0x7}, @void}}]}, 0x78}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x541b, 0x0) 17:59:10 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000001c0)={0x78, r2, 0x133, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x5c, 0x33, @beacon={@with_ht={{{}, {}, @device_b}}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{}]}, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @val={0x71, 0x7}, @void}}]}, 0x78}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x541b, 0x0) 17:59:10 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff30, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030022000b04d25a80648c6394f93524fc601000034046000000053582c137153e37024825800d000000d1bd", 0x33fe0}], 0x1}, 0x0) 17:59:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000100)=0xbfb, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20008805, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:59:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) [ 954.006954][T16636] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 954.015798][T16636] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.5'. [ 954.086039][T16638] Restarting kernel threads ... done. 17:59:11 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000001c0)={0x78, r2, 0x133, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x5c, 0x33, @beacon={@with_ht={{{}, {}, @device_b}}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{}]}, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @val={0x71, 0x7}, @void}}]}, 0x78}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x541b, 0x0) 17:59:11 executing program 1: r0 = creat(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:11 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x7, {0x0, 0x0, 0x2, 0x5}}) 17:59:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @loopback}, {0x0, @multicast}, 0x8, {0x2, 0x0, @dev}, 'lo\x00'}) 17:59:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 17:59:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) [ 954.499433][T16645] Restarting kernel threads ... done. 17:59:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}}], 0x1, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x400) getsockname$unix(r1, &(0x7f00000000c0), &(0x7f0000000280)=0x6e) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x1dd00) 17:59:11 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000000c0)={0x0, 0x5}) 17:59:11 executing program 1: r0 = creat(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:11 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000001c0)={0x78, r2, 0x133, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x5c, 0x33, @beacon={@with_ht={{{}, {}, @device_b}}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{}]}, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @val={0x71, 0x7}, @void}}]}, 0x78}}, 0x0) 17:59:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) 17:59:12 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc0d05640, &(0x7f0000000140)={0x2}) [ 955.170722][T16666] Restarting kernel threads ... done. [ 955.199806][ T24] audit: type=1804 audit(1653501552.254:44): pid=16664 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir723785865/syzkaller.b3jNi7/944/bus" dev="sda1" ino=1178 res=1 errno=0 [ 955.225444][ T24] audit: type=1800 audit(1653501552.254:45): pid=16664 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1178 res=0 errno=0 17:59:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) 17:59:12 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:12 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000001c0)={0x78, r2, 0x133, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x5c, 0x33, @beacon={@with_ht={{{}, {}, @device_b}}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{}]}, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @void, @val={0x71, 0x7}, @void}}]}, 0x78}}, 0x0) 17:59:12 executing program 5: syz_usb_connect$uac1(0x0, 0xc5, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000010"], 0x0) 17:59:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 17:59:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) [ 956.014084][T16678] Restarting kernel threads ... done. [ 956.442805][T16661] not chained 670000 origins [ 956.447648][T16661] CPU: 1 PID: 16661 Comm: syz-executor.0 Not tainted 5.18.0-rc4-syzkaller #0 [ 956.456459][T16661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 956.466546][T16661] Call Trace: [ 956.469839][T16661] [ 956.472783][T16661] dump_stack_lvl+0x1ff/0x28e [ 956.477517][T16661] dump_stack+0x25/0x28 [ 956.481709][T16661] kmsan_internal_chain_origin+0x78/0x120 [ 956.487489][T16661] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 956.493612][T16661] ? kmsan_get_metadata+0x33/0x220 [ 956.498756][T16661] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 956.504609][T16661] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 956.510214][T16661] ? kmsan_get_metadata+0x33/0x220 [ 956.515368][T16661] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 956.521217][T16661] ? should_fail+0x75/0x9c0 [ 956.525762][T16661] ? kmsan_get_metadata+0x33/0x220 [ 956.530917][T16661] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 956.537224][T16661] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 956.543389][T16661] ? kmsan_get_metadata+0x33/0x220 [ 956.548548][T16661] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 956.554397][T16661] __msan_chain_origin+0xbf/0x140 [ 956.559473][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 956.564644][T16661] get_compat_msghdr+0x108/0x2c0 [ 956.569627][T16661] ? __sys_recvmmsg+0x51c/0x6f0 [ 956.574529][T16661] do_recvmmsg+0xd77/0x2120 [ 956.579105][T16661] ? __stack_depot_save+0x21/0x4b0 [ 956.584267][T16661] ? kmsan_get_metadata+0x33/0x220 [ 956.589425][T16661] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 956.595894][T16661] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 956.602017][T16661] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 956.608578][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 956.613323][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 956.619705][T16661] __do_fast_syscall_32+0x96/0xf0 [ 956.624777][T16661] do_fast_syscall_32+0x34/0x70 [ 956.629668][T16661] do_SYSENTER_32+0x1b/0x20 [ 956.634209][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 956.640584][T16661] RIP: 0023:0xf7f5b549 [ 956.644671][T16661] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 956.664316][T16661] RSP: 002b:00000000f7f355cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 956.672845][T16661] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 956.680839][T16661] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 956.688828][T16661] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 956.696816][T16661] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 956.704812][T16661] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 956.712819][T16661] [ 956.719911][T16661] Uninit was stored to memory at: [ 956.725587][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 956.730748][T16661] get_compat_msghdr+0x108/0x2c0 [ 956.735862][T16661] do_recvmmsg+0xd77/0x2120 [ 956.740415][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 956.745263][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 956.751760][T16661] __do_fast_syscall_32+0x96/0xf0 [ 956.756834][T16661] do_fast_syscall_32+0x34/0x70 [ 956.761848][T16661] do_SYSENTER_32+0x1b/0x20 [ 956.766395][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 956.772878][T16661] [ 956.775207][T16661] Uninit was stored to memory at: [ 956.780295][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 956.785558][T16661] get_compat_msghdr+0x108/0x2c0 [ 956.790539][T16661] do_recvmmsg+0xd77/0x2120 [ 956.795187][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 956.799907][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 956.806403][T16661] __do_fast_syscall_32+0x96/0xf0 [ 956.811474][T16661] do_fast_syscall_32+0x34/0x70 [ 956.816473][T16661] do_SYSENTER_32+0x1b/0x20 [ 956.821018][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 956.827506][T16661] [ 956.829834][T16661] Uninit was stored to memory at: [ 956.835037][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 956.840195][T16661] get_compat_msghdr+0x108/0x2c0 [ 956.845310][T16661] do_recvmmsg+0xd77/0x2120 [ 956.849858][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 956.854709][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 956.861088][T16661] __do_fast_syscall_32+0x96/0xf0 [ 956.866275][T16661] do_fast_syscall_32+0x34/0x70 [ 956.871176][T16661] do_SYSENTER_32+0x1b/0x20 [ 956.875846][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 956.882354][T16661] [ 956.884684][T16661] Uninit was stored to memory at: [ 956.889775][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 956.895072][T16661] get_compat_msghdr+0x108/0x2c0 [ 956.900060][T16661] do_recvmmsg+0xd77/0x2120 [ 956.904752][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 956.909513][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 956.916097][T16661] __do_fast_syscall_32+0x96/0xf0 [ 956.921192][T16661] do_fast_syscall_32+0x34/0x70 [ 956.926291][T16661] do_SYSENTER_32+0x1b/0x20 [ 956.930837][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 956.937403][T16661] [ 956.939743][T16661] Uninit was stored to memory at: [ 956.945009][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 956.950170][T16661] get_compat_msghdr+0x108/0x2c0 [ 956.955376][T16661] do_recvmmsg+0xd77/0x2120 [ 956.959936][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 956.964894][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 956.971281][T16661] __do_fast_syscall_32+0x96/0xf0 [ 956.976543][T16661] do_fast_syscall_32+0x34/0x70 [ 956.981452][T16661] do_SYSENTER_32+0x1b/0x20 [ 956.986146][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 956.992650][T16661] [ 956.994984][T16661] Uninit was stored to memory at: [ 957.000110][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 957.005402][T16661] get_compat_msghdr+0x108/0x2c0 [ 957.010391][T16661] do_recvmmsg+0xd77/0x2120 [ 957.015061][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 957.019789][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 957.026286][T16661] __do_fast_syscall_32+0x96/0xf0 [ 957.031362][T16661] do_fast_syscall_32+0x34/0x70 [ 957.036378][T16661] do_SYSENTER_32+0x1b/0x20 [ 957.040928][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 957.047456][T16661] [ 957.049802][T16661] Uninit was stored to memory at: [ 957.055085][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 957.060257][T16661] get_compat_msghdr+0x108/0x2c0 [ 957.065367][T16661] do_recvmmsg+0xd77/0x2120 [ 957.069923][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 957.074779][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 957.081169][T16661] __do_fast_syscall_32+0x96/0xf0 [ 957.086376][T16661] do_fast_syscall_32+0x34/0x70 [ 957.091276][T16661] do_SYSENTER_32+0x1b/0x20 [ 957.095960][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 957.102456][T16661] [ 957.104782][T16661] Local variable msg_sys created at: [ 957.110078][T16661] do_recvmmsg+0xbb/0x2120 [ 957.114670][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 957.377244][T16661] not chained 680000 origins [ 957.382327][T16661] CPU: 0 PID: 16661 Comm: syz-executor.0 Not tainted 5.18.0-rc4-syzkaller #0 [ 957.391134][T16661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 957.401261][T16661] Call Trace: [ 957.404549][T16661] [ 957.407493][T16661] dump_stack_lvl+0x1ff/0x28e [ 957.412228][T16661] dump_stack+0x25/0x28 [ 957.416434][T16661] kmsan_internal_chain_origin+0x78/0x120 [ 957.422219][T16661] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 957.428348][T16661] ? kmsan_get_metadata+0x33/0x220 [ 957.433475][T16661] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 957.439307][T16661] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 957.444889][T16661] ? kmsan_get_metadata+0x33/0x220 [ 957.450039][T16661] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 957.455887][T16661] ? should_fail+0x75/0x9c0 [ 957.460412][T16661] ? kmsan_get_metadata+0x33/0x220 [ 957.465560][T16661] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 957.471872][T16661] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 957.478005][T16661] ? kmsan_get_metadata+0x33/0x220 [ 957.483160][T16661] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 957.489010][T16661] __msan_chain_origin+0xbf/0x140 [ 957.494097][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 957.499269][T16661] get_compat_msghdr+0x108/0x2c0 [ 957.504239][T16661] ? __sys_recvmmsg+0x51c/0x6f0 [ 957.509143][T16661] do_recvmmsg+0xd77/0x2120 [ 957.513709][T16661] ? __stack_depot_save+0x21/0x4b0 [ 957.518877][T16661] ? kmsan_get_metadata+0x33/0x220 [ 957.524028][T16661] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 957.530335][T16661] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 957.536442][T16661] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 957.543008][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 957.547745][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 957.554118][T16661] __do_fast_syscall_32+0x96/0xf0 [ 957.559191][T16661] do_fast_syscall_32+0x34/0x70 [ 957.564067][T16661] do_SYSENTER_32+0x1b/0x20 [ 957.568594][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 957.574958][T16661] RIP: 0023:0xf7f5b549 [ 957.579045][T16661] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 957.598691][T16661] RSP: 002b:00000000f7f355cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 957.607131][T16661] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 957.615136][T16661] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 957.623214][T16661] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 957.631220][T16661] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 957.639223][T16661] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 957.647225][T16661] [ 957.652376][T16661] Uninit was stored to memory at: [ 957.657486][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 957.663508][T16661] get_compat_msghdr+0x108/0x2c0 [ 957.668512][T16661] do_recvmmsg+0xd77/0x2120 [ 957.673177][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 957.677909][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 957.684628][T16661] __do_fast_syscall_32+0x96/0xf0 [ 957.689704][T16661] do_fast_syscall_32+0x34/0x70 [ 957.694753][T16661] do_SYSENTER_32+0x1b/0x20 [ 957.699306][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 957.705798][T16661] [ 957.708136][T16661] Uninit was stored to memory at: [ 957.713372][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 957.718536][T16661] get_compat_msghdr+0x108/0x2c0 [ 957.723745][T16661] do_recvmmsg+0xd77/0x2120 [ 957.728304][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 957.733173][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 957.739563][T16661] __do_fast_syscall_32+0x96/0xf0 [ 957.744801][T16661] do_fast_syscall_32+0x34/0x70 [ 957.749699][T16661] do_SYSENTER_32+0x1b/0x20 [ 957.754379][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 957.760760][T16661] [ 957.763244][T16661] Uninit was stored to memory at: [ 957.768336][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 957.773675][T16661] get_compat_msghdr+0x108/0x2c0 [ 957.778665][T16661] do_recvmmsg+0xd77/0x2120 [ 957.783359][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 957.788090][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 957.794703][T16661] __do_fast_syscall_32+0x96/0xf0 [ 957.799782][T16661] do_fast_syscall_32+0x34/0x70 [ 957.804777][T16661] do_SYSENTER_32+0x1b/0x20 [ 957.809328][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 957.815823][T16661] [ 957.818155][T16661] Uninit was stored to memory at: [ 957.823383][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 957.828542][T16661] get_compat_msghdr+0x108/0x2c0 [ 957.833680][T16661] do_recvmmsg+0xd77/0x2120 [ 957.838234][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 957.843118][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 957.849506][T16661] __do_fast_syscall_32+0x96/0xf0 [ 957.854718][T16661] do_fast_syscall_32+0x34/0x70 [ 957.859618][T16661] do_SYSENTER_32+0x1b/0x20 [ 957.864297][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 957.870677][T16661] [ 957.873138][T16661] Uninit was stored to memory at: [ 957.878232][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 957.883521][T16661] get_compat_msghdr+0x108/0x2c0 [ 957.888507][T16661] do_recvmmsg+0xd77/0x2120 [ 957.893186][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 957.897913][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 957.904443][T16661] __do_fast_syscall_32+0x96/0xf0 [ 957.909953][T16661] do_fast_syscall_32+0x34/0x70 [ 957.914996][T16661] do_SYSENTER_32+0x1b/0x20 [ 957.919549][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 957.926055][T16661] [ 957.928391][T16661] Uninit was stored to memory at: [ 957.933644][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 957.938800][T16661] get_compat_msghdr+0x108/0x2c0 [ 957.943970][T16661] do_recvmmsg+0xd77/0x2120 [ 957.948510][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 957.953370][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 957.959850][T16661] __do_fast_syscall_32+0x96/0xf0 [ 957.965030][T16661] do_fast_syscall_32+0x34/0x70 [ 957.969931][T16661] do_SYSENTER_32+0x1b/0x20 [ 957.974644][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 957.981038][T16661] [ 957.983516][T16661] Uninit was stored to memory at: [ 957.988607][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 957.993945][T16661] get_compat_msghdr+0x108/0x2c0 [ 957.999025][T16661] do_recvmmsg+0xd77/0x2120 [ 958.003679][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 958.008502][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 958.015029][T16661] __do_fast_syscall_32+0x96/0xf0 [ 958.020105][T16661] do_fast_syscall_32+0x34/0x70 [ 958.025101][T16661] do_SYSENTER_32+0x1b/0x20 [ 958.029655][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 958.036147][T16661] [ 958.038479][T16661] Local variable msg_sys created at: [ 958.043912][T16661] do_recvmmsg+0xbb/0x2120 [ 958.048377][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 958.216337][T16661] not chained 690000 origins [ 958.221100][T16661] CPU: 1 PID: 16661 Comm: syz-executor.0 Not tainted 5.18.0-rc4-syzkaller #0 [ 958.229878][T16661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 958.239982][T16661] Call Trace: [ 958.243457][T16661] [ 958.246418][T16661] dump_stack_lvl+0x1ff/0x28e [ 958.251130][T16661] dump_stack+0x25/0x28 [ 958.255306][T16661] kmsan_internal_chain_origin+0x78/0x120 [ 958.261067][T16661] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 958.267181][T16661] ? kmsan_get_metadata+0x33/0x220 [ 958.272335][T16661] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 958.278168][T16661] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 958.283838][T16661] ? kmsan_get_metadata+0x33/0x220 [ 958.288965][T16661] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 958.294791][T16661] ? should_fail+0x75/0x9c0 [ 958.299309][T16661] ? kmsan_get_metadata+0x33/0x220 [ 958.304433][T16661] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 958.310705][T16661] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 958.316815][T16661] ? kmsan_get_metadata+0x33/0x220 [ 958.321964][T16661] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 958.327813][T16661] __msan_chain_origin+0xbf/0x140 [ 958.332964][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 958.338208][T16661] get_compat_msghdr+0x108/0x2c0 [ 958.343281][T16661] ? __sys_recvmmsg+0x51c/0x6f0 [ 958.348164][T16661] do_recvmmsg+0xd77/0x2120 [ 958.352715][T16661] ? __stack_depot_save+0x21/0x4b0 [ 958.357858][T16661] ? kmsan_get_metadata+0x33/0x220 [ 958.362991][T16661] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 958.369296][T16661] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 958.375409][T16661] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 958.381956][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 958.386671][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 958.393121][T16661] __do_fast_syscall_32+0x96/0xf0 [ 958.398174][T16661] do_fast_syscall_32+0x34/0x70 [ 958.403049][T16661] do_SYSENTER_32+0x1b/0x20 [ 958.407571][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 958.413930][T16661] RIP: 0023:0xf7f5b549 [ 958.418019][T16661] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 958.437674][T16661] RSP: 002b:00000000f7f355cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 958.446108][T16661] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 958.454093][T16661] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 958.462073][T16661] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 958.470069][T16661] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 958.478061][T16661] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 958.486051][T16661] [ 958.492711][T16661] Uninit was stored to memory at: [ 958.497837][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 958.503657][T16661] get_compat_msghdr+0x108/0x2c0 [ 958.508656][T16661] do_recvmmsg+0xd77/0x2120 [ 958.513343][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 958.518071][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 958.524627][T16661] __do_fast_syscall_32+0x96/0xf0 [ 958.529704][T16661] do_fast_syscall_32+0x34/0x70 [ 958.534737][T16661] do_SYSENTER_32+0x1b/0x20 [ 958.539290][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 958.545848][T16661] [ 958.548187][T16661] Uninit was stored to memory at: [ 958.553461][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 958.558620][T16661] get_compat_msghdr+0x108/0x2c0 [ 958.563728][T16661] do_recvmmsg+0xd77/0x2120 [ 958.568297][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 958.573303][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 958.579690][T16661] __do_fast_syscall_32+0x96/0xf0 [ 958.584939][T16661] do_fast_syscall_32+0x34/0x70 [ 958.589841][T16661] do_SYSENTER_32+0x1b/0x20 [ 958.594504][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 958.600974][T16661] [ 958.603421][T16661] Uninit was stored to memory at: [ 958.608505][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 958.613829][T16661] get_compat_msghdr+0x108/0x2c0 [ 958.619002][T16661] do_recvmmsg+0xd77/0x2120 [ 958.623728][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 958.628549][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 958.635129][T16661] __do_fast_syscall_32+0x96/0xf0 [ 958.640199][T16661] do_fast_syscall_32+0x34/0x70 [ 958.645264][T16661] do_SYSENTER_32+0x1b/0x20 [ 958.649832][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 958.656380][T16661] [ 958.658716][T16661] Uninit was stored to memory at: [ 958.663938][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 958.669311][T16661] get_compat_msghdr+0x108/0x2c0 [ 958.674546][T16661] do_recvmmsg+0xd77/0x2120 [ 958.679097][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 958.683990][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 958.690370][T16661] __do_fast_syscall_32+0x96/0xf0 [ 958.695602][T16661] do_fast_syscall_32+0x34/0x70 [ 958.700586][T16661] do_SYSENTER_32+0x1b/0x20 [ 958.705306][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 958.711801][T16661] [ 958.714132][T16661] Uninit was stored to memory at: [ 958.719208][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 958.724476][T16661] get_compat_msghdr+0x108/0x2c0 [ 958.729547][T16661] do_recvmmsg+0xd77/0x2120 [ 958.734254][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 958.738979][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 958.745698][T16661] __do_fast_syscall_32+0x96/0xf0 [ 958.750786][T16661] do_fast_syscall_32+0x34/0x70 [ 958.755831][T16661] do_SYSENTER_32+0x1b/0x20 [ 958.760378][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 958.766872][T16661] [ 958.769204][T16661] Uninit was stored to memory at: [ 958.774518][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 958.779674][T16661] get_compat_msghdr+0x108/0x2c0 [ 958.784836][T16661] do_recvmmsg+0xd77/0x2120 [ 958.789394][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 958.794284][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 958.800676][T16661] __do_fast_syscall_32+0x96/0xf0 [ 958.805965][T16661] do_fast_syscall_32+0x34/0x70 [ 958.810900][T16661] do_SYSENTER_32+0x1b/0x20 [ 958.815661][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 958.822388][T16661] [ 958.824734][T16661] Uninit was stored to memory at: [ 958.829873][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 958.835254][T16661] get_compat_msghdr+0x108/0x2c0 [ 958.840248][T16661] do_recvmmsg+0xd77/0x2120 [ 958.845016][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 958.849770][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 958.856300][T16661] __do_fast_syscall_32+0x96/0xf0 [ 958.861412][T16661] do_fast_syscall_32+0x34/0x70 [ 958.866430][T16661] do_SYSENTER_32+0x1b/0x20 [ 958.871017][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 958.877557][T16661] [ 958.879913][T16661] Local variable msg_sys created at: [ 958.885947][T16661] do_recvmmsg+0xbb/0x2120 [ 958.890509][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 959.067721][T16661] not chained 700000 origins [ 959.072438][T16661] CPU: 1 PID: 16661 Comm: syz-executor.0 Not tainted 5.18.0-rc4-syzkaller #0 [ 959.081330][T16661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 959.091417][T16661] Call Trace: [ 959.094702][T16661] [ 959.097694][T16661] dump_stack_lvl+0x1ff/0x28e [ 959.102404][T16661] dump_stack+0x25/0x28 [ 959.106741][T16661] kmsan_internal_chain_origin+0x78/0x120 [ 959.112538][T16661] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 959.118654][T16661] ? kmsan_get_metadata+0x33/0x220 [ 959.123804][T16661] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 959.129739][T16661] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 959.135345][T16661] ? kmsan_get_metadata+0x33/0x220 [ 959.140624][T16661] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 959.146595][T16661] ? should_fail+0x75/0x9c0 [ 959.151168][T16661] ? kmsan_get_metadata+0x33/0x220 [ 959.156311][T16661] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 959.162633][T16661] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 959.168758][T16661] ? kmsan_get_metadata+0x33/0x220 [ 959.173894][T16661] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 959.179741][T16661] __msan_chain_origin+0xbf/0x140 [ 959.184821][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 959.184908][T16661] get_compat_msghdr+0x108/0x2c0 [ 959.184976][T16661] ? __sys_recvmmsg+0x51c/0x6f0 [ 959.199852][T16661] do_recvmmsg+0xd77/0x2120 [ 959.204513][T16661] ? __stack_depot_save+0x21/0x4b0 [ 959.209758][T16661] ? kmsan_get_metadata+0x33/0x220 [ 959.215009][T16661] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 959.221301][T16661] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 959.227419][T16661] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 959.234058][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 959.238809][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 959.245206][T16661] __do_fast_syscall_32+0x96/0xf0 [ 959.250288][T16661] do_fast_syscall_32+0x34/0x70 [ 959.255169][T16661] do_SYSENTER_32+0x1b/0x20 [ 959.259701][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 959.266084][T16661] RIP: 0023:0xf7f5b549 [ 959.270165][T16661] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 959.291715][T16661] RSP: 002b:00000000f7f355cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 959.300182][T16661] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 959.308256][T16661] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 959.316260][T16661] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 959.324241][T16661] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 959.332240][T16661] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 959.340262][T16661] [ 959.347974][T16661] Uninit was stored to memory at: [ 959.353958][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 959.359124][T16661] get_compat_msghdr+0x108/0x2c0 [ 959.364242][T16661] do_recvmmsg+0xd77/0x2120 [ 959.368800][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 959.373660][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 959.380046][T16661] __do_fast_syscall_32+0x96/0xf0 [ 959.385253][T16661] do_fast_syscall_32+0x34/0x70 [ 959.390178][T16661] do_SYSENTER_32+0x1b/0x20 [ 959.394966][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 959.401350][T16661] [ 959.403856][T16661] Uninit was stored to memory at: [ 959.408947][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 959.414186][T16661] get_compat_msghdr+0x108/0x2c0 [ 959.419150][T16661] do_recvmmsg+0xd77/0x2120 [ 959.423854][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 959.428580][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 959.435092][T16661] __do_fast_syscall_32+0x96/0xf0 [ 959.440162][T16661] do_fast_syscall_32+0x34/0x70 [ 959.445168][T16661] do_SYSENTER_32+0x1b/0x20 [ 959.449720][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 959.456259][T16661] [ 959.458595][T16661] Uninit was stored to memory at: [ 959.463873][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 959.469028][T16661] get_compat_msghdr+0x108/0x2c0 [ 959.474142][T16661] do_recvmmsg+0xd77/0x2120 [ 959.478783][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 959.483686][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 959.490076][T16661] __do_fast_syscall_32+0x96/0xf0 [ 959.495289][T16661] do_fast_syscall_32+0x34/0x70 [ 959.500193][T16661] do_SYSENTER_32+0x1b/0x20 [ 959.504866][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 959.511248][T16661] [ 959.513770][T16661] Uninit was stored to memory at: [ 959.518861][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 959.524176][T16661] get_compat_msghdr+0x108/0x2c0 [ 959.529164][T16661] do_recvmmsg+0xd77/0x2120 [ 959.533850][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 959.538572][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 959.545128][T16661] __do_fast_syscall_32+0x96/0xf0 [ 959.550203][T16661] do_fast_syscall_32+0x34/0x70 [ 959.555223][T16661] do_SYSENTER_32+0x1b/0x20 [ 959.559766][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 959.566294][T16661] [ 959.568631][T16661] Uninit was stored to memory at: [ 959.573915][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 959.579077][T16661] get_compat_msghdr+0x108/0x2c0 [ 959.584204][T16661] do_recvmmsg+0xd77/0x2120 [ 959.588757][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 959.593605][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 959.600080][T16661] __do_fast_syscall_32+0x96/0xf0 [ 959.605335][T16661] do_fast_syscall_32+0x34/0x70 [ 959.610293][T16661] do_SYSENTER_32+0x1b/0x20 [ 959.614982][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 959.621372][T16661] [ 959.623904][T16661] Uninit was stored to memory at: [ 959.629093][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 959.634421][T16661] get_compat_msghdr+0x108/0x2c0 [ 959.639414][T16661] do_recvmmsg+0xd77/0x2120 [ 959.644152][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 959.649061][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 959.655582][T16661] __do_fast_syscall_32+0x96/0xf0 [ 959.660754][T16661] do_fast_syscall_32+0x34/0x70 [ 959.665790][T16661] do_SYSENTER_32+0x1b/0x20 [ 959.670348][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 959.676933][T16661] [ 959.679271][T16661] Uninit was stored to memory at: [ 959.684533][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 959.689693][T16661] get_compat_msghdr+0x108/0x2c0 [ 959.694805][T16661] do_recvmmsg+0xd77/0x2120 [ 959.699356][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 959.704257][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 959.710649][T16661] __do_fast_syscall_32+0x96/0xf0 [ 959.715867][T16661] do_fast_syscall_32+0x34/0x70 [ 959.720776][T16661] do_SYSENTER_32+0x1b/0x20 [ 959.725450][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 959.731943][T16661] [ 959.734283][T16661] Local variable msg_sys created at: [ 959.739576][T16661] do_recvmmsg+0xbb/0x2120 [ 959.744203][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 959.918307][T16661] not chained 710000 origins [ 959.923002][T16661] CPU: 1 PID: 16661 Comm: syz-executor.0 Not tainted 5.18.0-rc4-syzkaller #0 [ 959.931782][T16661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 959.941852][T16661] Call Trace: [ 959.945129][T16661] [ 959.948053][T16661] dump_stack_lvl+0x1ff/0x28e [ 959.952759][T16661] dump_stack+0x25/0x28 [ 959.956930][T16661] kmsan_internal_chain_origin+0x78/0x120 [ 959.962695][T16661] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 959.968795][T16661] ? kmsan_get_metadata+0x33/0x220 [ 959.973921][T16661] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 959.979747][T16661] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 959.985335][T16661] ? kmsan_get_metadata+0x33/0x220 [ 959.990484][T16661] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 959.996331][T16661] ? should_fail+0x75/0x9c0 [ 960.000853][T16661] ? kmsan_get_metadata+0x33/0x220 [ 960.005982][T16661] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 960.012254][T16661] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 960.018356][T16661] ? kmsan_get_metadata+0x33/0x220 [ 960.023477][T16661] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 960.029301][T16661] __msan_chain_origin+0xbf/0x140 [ 960.034359][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 960.039537][T16661] get_compat_msghdr+0x108/0x2c0 [ 960.044521][T16661] ? __sys_recvmmsg+0x51c/0x6f0 [ 960.049399][T16661] do_recvmmsg+0xd77/0x2120 [ 960.053947][T16661] ? __stack_depot_save+0x21/0x4b0 [ 960.059086][T16661] ? kmsan_get_metadata+0x33/0x220 [ 960.064212][T16661] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 960.070489][T16661] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 960.076587][T16661] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 960.083129][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 960.087876][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 960.094268][T16661] __do_fast_syscall_32+0x96/0xf0 [ 960.099331][T16661] do_fast_syscall_32+0x34/0x70 [ 960.104214][T16661] do_SYSENTER_32+0x1b/0x20 [ 960.108745][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 960.115115][T16661] RIP: 0023:0xf7f5b549 [ 960.119192][T16661] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 960.138825][T16661] RSP: 002b:00000000f7f355cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 960.147279][T16661] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 960.155265][T16661] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 960.163240][T16661] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 960.171339][T16661] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 960.179402][T16661] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 960.187399][T16661] [ 960.194416][T16661] Uninit was stored to memory at: [ 960.199527][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 960.205347][T16661] get_compat_msghdr+0x108/0x2c0 [ 960.210336][T16661] do_recvmmsg+0xd77/0x2120 [ 960.215020][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 960.219759][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 960.226266][T16661] __do_fast_syscall_32+0x96/0xf0 [ 960.231350][T16661] do_fast_syscall_32+0x34/0x70 [ 960.236367][T16661] do_SYSENTER_32+0x1b/0x20 [ 960.240916][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 960.247651][T16661] [ 960.249996][T16661] Uninit was stored to memory at: [ 960.255249][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 960.260403][T16661] get_compat_msghdr+0x108/0x2c0 [ 960.265558][T16661] do_recvmmsg+0xd77/0x2120 [ 960.270116][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 960.275030][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 960.281411][T16661] __do_fast_syscall_32+0x96/0xf0 [ 960.286645][T16661] do_fast_syscall_32+0x34/0x70 [ 960.291549][T16661] do_SYSENTER_32+0x1b/0x20 [ 960.296216][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 960.302729][T16661] [ 960.305069][T16661] Uninit was stored to memory at: [ 960.310145][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 960.315464][T16661] get_compat_msghdr+0x108/0x2c0 [ 960.320449][T16661] do_recvmmsg+0xd77/0x2120 [ 960.325111][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 960.329832][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 960.336382][T16661] __do_fast_syscall_32+0x96/0xf0 [ 960.341461][T16661] do_fast_syscall_32+0x34/0x70 [ 960.346469][T16661] do_SYSENTER_32+0x1b/0x20 [ 960.351018][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 960.357573][T16661] [ 960.359905][T16661] Uninit was stored to memory at: [ 960.365091][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 960.370246][T16661] get_compat_msghdr+0x108/0x2c0 [ 960.375336][T16661] do_recvmmsg+0xd77/0x2120 [ 960.379886][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 960.384718][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 960.391103][T16661] __do_fast_syscall_32+0x96/0xf0 [ 960.396304][T16661] do_fast_syscall_32+0x34/0x70 [ 960.401206][T16661] do_SYSENTER_32+0x1b/0x20 [ 960.405858][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 960.412348][T16661] [ 960.414679][T16661] Uninit was stored to memory at: [ 960.419776][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 960.425127][T16661] get_compat_msghdr+0x108/0x2c0 [ 960.430104][T16661] do_recvmmsg+0xd77/0x2120 [ 960.434778][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 960.439501][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 960.445983][T16661] __do_fast_syscall_32+0x96/0xf0 [ 960.451051][T16661] do_fast_syscall_32+0x34/0x70 [ 960.456070][T16661] do_SYSENTER_32+0x1b/0x20 [ 960.460626][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 960.467129][T16661] [ 960.469463][T16661] Uninit was stored to memory at: [ 960.474742][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 960.479901][T16661] get_compat_msghdr+0x108/0x2c0 [ 960.485016][T16661] do_recvmmsg+0xd77/0x2120 [ 960.489570][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 960.494468][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 960.501035][T16661] __do_fast_syscall_32+0x96/0xf0 [ 960.506238][T16661] do_fast_syscall_32+0x34/0x70 [ 960.511145][T16661] do_SYSENTER_32+0x1b/0x20 [ 960.515830][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 960.522329][T16661] [ 960.524663][T16661] Uninit was stored to memory at: [ 960.529764][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 960.535048][T16661] get_compat_msghdr+0x108/0x2c0 [ 960.540031][T16661] do_recvmmsg+0xd77/0x2120 [ 960.544699][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 960.549461][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 960.555964][T16661] __do_fast_syscall_32+0x96/0xf0 [ 960.561043][T16661] do_fast_syscall_32+0x34/0x70 [ 960.566081][T16661] do_SYSENTER_32+0x1b/0x20 [ 960.570738][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 960.577324][T16661] [ 960.579682][T16661] Local variable msg_sys created at: [ 960.585137][T16661] do_recvmmsg+0xbb/0x2120 [ 960.589605][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 960.780779][T16661] not chained 720000 origins [ 960.785701][T16661] CPU: 0 PID: 16661 Comm: syz-executor.0 Not tainted 5.18.0-rc4-syzkaller #0 [ 960.794514][T16661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 960.804601][T16661] Call Trace: [ 960.807904][T16661] [ 960.810848][T16661] dump_stack_lvl+0x1ff/0x28e [ 960.815572][T16661] dump_stack+0x25/0x28 [ 960.819858][T16661] kmsan_internal_chain_origin+0x78/0x120 [ 960.825615][T16661] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 960.831749][T16661] ? kmsan_get_metadata+0x33/0x220 [ 960.836894][T16661] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 960.842749][T16661] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 960.848353][T16661] ? kmsan_get_metadata+0x33/0x220 [ 960.853482][T16661] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 960.859327][T16661] ? should_fail+0x75/0x9c0 [ 960.863870][T16661] ? kmsan_get_metadata+0x33/0x220 [ 960.869014][T16661] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 960.875291][T16661] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 960.881391][T16661] ? kmsan_get_metadata+0x33/0x220 [ 960.886521][T16661] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 960.892350][T16661] __msan_chain_origin+0xbf/0x140 [ 960.897431][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 960.902607][T16661] get_compat_msghdr+0x108/0x2c0 [ 960.907604][T16661] ? __sys_recvmmsg+0x51c/0x6f0 [ 960.912490][T16661] do_recvmmsg+0xd77/0x2120 [ 960.917067][T16661] ? __stack_depot_save+0x21/0x4b0 [ 960.922209][T16661] ? kmsan_get_metadata+0x33/0x220 [ 960.927443][T16661] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 960.933835][T16661] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 960.939972][T16661] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 960.946520][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 960.951263][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 960.957639][T16661] __do_fast_syscall_32+0x96/0xf0 [ 960.962714][T16661] do_fast_syscall_32+0x34/0x70 [ 960.967607][T16661] do_SYSENTER_32+0x1b/0x20 [ 960.972136][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 960.978519][T16661] RIP: 0023:0xf7f5b549 [ 960.982596][T16661] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 961.002352][T16661] RSP: 002b:00000000f7f355cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 961.010822][T16661] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 961.018924][T16661] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 961.026923][T16661] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 961.034915][T16661] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 961.042913][T16661] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 961.050922][T16661] [ 961.056103][T16661] Uninit was stored to memory at: [ 961.061222][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 961.066760][T16661] get_compat_msghdr+0x108/0x2c0 [ 961.071839][T16661] do_recvmmsg+0xd77/0x2120 [ 961.076396][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 961.081117][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 961.087604][T16661] __do_fast_syscall_32+0x96/0xf0 [ 961.092778][T16661] do_fast_syscall_32+0x34/0x70 [ 961.097676][T16661] do_SYSENTER_32+0x1b/0x20 [ 961.102445][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 961.108831][T16661] [ 961.111160][T16661] Uninit was stored to memory at: [ 961.116399][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 961.121565][T16661] get_compat_msghdr+0x108/0x2c0 [ 961.126677][T16661] do_recvmmsg+0xd77/0x2120 [ 961.131241][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 961.136114][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 961.142597][T16661] __do_fast_syscall_32+0x96/0xf0 [ 961.147679][T16661] do_fast_syscall_32+0x34/0x70 [ 961.152727][T16661] do_SYSENTER_32+0x1b/0x20 [ 961.157276][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 961.163793][T16661] [ 961.166239][T16661] Uninit was stored to memory at: [ 961.171323][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 961.176629][T16661] get_compat_msghdr+0x108/0x2c0 [ 961.181625][T16661] do_recvmmsg+0xd77/0x2120 [ 961.186330][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 961.191033][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 961.197507][T16661] __do_fast_syscall_32+0x96/0xf0 [ 961.202938][T16661] do_fast_syscall_32+0x34/0x70 [ 961.207845][T16661] do_SYSENTER_32+0x1b/0x20 [ 961.212554][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 961.218944][T16661] [ 961.221351][T16661] Uninit was stored to memory at: [ 961.226557][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 961.231800][T16661] get_compat_msghdr+0x108/0x2c0 [ 961.236784][T16661] do_recvmmsg+0xd77/0x2120 [ 961.241457][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 961.246311][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 961.252820][T16661] __do_fast_syscall_32+0x96/0xf0 [ 961.257906][T16661] do_fast_syscall_32+0x34/0x70 [ 961.262960][T16661] do_SYSENTER_32+0x1b/0x20 [ 961.267783][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 961.274327][T16661] [ 961.276662][T16661] Uninit was stored to memory at: [ 961.281875][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 961.287028][T16661] get_compat_msghdr+0x108/0x2c0 [ 961.292135][T16661] do_recvmmsg+0xd77/0x2120 [ 961.296696][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 961.301402][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 961.307890][T16661] __do_fast_syscall_32+0x96/0xf0 [ 961.313051][T16661] do_fast_syscall_32+0x34/0x70 [ 961.317945][T16661] do_SYSENTER_32+0x1b/0x20 [ 961.322619][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 961.328996][T16661] [ 961.331312][T16661] Uninit was stored to memory at: [ 961.336500][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 961.341740][T16661] get_compat_msghdr+0x108/0x2c0 [ 961.346721][T16661] do_recvmmsg+0xd77/0x2120 [ 961.351246][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 961.356149][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 961.362635][T16661] __do_fast_syscall_32+0x96/0xf0 [ 961.367710][T16661] do_fast_syscall_32+0x34/0x70 [ 961.372733][T16661] do_SYSENTER_32+0x1b/0x20 [ 961.377283][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 961.383843][T16661] [ 961.386196][T16661] Uninit was stored to memory at: [ 961.391274][T16661] __get_compat_msghdr+0x6e1/0x9d0 [ 961.396529][T16661] get_compat_msghdr+0x108/0x2c0 [ 961.401525][T16661] do_recvmmsg+0xd77/0x2120 [ 961.406166][T16661] __sys_recvmmsg+0x51c/0x6f0 [ 961.410895][T16661] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 961.417533][T16661] __do_fast_syscall_32+0x96/0xf0 [ 961.422703][T16661] do_fast_syscall_32+0x34/0x70 [ 961.427619][T16661] do_SYSENTER_32+0x1b/0x20 [ 961.432302][T16661] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 961.438684][T16661] [ 961.441001][T16661] Local variable msg_sys created at: [ 961.446394][T16661] do_recvmmsg+0xbb/0x2120 [ 961.450858][T16661] __sys_recvmmsg+0x51c/0x6f0 17:59:18 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x7, {0x0, 0x0, 0x2}}) 17:59:18 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:18 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 17:59:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) 17:59:18 executing program 5: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000100)=0xbfb, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1, &(0x7f0000000240)}, 0x0) unshare(0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008805, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) pipe2(&(0x7f00000002c0), 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300), 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60e900000000000000000000ffeaffffffff2dc3d4760000000000018902d2ffc82c26f20444907800000000fc000000000000000000000000fe880000000000000000000000000001c69143d13b32ec0aae3929471c6e0d819d600c97a544882c00d01dd14cb96300000000000000000000000000dc8149016798f8b929ccbf1a706643b462b523a683cc5c51c7e6bc2b2ff384cdaea5c6e4964fac6b6dbb879909be3e710eae72ba8457a7b12ff15b9b54499be3ea7f97f509cc8af2d5f6bfc4ca2d2213b37fbab1f556edc784f785cd678236eb04fdb4186d5d5720fa598a1941b8ce8658"], 0x0) 17:59:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 17:59:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) 17:59:18 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x7, {0x0, 0x0, 0x2, 0x2}}) [ 961.777755][T16692] Restarting kernel threads ... done. 17:59:19 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:19 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 17:59:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup3(r0, r1, 0x0) 17:59:19 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x7, {0x0, 0x0, 0x2, 0x2}}) 17:59:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) [ 962.295732][T16705] Restarting kernel threads ... done. 17:59:19 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) 17:59:19 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 17:59:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={0x0}}, 0x0) 17:59:19 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x7, {0x0, 0x0, 0x2, 0x2}}) 17:59:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) 17:59:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0x208e24b) read$FUSE(r0, 0x0, 0x0) 17:59:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) close(r0) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, 0x0) [ 963.053384][T16721] Restarting kernel threads ... done. 17:59:20 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x7, {0x0, 0x0, 0x2, 0x2}}) 17:59:20 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) 17:59:20 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:20 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x89a0, &(0x7f0000000000)={{0x2, 0x0, @loopback}, {0x0, @multicast}, 0x18, {0x2, 0x0, @empty}}) [ 963.572949][T16736] Restarting kernel threads ... done. 17:59:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) 17:59:20 executing program 3: ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x7, {0x0, 0x0, 0x2, 0x2}}) 17:59:20 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0xfffff63d}, 0x20}}, 0x0) pselect6(0x40, &(0x7f00000064c0)={0x8}, 0x0, &(0x7f0000006540)={0x79}, 0x0, 0x0) 17:59:21 executing program 5: syz_mount_image$ntfs3(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x0, &(0x7f00000025c0)={[{@gid={'gid', 0x3d, 0xee00}}, {@acl}]}) [ 964.107215][T16746] Restarting kernel threads ... done. 17:59:21 executing program 3: ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x7, {0x0, 0x0, 0x2, 0x2}}) 17:59:21 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(0xffffffffffffffff, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r1, r0, 0x0) 17:59:21 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) 17:59:21 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) 17:59:21 executing program 3: ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x7, {0x0, 0x0, 0x2, 0x2}}) [ 964.508089][T16756] Restarting kernel threads ... done. 17:59:21 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) 17:59:21 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(0xffffffffffffffff, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r1, r0, 0x0) 17:59:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TCFLSH(r1, 0x540b, 0x2) 17:59:22 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x7, {0x0, 0x0, 0x2, 0x2}}) 17:59:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) fremovexattr(r1, &(0x7f0000000080)=@random={'btrfs.', '+\'&\x94\x00'}) 17:59:22 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(0xffffffffffffffff, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:22 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(0xffffffffffffffff, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r1, r0, 0x0) [ 965.106305][T16768] Restarting kernel threads ... done. 17:59:22 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) 17:59:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @timestamp, @mss, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) 17:59:22 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x7, {0x0, 0x0, 0x2, 0x2}}) 17:59:22 executing program 0: r0 = socket(0x28, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x28, 0x6, 0x0, 0x700) 17:59:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) 17:59:22 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(0xffffffffffffffff, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:22 executing program 5: ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001880)=[@text32={0x20, &(0x7f0000001840)="66b8f4000f00d08fe808870e003e0f320f32640f00de3e65f30f1100262e0f01c2b805000000b90001c0fe0f01d9260f01c20f01c3", 0x35}], 0x1, 0x0, &(0x7f00000018c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17:59:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) 17:59:22 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x7, {0x0, 0x0, 0x2, 0x2}}) 17:59:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) 17:59:23 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:23 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(0xffffffffffffffff, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:23 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x300}}) 17:59:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) [ 966.203224][T16800] Restarting kernel threads ... done. 17:59:23 executing program 3: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x7, {0x0, 0x0, 0x2, 0x2}}) 17:59:23 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCSETS(r0, 0x5437, 0x0) 17:59:23 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) 17:59:23 executing program 3: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x7, {0x0, 0x0, 0x2, 0x2}}) [ 966.748110][T16814] Restarting kernel threads ... done. 17:59:23 executing program 5: syz_usb_connect$uac1(0x0, 0xc5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902b30003010200000904000000010100000a2401a002ff0201020a2405"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 17:59:24 executing program 0: syz_usb_connect$uac1(0x0, 0xc5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902b300030102"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 17:59:24 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:24 executing program 3: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x7, {0x0, 0x0, 0x2, 0x2}}) 17:59:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) 17:59:24 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 967.198849][T16825] Restarting kernel threads ... done. 17:59:24 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:24 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) 17:59:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) [ 967.462037][ T3633] usb 1-1: new high-speed USB device number 16 using dummy_hcd 17:59:24 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:24 executing program 5: syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, &(0x7f0000001440), 0x0, &(0x7f0000001500)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) [ 967.651146][T16834] Restarting kernel threads ... done. [ 967.712358][ T3633] usb 1-1: Using ep0 maxpacket: 16 17:59:24 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) 17:59:24 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) [ 967.872382][ T3633] usb 1-1: unable to get BOS descriptor or descriptor too short [ 967.964789][ T3633] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 967.975524][ T3633] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 968.185134][T16846] Restarting kernel threads ... done. [ 968.202752][ T3633] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 968.212344][ T3633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.220503][ T3633] usb 1-1: Product: syz [ 968.225035][ T3633] usb 1-1: Manufacturer: syz [ 968.229761][ T3633] usb 1-1: SerialNumber: syz [ 968.612626][ T3633] usb 1-1: USB disconnect, device number 16 17:59:26 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) 17:59:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) 17:59:26 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) 17:59:26 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x0, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:26 executing program 5: syz_mount_image$gfs2(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x1008000, &(0x7f0000000300)) 17:59:26 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:26 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4a364529da4300ee1109cb7c9aa57f8cb", 0x22, 0x4200}], 0x0, &(0x7f00000003c0)=ANY=[]) socket(0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) [ 969.223673][T16857] Restarting kernel threads ... done. 17:59:26 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x0, 0x0, 0x7, {0x0, 0x0, 0x2, 0x2}}) 17:59:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) 17:59:26 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x0, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:26 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:26 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x0, 0x0, 0x7, {0x0, 0x0, 0x2, 0x2}}) 17:59:27 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x0, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) 17:59:27 executing program 5: syz_mount_image$udf(&(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000a80)=[{0x0, 0x0, 0x1ff}], 0x0, &(0x7f0000004c40)={[{@unhide}, {@nostrict}, {@adinicb}]}) 17:59:27 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:27 executing program 0: syz_mount_image$gfs2(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@commit={'commit', 0x3d, 0x2}}]}) 17:59:27 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x0, 0x0, 0x7, {0x0, 0x0, 0x2, 0x2}}) 17:59:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) 17:59:27 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:27 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @loopback}, {0x0, @multicast}, 0x18, {0x2, 0x0, @empty}}) 17:59:27 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_mount_image$erofs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:59:27 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:27 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x0, 0x0, 0x2, 0x2}}) 17:59:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) 17:59:27 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 970.616049][ T24] audit: type=1326 audit(1653501567.674:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16894 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f5b549 code=0x0 17:59:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 970.816097][T16897] Restarting kernel threads ... done. 17:59:28 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x0, 0x0, 0x2, 0x2}}) 17:59:28 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:28 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:59:28 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) 17:59:28 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x0, 0x0, 0x2, 0x2}}) 17:59:28 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x1261, 0x0, 0x0, 0x0, 0x30000000) 17:59:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) [ 971.507038][T16915] Restarting kernel threads ... done. 17:59:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) 17:59:28 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:28 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:28 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x7, {0x0, 0x0, 0x0, 0x2}}) 17:59:29 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @loopback}, {0x0, @multicast}, 0x0, {0x2, 0x0, @empty}}) 17:59:29 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x1261, 0x0, 0x0, 0x0, 0x30000000) [ 972.042988][T16928] Restarting kernel threads ... done. 17:59:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) 17:59:29 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:29 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x7, {0x0, 0x0, 0x0, 0x2}}) 17:59:29 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) 17:59:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r2, r1, 0x0) [ 972.585815][T16948] Restarting kernel threads ... done. 17:59:29 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x7, {0x0, 0x0, 0x0, 0x2}}) 17:59:29 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x1261, 0x0, 0x0, 0x0, 0x30000000) 17:59:29 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x2}) 17:59:29 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:29 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 17:59:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup3(r2, r1, 0x0) 17:59:30 executing program 5: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f00000000c0)) [ 973.036347][T16960] Restarting kernel threads ... done. 17:59:30 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x7, {0x0, 0x0, 0x2}}) 17:59:30 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x1261, 0x0, 0x0, 0x0, 0x30000000) 17:59:30 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:30 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x0, 0x0) 17:59:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup3(r2, r1, 0x0) 17:59:30 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x7, {0x0, 0x0, 0x2}}) 17:59:30 executing program 5: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f00000000c0)) [ 973.553981][T16971] Restarting kernel threads ... done. 17:59:30 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x0, 0x0) 17:59:30 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r0, 0x1261, 0x0, 0x0, 0x0, 0x30000000) 17:59:30 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:30 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x7, {0x0, 0x0, 0x2}}) 17:59:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup3(r2, r1, 0x0) 17:59:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000200), 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=@delchain={0x1e84, 0x65, 0x1, 0x0, 0x0, {}, [@filter_kind_options=@f_tcindex={{0x4}, {0x87c, 0x2, [@TCA_TCINDEX_POLICE={0x870, 0x6, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc}]}, @TCA_TCINDEX_CLASSID={0x8}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x15c8, 0x2, [@TCA_BPF_CLASSID={0x8}, @TCA_BPF_ACT={0x15bc, 0x1, [@m_skbedit={0x12c, 0x0, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}, @TCA_SKBEDIT_MARK={0x8}]}, {0xc5, 0x6, "0fe869a1fe43d1be72528bb5a71298a959744ea786a6d559026a625ba7085b7c759ae349e20242f80952e767817c34c7a9b61897500aa97ebb5849aee870082bc694f94408f5fa14e37db2131a5d76a5dcf980a0b94bd08ba735da9bce77bd4ed37680b99a1d308bda35f9f27bb8c44e149302a77199f4e0bda76e3294ac964b835fd8b0a63d2d6699bdf2587aa4daa8f9656a27002df2d52b348030de3f736683918c532daf96297dcd4c726241dd59b069f9d3efe7165eecc97c3c2f99078f0a"}, {0xc}, {0xc}}}, @m_mirred={0x140, 0x0, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}]}, {0xb1, 0x6, "a18f64bfe6f80625ed54e7e98ec94d013fc07988b12ef58d20baf3278e9bf9ecc2f99172429c9c6ff5a12da6a13514237ae51cb34720ec9a6144996afd23117c30bbd244e2f13cc6baf9c3436b1f379c3bf313a5b88c0186e0499bd5194f6b85d59c4526e321bdfc4156b96e82dbd82c4dd125879c84c9e18ebed5287c59f31a4cdbf7d0b98e3301ca8cc9da8d94821002eb77436cdcf44b808cb126faedfc6356edff715a86d6e9e955cb58d5"}, {0xc}, {0xc}}}, @m_nat={0x1e8, 0x0, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @dev, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast1, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @multicast1}}]}, {0xf5, 0x6, "8656465864b01649176e34ffd477cdaf39243f61ffc601297167d3f7692a6e9f2c588f4e8a2c9b57dce7f45b7cbe78c8fbe7845b1a00d7d4e9946206b8289d704c0f7b451ccc607cdc787cbc36593fd542e36da1abfc765f2ae4c7caf057a0c85346db27f30d3d6d0f6710346ea400e6c3cc6ad7077b52ade140d3bcb8753767e9e1bde9f554a7d1c02010befc804ee4dfbe945ba766195f9be1371f3d7c6e4f14cd2aaa6f3b8d1ea5866c2045069d68c305bc91ecb88abcb882862a15eac4aed9d5ee27408bacf6c87260a8a75222b7c5d6214fd29c42bce942ffb4f60e48fef34bb25341ab934e3e1000b99d5c02e53b"}, {0xc}, {0xc}}}, @m_police={0x1164, 0x0, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}]]}, {0xd31, 0x6, "c0908fde5d4108668e21ebe4470b8676090242e61374c26103fe9ea7c537b55b61c9b74734839b5886db4061e4014d8075a8e8a844244d30b3046c82dd2501383ca5f0f43be1f437a037ae3eb8d4664f3f419de17c8c97418fe4eae94f2e4d46297a04c3ef1858e4b5d1efa54bc74e60e547dcf6ce5bee491c76e3498715419b52e40c0e7305f5f7e21640112dae7eb1869bd696bd491e704c8838b49cc3de6e65acffc2defcb7bf43f40a9d1181daab4cae9a535a45f04692cfe8bf139da87d8787c307f41b9aa7fdd6871c1e78133ff1c36780e9b8942f9b6566c31a1c2bb36934c0c607c1455468ba61476a15ce35c23355727a20d347b97c15b67ebf81aa53e733fb1045e12081994a8bbf025cbf9a3d4d2ddc6352c982c66c6444697342592db20a9c4dfce07074fbe4329809ec0a7cc89949a9d4b6a4b1d8787871a0c74562acddaff24b0e778134123395603ac93fd4a7f8490782c0d72d3a55bfbcbdb36896d2954a1211e4605d5075dfd097f9e8eff6e592393e081c9469765cbd84cc53d240d143040aeba25950119b4fa8bfc2b754de7f146dbd269d3fc39ee13d495bd198767be9f6c037a57051c80cc70ca78441ee228c6163eda074fabe730fe4539d99503dbb8980834e7ba21ef3a1ca25d78ed81a662befce18f6898536f862aca42817a698c45666a9eacfd248c5473ce0d01f11a0c389178fdda6d659e50862d00c935920c6088d44b6ce399bfb7a9d470a5278fd6a68998273504f89fba636a79a63a71393028453bba8ac5113f48207f11e0bfdcabaf69d1c4d96fe882f46611af5dd2fe1d683b2b5429f566424486491eefe8f885afcdc9a512efb20cb581e31e801b096a4acbb7446dc36c5bff54eaa4658ab1510830822872b3a3161b130247981eac019487d796bc4dd322db4fb16651e74b80f5824367513d38c4eafb6f235d2b6b5a56b6455142aed217fe63d4e250ebc78dbab20f59e9f0e3542106b7359460741325293eb3b491e5857c14a6cf43f86d8ff64ccd591e3ba4586d6344a93cd1249422fe046a40836bc94394262723617e44c8f1b45aead40ae7246ffbecdd6d1e3b794b4a15e8082a594a2b52b51849fb295f04d575376b622823ea43c26ed1ffa40f0b5a0eb648f7abf0eb69153f8d7aef969476dd7d460bb47b4480eb2635f65851b3d08321cccc1bc84b8dc3ac924e95eec3a3074c34aaa4b574475d6d01e1121a4879b9daeed965e1886fa943bca335c101000deb91e8ff27200ebf743391c8a0b673abb901845ad294a7acd4e378e72f2c1f6eb0b8b2295d992ab09b02ceb3a436a58cbd54e9ccc2256af3c3d55778cd2a6ba15d0e7a18916b9d3983720a1d938fb96d46f36071e3206510593850f5dc7bc0948f9ceeaac29011bb0f94a717a59b4de70e18c79083d2b12caa83bcf70df6fa3e48646801865d1b9dd5b2dd71cf1ff6d0eba754c56f688ede1593734d15808af5fd19066f9323b05680c0d2035e36cef76461781485acc7c568d180fc958e63f25225df1266436ce38ebbc2e14a253173f1f9aa8f82785671f5226e97c14f8e3de8b02d4238d914c355a902d76a2a2086910bec447936296edd33a86aaa317d8eb27aa93cd05b2eaa1a7cecdb7b0cbb9ac30cc1212fa631ef7f40ef3122728b4d1ba19478b0f434057fd300e1224a70396426faf6bf96a81a9983887e716debc86c7f619f5ea533fb0ecd4f9234847ec964b96a797d7c0ff2c434d3024e15b83c20fa098b94f5780d2ef539e58db4127ce252cfb9fa840663a25b159c99f8f29f2446dda29be3061e5815de13ad43583cdd2a7c56656b4f7c799d308833ce79e0c1cf0b85dc169e234e99b6a87644344f97d2ae727449f3044eee50d8402b9fdd3308c9e577ca5604a68d65b3ea99f8b475cdff12b68c6a8054fd008bd30e802c480ce0ceff7e6533ef136de7d31b6566360319776d9b8e2d1d50c251dc3faf67e20324103ebd088840dcd7b776044033c7aa169a1849705e27955c736ff1da38d0deb14c75a0816815659930e502f5ad19d7bd6cc44eb7e0a7ce68efa4d541cc7e0ecbb07af6e4151c7a95a2b6fb27c6a735e54317be4e77b7b1f310a344825a6b5db891997c3b7436560d73c8c1c1613da544ec103c924ce0a7ec5911ad12c325948c1d4315349176710eb9d33f75bff40e039fc806e6d9f3af9eab3e18f4a54b57430dc1f294c2ee83bad417ed3bc0d42240eea64136f75b9f8f832436e8b3dc768d71029604f298e5f5f6639e02ade5faa94dc838f70088537473aad4c84118eddf856fc21a4033227ecfabd9df6bc3acd240277e5c7ad7525073685e11528f3c72ac9b2df20efdef5420989b3703d96a17b9cd06726159d1d96d45ea06a25996cc7ced852cff19ea76a6a8a175dc328b5e33c4dc22868a840d6a807330ee5d3729f635d9121d89aa95d319d55be2c85a5344f69465c148c4e54fd43489da315072b5ae465868f4949d7e1d5edf55673c8ed837db6baac515872fe6441edd02d22df5d05442022fe1891e9391d676ea209b4ba3fb3fce150eef8027bf07d22f55ad52450c01f5973341d33facd2696ea5c0b089c1f56907b18608e9d0295cbaedbdd5d41e5e55ec95751d3736a3cb169c2077f51909a74dbe829fff663d36e4c3ad4530ce574f16666721c6f311a56b854444e0af3e93ed73aaa29e25ca913adf22be66c5a19b148e0ad6c79c9da9353dbef6e69e2230ed4ec7a44c38786a1c934f9f84130b18fecf85b4073e9e8c6058a97309481571fc2a7659a528ddbde9134a4db22a0011a9f86be085e5d976f166ae8781b4062f6e5bfc7212b93d3de5fc7a81f1ff1cb6ae207c6b541478417447ea9aff1ea48ffe51180d7fe787b0241878f488c93381105e567c22ebe128b4c03ee2449834f9c098d12de3e55e5485b5d1064298005c48baa1a68b5f85af1814a8c5108383b9b79a43e517b2073db727376a3cb5463bbf05354ecabb3166f20fd9ce12766b3efdd8ee96ba5a09d96fa2a9739d29aa80285c6855df65262144f853754c27a84afea511a53abba86d0cae93064785722d179857b29fc9e6aec38bcdd8ff9dbd0d2a94112f0da0507a2fb2aeb19ceb80cb26e3453b325ed65e54b5e117c87b13937c73332098cf7fb76a4fde1935138858a47aea12338494916abb6371cc0ea4d763fa6bd43e974868b3741349b573c3040eb27c951d49cd06a80db6379874507688779db2455ab6d1e830c4c8202c1dbe6a7507c0aee5c3ba4b725c3dc0bb4fce051dc8d6ef63ca3e6fdec664cb56a5ce94666beaf33fc826aed8fac79ab86959113e0a85eb0529b6ff8aca471b78ec785e45185143f7176e6a360f7f4598600b4136351b92d98844391ff5ba2264788b2086e7822890d0f3f9fafe5d6eccf7cf9f17ec9014d7475586e25a98715e1d3f7e308841521d151702dd6f2cc83cee79ee9d913182c926919c7161a1e74df3a992afb14865b16b7706403a93caa692de79b97334917f85cb11f20b21e61fca3a09e394fa23ba74eb3cae84beb873b765cc4f1d8847fe15df709d69ca476da9b9557ed13370dc407d96626b09d7d7b4a052d656b8cd85b3d9a9f79d3a5aa39d4f360e3b94f0d3d7272a81a3ce1035ae09e8e0ceace98ca3acdd85c01e57d0ccf9b670fe4eccb8eacba50e664828d176041a90d87ea4307dbe23296afcb6b76f07799da95eaa5356ae0eea25b965bff8ead966428848dbb73b86e33a88388919705997a2680773f24d1468024a42675e4923f1a4cb6786e556b9daf130f57f19407a40be77ef9a765f6a2fb77b2c0507c4d9c2259003594adc3e4a479bd21e789d8f13ec5becc42018a1664f8418428cf17281466ba27f8adb29bfb3c7cd7526cb3ae20f42a9c790dac3757757498e6ab8ef1b98dfb5dc178189dfa4cc443aa0cf0e1401bd522e9cd95b3e666967f46ac45d66added3c14660203523f7f568a2eb8398019917a3d4189f9b0f65b56e3719b2793ec464609b3176f89ae8e1a88e4274c2f2f2318e1e0e5831078c1cfca830e422453ce605219e3fc8582bcbebd584c68725e5c8613715cbd960f371172de78f075feeb961253eeed3b245e5737e635fd126f16e0c95f2bde310fb3388471e9e227e81dbc1b2522bdadccd90f835e2af8feca80b3fad943fb4929be95ed83a8e74c6998d195175da2476d2e4188d5619e21369971ac7b5024db98d244219b9d3b43f7f2575185938a71061e880ddad785a036f0c836374c6181d2294b534c5d327722419e11d27cd1e1de8a566bdd8f9676ceaeccaf31a5ef8fc7d0922a48f6c9f55947678c0394abce04db75badfd740ebf13804f485cb05ac8fe9e88471c94f6dca308ad6ef61a9abce5858f9840fd5763628ed94bc7effbb7536c990e5a91925b4af0475d9e9bc20b4ee9c6b60dafb555b6193672b800aac23ff3809c285b2d4ff36b7c4ae10d6913bb971e6653f5baac40c290884fc08291c27b837d57442e7e107e11b963887df178dbf0720d9f8c613b4ab69d67609223059f070c4083780e90d878edd0cd9aa15943586641d827d360fcd3b7606fffeddc82ecf356cc6c7a6c454e565e983cc5e2163db27351761c36f327c23cc13ae162d946c9f1af2d256af5e1ea2d4fc74902a1bdf5bf0691af61ce90307757749939edbd3b97ab2ef76034379731649684de8b71b023a358fb4268a691619f8a30f890445d108eba7a61830b1a621c74228663c553820ea449766aa978326"}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x1e84}}, 0x0) [ 974.010547][T16984] Restarting kernel threads ... done. 17:59:31 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r0, 0x1261, 0x0, 0x0, 0x0, 0x30000000) 17:59:31 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x0, 0x0) 17:59:31 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:31 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0xe0000, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)) 17:59:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(0xffffffffffffffff, r1, 0x0) 17:59:31 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='+perf_event -'], 0x52) 17:59:31 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r0, 0x1261, 0x0, 0x0, 0x0, 0x30000000) [ 974.524976][T16999] Restarting kernel threads ... done. [ 974.559889][T17002] loop3: detected capacity change from 0 to 1792 17:59:31 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:31 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) [ 974.744075][T17002] FAT-fs (loop3): bogus number of reserved sectors [ 974.750738][T17002] FAT-fs (loop3): Can't find a valid FAT filesystem 17:59:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(0xffffffffffffffff, r1, 0x0) 17:59:32 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 17:59:32 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x1261, 0x0, 0x0, 0x0, 0x30000000) 17:59:32 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x7}) 17:59:32 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:32 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) 17:59:32 executing program 5: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000080)={0x23, 0x0, 0xffffff80}, 0x0) 17:59:32 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x1261, 0x0, 0x0, 0x0, 0x30000000) 17:59:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(0xffffffffffffffff, r1, 0x0) 17:59:32 executing program 3: syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x40126000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="9abf3331e3db129aed91e966be4f556ca9757d2e2c88f9f4f2b108608462116770a56f92c1878c37") [ 975.507006][T17024] Restarting kernel threads ... done. 17:59:32 executing program 4: ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:32 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) 17:59:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000003c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0}) 17:59:32 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x1261, 0x0, 0x0, 0x0, 0x30000000) 17:59:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) 17:59:33 executing program 4: ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:33 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:59:33 executing program 0: r0 = syz_io_uring_setup(0x2de9, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x1261, 0x0, 0x0, 0x0, 0x30000000) 17:59:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) 17:59:33 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) 17:59:33 executing program 3: syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x40126000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="9abf3331e3db129aed91e966be4f556ca9757d2e2c88f9f4f2b108608462116770a56f92c1878c37") 17:59:33 executing program 4: ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) [ 976.554971][T17051] fuse: Bad value for 'fd' 17:59:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) 17:59:33 executing program 0: r0 = syz_io_uring_setup(0x2de9, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x1261, 0x0, 0x0, 0x0, 0x30000000) 17:59:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c8f6b646f7366ee578400080820000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000940)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 17:59:34 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:34 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) 17:59:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 17:59:34 executing program 0: r0 = syz_io_uring_setup(0x2de9, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x1261, 0x0, 0x0, 0x0, 0x30000000) 17:59:34 executing program 2: syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000780)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) 17:59:34 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) 17:59:34 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:34 executing program 3: syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x40126000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="9abf3331e3db129aed91e966be4f556ca9757d2e2c88f9f4f2b108608462116770a56f92c1878c37") 17:59:34 executing program 0: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x1261, 0x0, 0x0, 0x0, 0x30000000) 17:59:34 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/170, 0xaa}], 0x1) 17:59:34 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x84000, 0x0) 17:59:35 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:35 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) 17:59:35 executing program 5: sched_setscheduler(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) 17:59:35 executing program 2: syz_clone(0x8008000, 0x0, 0x0, 0x0, 0x0, 0x0) 17:59:35 executing program 0: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x1261, 0x0, 0x0, 0x0, 0x30000000) 17:59:35 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:35 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5455, 0x0) 17:59:35 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) 17:59:36 executing program 3: syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x40126000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="9abf3331e3db129aed91e966be4f556ca9757d2e2c88f9f4f2b108608462116770a56f92c1878c37") 17:59:36 executing program 0: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x1261, 0x0, 0x0, 0x0, 0x30000000) 17:59:36 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) 17:59:36 executing program 5: sched_setscheduler(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) 17:59:36 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:36 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) 17:59:36 executing program 5: socket(0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3333) 17:59:36 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x1261, 0x0, 0x0, 0x0, 0x30000000) 17:59:36 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:36 executing program 2: mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 17:59:36 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, 0x0}]) 17:59:36 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x1261, 0x0, 0x0, 0x0, 0x30000000) 17:59:37 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44708, 0x880e}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TOS={0x5, 0x9, 0x20}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x30}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010102}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x6c}}, 0x0) 17:59:37 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:37 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5405, &(0x7f0000000140)) 17:59:37 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, 0x0}]) 17:59:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80085504, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0x0, 0x0}) 17:59:37 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x1261, 0x0, 0x0, 0x0, 0x30000000) [ 980.569260][T17151] Restarting kernel threads ... done. 17:59:37 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x2de9, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x1261, 0x0, 0x0, 0x0, 0x30000000) 17:59:37 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5405, &(0x7f0000000140)) 17:59:37 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000600000000000001060bc50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='rxrpc_local\x00', r0}, 0x10) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x0) dup3(r1, r2, 0x0) 17:59:37 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:37 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) dup3(r1, r0, 0x0) io_setup(0x9a, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1042a, 0xe6c3, 0x0, 0x0, 0x0, r0, 0x0}]) 17:59:38 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x2de9, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x1261, 0x0, 0x0, 0x0, 0x30000000) 17:59:38 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 17:59:38 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5405, &(0x7f0000000140)) [ 981.090529][T17165] Restarting kernel threads ... done. 17:59:38 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/222, 0xde}], 0x1, 0x0, 0x0) 17:59:38 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r0, 0x0, 0x0, 0x40080, 0x0, 0x0) 17:59:38 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:38 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x2de9, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x1261, 0x0, 0x0, 0x0, 0x30000000) 17:59:38 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5405, &(0x7f0000000140)) 17:59:38 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5416, &(0x7f0000000140)) 17:59:38 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x2, 0x40, 0x0, 0x10000}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 17:59:38 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000080)={{0x0, 0x81}}, 0x10) [ 981.775068][T17178] Restarting kernel threads ... done. 17:59:39 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:39 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc201, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141fd27fffffffff80000006e0700959a76041e5bac80595d8bdcd28d4a27e57870c0dd74743a484655ec0cd01785cbcfd1"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000140)=0x75c3) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000080)={0x2, 0x5, 0x7, 0x80, 0x5, 0x9}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="200002000010", @ANYRES32], 0x50}}, 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000180)={0x0, 0xcc, 0xfffffffffffffffc}) ioctl$TCXONC(r0, 0x540a, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000580)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141fd27fffffffff80000006e0700959a76041e5bac80595d8bdcd28d4a27e57870c0dd74743a484655ec0cd01785cbcfd1"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r4, 0x0) 17:59:39 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x1261, 0x0, 0x0, 0x0, 0x30000000) 17:59:39 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)) 17:59:39 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73481c0e17a606fec68cb7d18ad123d27e7cf43548ee85857ad4a77cb56e0fcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e70227bfd8115efd90c8c48258f8dbe82e16cf00000000000000000000000001000000000000d54b107c8c8a14195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d9fe2238fff867ba8fd41b29caad2a986e0e244bd117474cac587c70cdea785300f64cc6ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db269971210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f65970600a85c9a74ca196700218f919746bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed173751732c9b05c9a8380daae477ac0a3eed10300000000000000cf1a60fe2dcc1a465aa8d54cb4000053c3f01ea714a7bd4fad615ff6e2991589bbdd1ae0d1bce65c620c4a2527a82afe16e019a5e0b5ec1b1b8aafba090000c3630488edcc4a8cbd3246e962b773a75b28a51cd09cbcb3577fea6f1e9fe8cd2b532c084cbd051b4aeaf0e716b256acf183d8e55580a678c664813354f14a453b093948d49bca31a7170419bb1d32f256ff3010e69b2f0482c63ab78a74dec8b1405e7daef356602487886b6f0beb5ca9a9b31a57e25525fa0ff5c2226e79db12959e59f2c911ee035c82f1a81ef15b43d51ff1fa025bfb80674c9d0e00000000000000000000000000000000000000000000009cf6af41a53e8d789b699c2855bf42d68528e3f6b422f497bdd86469f76de4b41946e5fa867b66e863a4b8a9be10a569f0e8c57ec33261cecb0a44008430d208cc665e8cdeccc3dd31a6f64a5f15cb20fc76fe3ff3fc706de19e247f37fbdacc444893dc0d2bd12e84221073bf9aa65c74595bc1d16e9870b4957f44225df93e1d30ab2045b7231eb6adbbda4d18d487de61eab3a2f61d018a69c41047efb1fb55272debf7811cafc5486eeb757c7fd1cb03e459cd868207e4ed7b39984bd741d1eb23ae204ab9b510cd7fee7b274aba93380fc29ec94065"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0x15, 0x0, &(0x7f0000000100)="480e003f0000007e5bc5795eca00054300ffffffba", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) 17:59:39 executing program 1: creat(&(0x7f0000000040)='./file0\x00', 0x88) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ceph\x00', 0x0, 0x0) [ 982.311384][T17193] Restarting kernel threads ... done. 17:59:39 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x1261, 0x0, 0x0, 0x0, 0x30000000) 17:59:39 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:59:39 executing program 5: io_setup(0x2c4e, &(0x7f0000000b00)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={[0x1e4f]}, 0x8}) [ 982.476178][T17200] ===================================================== [ 982.483545][T17200] BUG: KMSAN: uninit-value in batadv_get_vid+0x246/0x3d0 [ 982.490640][T17200] batadv_get_vid+0x246/0x3d0 [ 982.495722][T17200] batadv_interface_tx+0x3c7/0x2460 [ 982.501055][T17200] xmit_one+0x2f4/0x840 [ 982.505398][T17200] dev_hard_start_xmit+0x186/0x440 [ 982.510572][T17200] __dev_queue_xmit+0x22ee/0x3500 [ 982.515769][T17200] dev_queue_xmit+0x4b/0x60 [ 982.520454][T17200] __bpf_redirect+0x18ec/0x1ad0 [ 982.525502][T17200] bpf_clone_redirect+0x4a5/0x670 [ 982.530588][T17200] ___bpf_prog_run+0x92d/0xb420 [ 982.535646][T17200] __bpf_prog_run512+0x121/0x180 [ 982.540630][T17200] bpf_test_run+0x76b/0x1080 [ 982.545453][T17200] bpf_prog_test_run_skb+0x175e/0x2270 [ 982.550979][T17200] bpf_prog_test_run+0x784/0x820 [ 982.556184][T17200] __sys_bpf+0xadd/0x1240 [ 982.560566][T17200] __ia32_sys_bpf+0xe1/0x130 [ 982.565316][T17200] __do_fast_syscall_32+0x96/0xf0 [ 982.570400][T17200] do_fast_syscall_32+0x34/0x70 [ 982.575413][T17200] do_SYSENTER_32+0x1b/0x20 [ 982.579971][T17200] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 982.586501][T17200] [ 982.588845][T17200] Uninit was created at: [ 982.593374][T17200] __kmalloc_node_track_caller+0xde3/0x14f0 [ 982.599327][T17200] pskb_expand_head+0x26d/0x1fd0 [ 982.604433][T17200] skb_ensure_writable+0x501/0x5b0 [ 982.609605][T17200] bpf_clone_redirect+0x25d/0x670 [ 982.614791][T17200] ___bpf_prog_run+0x92d/0xb420 [ 982.619687][T17200] __bpf_prog_run512+0x121/0x180 [ 982.624787][T17200] bpf_test_run+0x76b/0x1080 [ 982.629431][T17200] bpf_prog_test_run_skb+0x175e/0x2270 [ 982.635046][T17200] bpf_prog_test_run+0x784/0x820 [ 982.640034][T17200] __sys_bpf+0xadd/0x1240 [ 982.644498][T17200] __ia32_sys_bpf+0xe1/0x130 [ 982.649129][T17200] __do_fast_syscall_32+0x96/0xf0 [ 982.654312][T17200] do_fast_syscall_32+0x34/0x70 [ 982.659224][T17200] do_SYSENTER_32+0x1b/0x20 [ 982.663872][T17200] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 982.670254][T17200] [ 982.672682][T17200] CPU: 1 PID: 17200 Comm: syz-executor.3 Not tainted 5.18.0-rc4-syzkaller #0 [ 982.681492][T17200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 982.691764][T17200] ===================================================== [ 982.699064][T17200] Disabling lock debugging due to kernel taint [ 982.705341][T17200] Kernel panic - not syncing: kmsan.panic set ... [ 982.711773][T17200] CPU: 1 PID: 17200 Comm: syz-executor.3 Tainted: G B 5.18.0-rc4-syzkaller #0 [ 982.721974][T17200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 982.732066][T17200] Call Trace: [ 982.735384][T17200] [ 982.738324][T17200] dump_stack_lvl+0x1ff/0x28e [ 982.743059][T17200] dump_stack+0x25/0x28 [ 982.747256][T17200] panic+0x4fe/0xc73 [ 982.751244][T17200] ? add_taint+0x181/0x210 [ 982.755700][T17200] ? console_unlock+0x1c00/0x2130 [ 982.760785][T17200] kmsan_report+0x2cd/0x2d0 [ 982.765330][T17200] ? __module_address+0x61/0x610 [ 982.770380][T17200] ? __msan_warning+0x94/0x110 [ 982.775192][T17200] ? batadv_get_vid+0x246/0x3d0 [ 982.780101][T17200] ? batadv_interface_tx+0x3c7/0x2460 [ 982.785521][T17200] ? xmit_one+0x2f4/0x840 [ 982.789900][T17200] ? dev_hard_start_xmit+0x186/0x440 [ 982.795229][T17200] ? __dev_queue_xmit+0x22ee/0x3500 [ 982.800476][T17200] ? dev_queue_xmit+0x4b/0x60 [ 982.805196][T17200] ? __bpf_redirect+0x18ec/0x1ad0 [ 982.810261][T17200] ? bpf_clone_redirect+0x4a5/0x670 [ 982.815502][T17200] ? ___bpf_prog_run+0x92d/0xb420 [ 982.820555][T17200] ? __bpf_prog_run512+0x121/0x180 [ 982.825697][T17200] ? bpf_test_run+0x76b/0x1080 [ 982.830591][T17200] ? bpf_prog_test_run_skb+0x175e/0x2270 [ 982.836276][T17200] ? bpf_prog_test_run+0x784/0x820 [ 982.841424][T17200] ? __sys_bpf+0xadd/0x1240 [ 982.845962][T17200] ? __ia32_sys_bpf+0xe1/0x130 [ 982.850757][T17200] ? __do_fast_syscall_32+0x96/0xf0 [ 982.855997][T17200] ? do_fast_syscall_32+0x34/0x70 [ 982.861062][T17200] ? do_SYSENTER_32+0x1b/0x20 [ 982.865782][T17200] ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 982.872342][T17200] ? kernel_text_address+0x1f1/0x2b0 [ 982.877736][T17200] ? __kernel_text_address+0x32/0xf0 [ 982.883057][T17200] ? batadv_interface_tx+0x123/0x2460 [ 982.888478][T17200] ? filter_irq_stacks+0xb5/0x230 [ 982.893585][T17200] ? kmsan_get_metadata+0x33/0x220 [ 982.898728][T17200] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 982.904576][T17200] __msan_warning+0x94/0x110 [ 982.909215][T17200] batadv_get_vid+0x246/0x3d0 [ 982.913945][T17200] ? kmsan_get_metadata+0x33/0x220 [ 982.919093][T17200] batadv_interface_tx+0x3c7/0x2460 [ 982.924346][T17200] ? validate_xmit_xfrm+0xda/0x1be0 [ 982.929593][T17200] ? batadv_softif_is_valid+0xb0/0xb0 [ 982.935011][T17200] xmit_one+0x2f4/0x840 [ 982.939223][T17200] dev_hard_start_xmit+0x186/0x440 [ 982.944394][T17200] __dev_queue_xmit+0x22ee/0x3500 [ 982.949917][T17200] ? skb_release_data+0x11ee/0x1270 [ 982.955194][T17200] ? kmsan_get_metadata+0x33/0x220 [ 982.960348][T17200] dev_queue_xmit+0x4b/0x60 [ 982.964910][T17200] __bpf_redirect+0x18ec/0x1ad0 [ 982.969831][T17200] bpf_clone_redirect+0x4a5/0x670 [ 982.974923][T17200] ___bpf_prog_run+0x92d/0xb420 [ 982.979814][T17200] ? bpf_csum_level+0x7b0/0x7b0 [ 982.984716][T17200] __bpf_prog_run512+0x121/0x180 [ 982.989701][T17200] ? finish_task_switch+0x42f/0xad0 [ 982.995008][T17200] ? kmsan_get_metadata+0x33/0x220 [ 983.000156][T17200] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 983.006004][T17200] ? ktime_get+0x36b/0x450 [ 983.010490][T17200] ? kmsan_get_metadata+0x33/0x220 [ 983.015641][T17200] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 983.021486][T17200] ? bpf_test_timer_continue+0x7eb/0x850 [ 983.027172][T17200] ? kmsan_get_metadata+0x52/0x220 [ 983.032321][T17200] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 983.038164][T17200] ? __bpf_prog_run480+0x180/0x180 [ 983.043317][T17200] ? __bpf_prog_run480+0x180/0x180 [ 983.048462][T17200] bpf_test_run+0x76b/0x1080 [ 983.053121][T17200] bpf_prog_test_run_skb+0x175e/0x2270 [ 983.058743][T17200] ? __bpf_prog_test_run_raw_tp+0x3a0/0x3a0 [ 983.064686][T17200] bpf_prog_test_run+0x784/0x820 [ 983.069853][T17200] __sys_bpf+0xadd/0x1240 [ 983.074249][T17200] __ia32_sys_bpf+0xe1/0x130 [ 983.078907][T17200] __do_fast_syscall_32+0x96/0xf0 [ 983.084004][T17200] do_fast_syscall_32+0x34/0x70 [ 983.088920][T17200] do_SYSENTER_32+0x1b/0x20 [ 983.093491][T17200] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 983.099908][T17200] RIP: 0023:0xf7f39549 [ 983.104010][T17200] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 983.123667][T17200] RSP: 002b:00000000f7f345cc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 983.132254][T17200] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 983.140253][T17200] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 983.148359][T17200] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 983.156364][T17200] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 983.164381][T17200] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 983.172392][T17200] [ 983.175609][T17200] Kernel Offset: disabled [ 983.179935][T17200] Rebooting in 86400 seconds..