856.572054][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 856.582565][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 856.590066][ T4874] loop3: p2 < > 15:50:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x400454ca, 0x40e60c) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)) 15:50:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xf00, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:50:33 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000001c0)=0x1) [ 856.957337][ T8711] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 857.008614][T10251] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 857.018204][T10251] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 857.027056][T10251] usb 6-1: Product: syz [ 857.031367][T10251] usb 6-1: Manufacturer: syz [ 857.148973][T10251] usb 6-1: config 0 descriptor?? 15:50:34 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000080)={0x81, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000001c0)={0x81, 0x5}) [ 857.196474][T10251] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input105 [ 857.403825][ T3221] usb 6-1: USB disconnect, device number 27 [ 857.438160][ T8711] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 15:50:34 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', @ifru_data=0x0}) [ 857.447511][ T8711] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 857.456045][ T8711] usb 5-1: Product: syz [ 857.460559][ T8711] usb 5-1: Manufacturer: syz [ 857.589168][ T8711] usb 5-1: config 0 descriptor?? 15:50:34 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='net/raw\x00') socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r3, &(0x7f0000003480)=[{{&(0x7f00000001c0)=@xdp={0x2c, 0x0, r6, 0x0, 0xfeffffff}, 0x80, 0x0}}, {{&(0x7f0000000140)=@caif=@rfm={0x25, 0x3, "cd1e4b3ff3c500745875ea3661b900"}, 0x80, 0x0}}], 0x2, 0x0) [ 857.637388][ T8711] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input106 15:50:34 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000080)={0x81, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000001c0)={0x81, 0x5}) [ 857.880474][ T8711] usb 5-1: USB disconnect, device number 32 15:50:35 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) ptrace$getregs(0xc, 0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/127) 15:50:35 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000080)={0x81, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000001c0)={0x81, 0x5}) 15:50:35 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000000)='0', 0x1}], 0x1) [ 858.647258][ T9054] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 858.917895][ T9054] usb 5-1: device descriptor read/64, error 18 [ 859.127794][ T3221] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 859.313886][ T9054] usb 5-1: device descriptor read/64, error 18 [ 859.588468][ T9054] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 859.637708][ T3221] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 859.647035][ T3221] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 859.655530][ T3221] usb 6-1: Product: syz [ 859.660162][ T3221] usb 6-1: Manufacturer: syz 15:50:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x40000, 0x4) fcntl$setstatus(r2, 0x4, 0x6100) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000100)=ANY=[], 0x40004) 15:50:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x1802, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:50:36 executing program 2: fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000140)='hfsplus\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000640), 0x0, 0x4000}], 0x0, &(0x7f0000000740)=ANY=[]) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) [ 859.706062][ T3221] usb 6-1: config 0 descriptor?? 15:50:36 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000001c0)={0x81, 0x5}) 15:50:36 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) r0 = gettid() ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40086410, &(0x7f0000000180)={0x58, &(0x7f0000000100)="0e450822fc3583cac9dcd82d1df66ab518af08eaa36af22689385ebc92bac481184b066f85fdeec3014273315cdda223abc227b5d6df24c31033647272e256e570ad4ae6406c948a70117965d180c7a6a3dda915c8c619f5"}) capget(&(0x7f0000000080)={0x19980330, r0}, &(0x7f0000000200)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000280)=0x5) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) rt_tgsigqueueinfo(r0, r1, 0x29, &(0x7f0000000080)={0xf, 0xfa0f, 0xffffffff}) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000240)) [ 859.788630][ T3221] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input107 [ 859.991257][ T9053] usb 6-1: USB disconnect, device number 28 [ 860.014690][ T28] audit: type=1800 audit(1598975437.072:59): pid=17351 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15850 res=0 [ 860.304590][ T28] audit: type=1800 audit(1598975437.212:60): pid=17359 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15850 res=0 [ 860.326045][ T28] audit: type=1800 audit(1598975437.232:61): pid=17368 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15850 res=0 [ 860.412097][T17357] hfsplus: unable to find HFS+ superblock 15:50:37 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000001c0)={0x81, 0x5}) 15:50:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b32, &(0x7f0000000080)) [ 860.598928][ T9054] usb 5-1: device descriptor read/64, error -71 [ 860.660469][T17360] hfsplus: unable to find HFS+ superblock [ 860.787620][T12792] usb 6-1: new full-speed USB device number 29 using dummy_hcd 15:50:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x2000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:50:38 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/clients\x00', 0x0, 0x0) fallocate(r0, 0x2, 0x0, 0x1) [ 861.198170][ T9054] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 861.207849][ T9054] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 861.216343][ T9054] usb 5-1: Product: syz [ 861.220872][ T9054] usb 5-1: Manufacturer: syz [ 861.277840][ T9054] usb 5-1: config 0 descriptor?? [ 861.290023][T12792] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 861.299538][T12792] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 861.308292][T12792] usb 6-1: Product: syz [ 861.312583][T12792] usb 6-1: Manufacturer: syz [ 861.371104][ T9054] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input108 [ 861.489474][T12792] usb 6-1: config 0 descriptor?? [ 861.538181][T12792] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input109 [ 861.552727][T17370] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 861.603780][T10251] usb 5-1: USB disconnect, device number 34 15:50:38 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) 15:50:38 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000001c0)={0x81, 0x5}) 15:50:38 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_NAT_DST={0x4}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_TIMEOUT={0x8}]}, 0x80}}, 0x0) [ 861.789660][T12792] usb 6-1: USB disconnect, device number 29 15:50:38 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) r0 = socket(0x1, 0x5, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='trusted.overlay.opaque\x00', &(0x7f0000001180)='y\x00', 0x2, 0x3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) sendmsg$can_j1939(r0, &(0x7f00000010c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x2}, 0xff}, 0x18, &(0x7f0000001080)={&(0x7f0000000080)="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", 0x1000}, 0x1, 0x0, 0x0, 0xc0}, 0x20000040) 15:50:39 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000001c0)={0x81, 0x5}) 15:50:39 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) r4 = signalfd4(r2, &(0x7f0000000100)={[0x4]}, 0x8, 0x0) openat$cgroup_ro(r4, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x0, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4300000000000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x20400, 0x0) 15:50:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x2400, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 862.380185][T10251] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 862.463270][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 862.473577][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 862.481267][ T4874] loop3: p2 < > [ 862.671757][ T28] audit: type=1804 audit(1598975439.732:62): pid=17445 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir888932182/syzkaller.mDry0C/213/bus" dev="sda1" ino=16291 res=1 [ 862.677141][ T8711] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 862.814279][ T28] audit: type=1804 audit(1598975439.792:63): pid=17445 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir888932182/syzkaller.mDry0C/213/bus" dev="sda1" ino=16291 res=1 [ 862.839722][ T28] audit: type=1804 audit(1598975439.842:64): pid=17445 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir888932182/syzkaller.mDry0C/213/bus" dev="sda1" ino=16291 res=1 [ 862.864532][ T28] audit: type=1804 audit(1598975439.872:65): pid=17445 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir888932182/syzkaller.mDry0C/213/bus" dev="sda1" ino=16291 res=1 [ 862.889564][ T28] audit: type=1804 audit(1598975439.872:66): pid=17446 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir888932182/syzkaller.mDry0C/213/bus" dev="sda1" ino=16291 res=1 [ 862.950194][T10251] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 862.959514][T10251] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 862.968317][T10251] usb 5-1: Product: syz [ 862.972717][T10251] usb 5-1: Manufacturer: syz [ 863.062486][T10251] usb 5-1: config 0 descriptor?? 15:50:40 executing program 4: setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000040)=0x80, 0x4) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427201000000000904000001ab2551000905820010"], 0x0) 15:50:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) 15:50:40 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000001c0)={0x81, 0x5}) [ 863.185982][T10251] usb 5-1: can't set config #0, error -71 [ 863.238211][T10251] usb 5-1: USB disconnect, device number 35 [ 863.289502][ T8711] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 863.298853][ T8711] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 863.307519][ T8711] usb 6-1: Product: syz [ 863.311833][ T8711] usb 6-1: Manufacturer: syz 15:50:40 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x65, 0x0, 0x6}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000), 0x4) [ 863.479468][ T8711] usb 6-1: config 0 descriptor?? [ 863.527911][ T8711] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input110 [ 863.734450][T10251] usb 6-1: USB disconnect, device number 30 15:50:40 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2001009, 0x0) mount$bpf(0x20000180, &(0x7f0000000040)='./file0\x00', 0x0, 0x1002040, 0x0) 15:50:40 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000001c0)={0x81, 0x5}) 15:50:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x28ff, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:50:41 executing program 3: getgroups(0x2, &(0x7f0000000200)=[0x0, 0xee01]) setregid(0xffffffffffffffff, r0) [ 864.238963][ T8709] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 864.537959][T10251] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 864.558746][ T8709] usb 5-1: device descriptor read/64, error 18 [ 864.905502][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 864.915703][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 864.923723][ T4874] loop3: p2 < > [ 864.947683][ T8709] usb 5-1: device descriptor read/64, error 18 [ 865.080787][T10251] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 865.090911][T10251] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 865.099620][T10251] usb 6-1: Product: syz [ 865.103922][T10251] usb 6-1: Manufacturer: syz [ 865.185953][T10251] usb 6-1: config 0 descriptor?? [ 865.248573][T10251] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input111 [ 865.268058][ T8709] usb 5-1: new full-speed USB device number 37 using dummy_hcd 15:50:42 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000c9427210200e0101b122ffe7000149021b0001000000000904200001ab25d2c266608200101fd478f3c0f282b625a3fe5365c998e66ae4062d3c546c5caf835307ec29ca87c3e1a9ef80afde03483a1958e25920447fc019c6f73aa288024fb45e1cbe9ee1e979c6f08d3dfd9b325d76ca37264800000000000000"], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0xd, &(0x7f0000000080)={r2}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x2, 0x1ff, 0x3, 0x1, 0x1f, 0xffff, 0x10000, 0x4, r2}, 0x20) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) [ 865.520920][ T26] usb 6-1: USB disconnect, device number 31 15:50:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0) 15:50:42 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x81}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000001c0)={0x81, 0x5}) 15:50:42 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x80000000000000a, 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000017001f7000ca98040000008004a2f7da5ebb24"], 0x18}}, 0x0) mkdir(0x0, 0x86) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) [ 865.567774][ T8709] usb 5-1: device descriptor read/64, error 18 [ 865.987840][ T8709] usb 5-1: device descriptor read/64, error 18 [ 866.110981][ T8709] usb usb5-port1: attempt power cycle [ 866.477020][ T8711] usb 6-1: new full-speed USB device number 32 using dummy_hcd 15:50:43 executing program 4: ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8004700b, &(0x7f0000000040)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9200010200e01019122ffe7000109021b0001000000000904000001ab0051000905820011"], 0x0) 15:50:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x2ee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:50:43 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x81}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000001c0)={0x81, 0x5}) 15:50:43 executing program 3: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) sendto$inet(r0, &(0x7f0000000400)='N', 0x1, 0x20004005, 0x0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 15:50:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) [ 866.841777][ T8711] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 866.850752][ T8711] usb 6-1: can't read configurations, error -22 [ 866.887017][ T8709] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 867.022325][ T8711] usb 6-1: new full-speed USB device number 33 using dummy_hcd 15:50:44 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x81}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000001c0)={0x81, 0x5}) [ 867.390772][ T8711] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 867.399907][ T8711] usb 6-1: can't read configurations, error -22 [ 867.407748][ T8709] usb 5-1: device not accepting address 38, error -71 [ 867.476632][ T8711] usb usb6-port1: attempt power cycle 15:50:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg$inet(r0, &(0x7f000000ae40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="9d", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="9d", 0x1}], 0x1, &(0x7f0000006000)=ANY=[], 0xa0}}], 0x2, 0x4008042) [ 867.818281][ T8709] usb 5-1: new full-speed USB device number 39 using dummy_hcd 15:50:45 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x81, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000001c0)={0x81, 0x5}) [ 868.158472][ T8709] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 868.168158][ T8709] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 868.177544][ T8709] usb 5-1: Product: syz [ 868.181871][ T8709] usb 5-1: Manufacturer: syz [ 868.218042][ T8711] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 868.297161][ T8709] usb 5-1: config 0 descriptor?? [ 868.347573][ T8709] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input112 [ 868.440286][ T8711] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 868.449309][ T8711] usb 6-1: can't read configurations, error -22 [ 868.544085][ T26] usb 5-1: USB disconnect, device number 39 [ 868.627166][ T8711] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 868.658689][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 868.670131][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 868.677800][ T4874] loop3: p2 < > [ 868.838838][ T8711] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 868.848015][ T8711] usb 6-1: can't read configurations, error -22 [ 868.859898][ T8711] usb usb6-port1: unable to enumerate USB device 15:50:46 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) rmdir(&(0x7f0000000040)='./file0\x00') 15:50:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c3042, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="0284ac3f", 0x4}], 0x1, 0x0, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) fallocate(r1, 0x0, 0x0, 0x10000101) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x46042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) getgroups(0x2, &(0x7f00000005c0)=[0x0, 0xee00]) 15:50:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x3f00, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:50:46 executing program 3: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000000280)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x4) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r5, 0x2, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="1c", 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xa}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) tkill(r0, 0x15) 15:50:46 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x81, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000001c0)={0x81, 0x5}) 15:50:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x64, 0x1, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYRES64=r4, @ANYRES64], 0x0) 15:50:46 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x81, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000001c0)={0x81, 0x5}) [ 870.017317][ T9054] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 870.110362][ T9053] usb 5-1: new high-speed USB device number 40 using dummy_hcd 15:50:47 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x81, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0) [ 870.293000][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 870.303879][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 870.311490][ T4874] loop3: p2 < > 15:50:47 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 870.411639][ T9053] usb 5-1: device descriptor read/64, error 18 15:50:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x4000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 870.570594][ T9054] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 870.580522][ T9054] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 870.589419][ T9054] usb 6-1: Product: syz [ 870.593884][ T9054] usb 6-1: Manufacturer: syz [ 870.768166][ T9054] usb 6-1: config 0 descriptor?? 15:50:47 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x81, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0) [ 870.819796][ T9054] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input113 [ 870.831801][ T9053] usb 5-1: device descriptor read/64, error 18 15:50:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5413, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "df7fdfe21def50645d19ee7df685ad2d8cd0f0"}) [ 871.014429][ T9054] usb 6-1: USB disconnect, device number 36 [ 871.110133][ T9053] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 871.388033][ T9053] usb 5-1: device descriptor read/64, error 18 [ 871.628393][ T9054] Bluetooth: hci2: command 0x0406 tx timeout [ 871.778434][ T9053] usb 5-1: device descriptor read/64, error 18 [ 871.817507][ T8709] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 871.900178][ T9053] usb usb5-port1: attempt power cycle [ 871.933548][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 871.944712][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 871.952345][ T4874] loop3: p2 < > [ 872.318626][ T8709] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 872.328301][ T8709] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 872.337436][ T8709] usb 6-1: Product: syz [ 872.341989][ T8709] usb 6-1: Manufacturer: syz [ 872.377659][ T8709] usb 6-1: config 0 descriptor?? [ 872.384565][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 872.395123][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 872.403509][ T4874] loop3: p2 < > [ 872.426450][ T8709] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input114 [ 872.617684][ T9053] usb 5-1: new high-speed USB device number 42 using dummy_hcd 15:50:49 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001af2551000905820010"], 0x0) 15:50:49 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x81, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0) 15:50:49 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd9, 0xd9, 0x6, [@datasec={0x0, 0x4, 0x0, 0xf, 0x3, [{}, {}, {}, {}], "cb966a"}, @typedef, @enum={0x0, 0x7, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], '#'}, @typedef, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "01"}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x0, 0xfa}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:50:49 executing program 2: write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffff78) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bcb9edbcc9d1dd33846e70f2444fc768f92a8f07723fb63fc6fa9b081ddd072bc035b568311aa58e58b081556c31beeeff913acf3793d936e4610838efb2f636d66a8e9d692f04f65c4d6e455dc2c43a9aa6c91ab972d32424ee9fd14"], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000007001000"}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 15:50:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x4102, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 872.676163][ T8709] usb 6-1: USB disconnect, device number 37 [ 872.999489][ T9053] usb 5-1: device descriptor read/8, error -71 [ 873.235917][ T9053] usb 5-1: device descriptor read/8, error -71 15:50:50 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x81, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000001c0)={0x0, 0x5}) 15:50:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000200)="092cc8664dbfbbc985c216435f21a005997835bbeb7ba87af0bcc6e20b15ef20d589b8832916e48f1c02f5cb7e83f6162ad2e96509a05150bf7b44ae4168f20df6b3149eabf82300e4fe02c6ae", 0x4d}, {&(0x7f00000003c0)="b696966283edfe5216f6a91fb8d71648449478c9d4b0cdf197f347c27022cae24b59a04734172b45cbe216c81108551a", 0x30}, {&(0x7f0000001580)="c3ce444839943a87aa2cd33ddd3d1ef46ad4164efca50cf921bbf3afc0", 0x1d}, {&(0x7f00000016c0)="4706774e043c40ccadb0b4b1bc86bb383371823193cb31b3f12fc124643e69b09412e33d674a84033f5dab5f29229e401cdcfe80e669", 0x36}], 0x4}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002340)="d52e73fe807ba67f0c39ff11641ec8d41bbc396dabad9714d79c8d0dc189535d8dd19ace9b3e64efdd09a9a3c4ce451bf439a7079a4af18c52279ffdc47befb7bedbd56e2acc270ebe0ee05ac59594f116ad79c1b690c24764a40b487c48102292de2c44c01f6ced6376fac9aa4d517f3cc2e7d2098f8d8af6ac476da1c48ced46157cdc441eac7d04a0a87151104e3c70879f0ee0d4f033d9a49124243f8f80b31bbcf5b23e04f97a00886925ca628b4f3e138269b6c194c5845b7f0259f509cfdf139daed41461f99ec421518cf354ed58dd8868a7133f42045a1bd6139aad115f9d82c3a049bc0d0be26df5cbeedd9f4b8f81614a4bdb4d793f08199f75c98b1820aef14952a87acbca182f90f1cad0c925bae90e8b0607421ebd47ac85b928c56ad4f59d2631c04823a9b55b948b2328ca7501ef3a4ec602d5f473803a102df034a6b758cf1e3c6668734117c73239812be0e6f5b7f00e9861a8c41b9b354a4e4899dda77bfb6502d2a69f65c75f1e0dc0eccc6052b7f7614db0f0f9a1753741964ed9c0b1fbb60acc028d9644b39307a493ab0121854234d7756780e1ddabc79b802d8872054b073c459e0760eccb055839abee7faf3e71171956c23ddec843996e1301eeb85838c60b5d9c4ff82ecbe3d358862d010af2c8565267e4500dc22a0b34c50309ed3ef56d89e6eeae89cb44f1fa7c4114b367bbcc647b845039c1dc190f84d5ca3760ca437841705213140f444a49178e2f678fd6bed6e3053c855be442009fb58821535c4493171b10dcbc2f54e5541a05f93598ef19f2d2280c399e96b32e03039fe75c2dd4fc0980385cb2610c30f570c560f85697549d61ad7fac5c8d74c3290da9c6c78df0b6f183bbf44675bb5398f20f932ff3c25531b9dc5c2b31502fc1a005117e351596afdf493199ca4d03235608917d7c4d028f6875ce60d210df94228e9d0bfb71f88a24885210f0d0d6a95750b88eaf29f3cbf84a1959", 0x2c5}], 0x1}}], 0x3, 0x0) [ 873.718993][ T9054] usb 6-1: new full-speed USB device number 38 using dummy_hcd 15:50:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x5400, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:50:51 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x81, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000001c0)={0x0, 0x5}) [ 874.207593][ T9054] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 874.218881][ T9054] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 874.227861][ T9054] usb 6-1: Product: syz [ 874.232176][ T9054] usb 6-1: Manufacturer: syz [ 874.421346][ T9054] usb 6-1: config 0 descriptor?? [ 874.558110][ T9054] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input115 15:50:51 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x81, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000001c0)={0x0, 0x5}) [ 874.843113][ T9054] usb 6-1: USB disconnect, device number 38 15:50:52 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x81, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000001c0)={0x81}) 15:50:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x5800, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 875.587159][ T9054] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 876.068302][ T9054] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 876.077732][ T9054] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 876.086250][ T9054] usb 6-1: Product: syz [ 876.090931][ T9054] usb 6-1: Manufacturer: syz [ 876.142868][ T9054] usb 6-1: config 0 descriptor?? [ 876.197371][ T9054] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input116 [ 876.390003][ T8709] usb 6-1: USB disconnect, device number 39 15:50:53 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f00"/20, @ANYRES32=0x0], 0x30}}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000d80)={&(0x7f0000000200), 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x548, 0x0, 0x804, 0x70bd29, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xe867}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x7, 0x81, 0xeb, 0xffff}]}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x27e9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}]}}]}, 0x548}}, 0x0) 15:50:53 executing program 5: syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_UNLOCK(r0, 0xc) 15:50:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'geneve1\x00', 0x420000015001}) dup2(r2, r0) ppoll(&(0x7f0000000180)=[{r0}, {r2}], 0x2, 0x0, 0x0, 0x0) 15:50:53 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x81, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000001c0)={0x81}) 15:50:53 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 15:50:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x80fe, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:50:54 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x81, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000001c0)={0x81}) [ 877.067159][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 877.077550][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 877.084840][ T4874] loop3: p2 < > 15:50:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) close(r0) [ 877.287370][T12792] usb 6-1: new high-speed USB device number 40 using dummy_hcd 15:50:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x40047451, 0x0) close(0xffffffffffffffff) close(r1) 15:50:54 executing program 0: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x824b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 877.527099][T12792] usb 6-1: Using ep0 maxpacket: 16 [ 877.779089][T12792] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 877.788716][T12792] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 877.797465][T12792] usb 6-1: Product: syz [ 877.801960][T12792] usb 6-1: Manufacturer: syz [ 878.203405][T12792] usb 6-1: config 0 descriptor?? 15:50:55 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x2) dup2(r0, 0xffffffffffffffff) setuid(0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r0}, 0x10) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000002c0)={0x61, 0x7d, 0x0, {{0x0, 0x4b, 0xfff, 0x0, {0x10}, 0x0, 0x221, 0x0, 0x7, 0x2, ')&', 0xb, '/dev/loop#\x00', 0x3, '.^\xc5', 0x8, ')*/\xf0@\\\x8f\\'}, 0x1, '!'}}, 0x61) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000200)={0x4, 0x1, &(0x7f00000000c0)=[0x9], &(0x7f0000000180)=[0x0, 0x9, 0xfbff], &(0x7f00000001c0)=[0x200, 0xee, 0x8]}) [ 878.256075][T12792] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input117 [ 878.463023][ T26] usb 6-1: USB disconnect, device number 40 15:50:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x8c05, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:50:56 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x1d, "33dd73c84eee5bc70bcc5cd097588890"}]}}}}}}}}, 0x0) [ 879.257545][ T26] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 879.498357][ T26] usb 6-1: Using ep0 maxpacket: 16 [ 879.748833][ T26] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 879.758188][ T26] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 879.766742][ T26] usb 6-1: Product: syz [ 879.771245][ T26] usb 6-1: Manufacturer: syz [ 879.837908][ T26] usb 6-1: config 0 descriptor?? [ 879.896205][ T26] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input118 [ 880.122984][ T9054] usb 6-1: USB disconnect, device number 41 15:50:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xb804, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:50:57 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:50:57 executing program 3: r0 = socket$inet6(0x10, 0x3, 0xa) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x23, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) 15:50:57 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xb, 0x6, 0x5, 0xfffffff9, 0x1}, 0x40) 15:50:57 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0xffffffff, 0x400001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008380)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r5, &(0x7f0000010400)={0x2020}, 0x2020) 15:50:57 executing program 5: r0 = dup(0xffffffffffffffff) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r2, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x2}, [{0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x0, 0xee00}, {0x2, 0x0, 0xee00}, {0x2, 0x7, r2}, {0x2, 0x2, 0xee01}, {0x2, 0x2, 0xee01}, {0x2, 0x6}, {0x2, 0x2, 0xee01}], {0x4, 0x1}, [{0x8, 0x1, 0xee01}, {0x8, 0x0, 0xee01}], {0x10, 0x2}}, 0x74, 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) 15:50:57 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='net/ptype\x00'}, 0x10) 15:50:57 executing program 0: setresuid(0x0, 0xee01, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)) [ 880.850254][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 880.860521][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 880.867944][ T4874] loop3: p2 < > 15:50:58 executing program 0: unshare(0x400) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x1, 0x0) write$nbd(r0, 0x0, 0x0) [ 881.082900][ T9054] usb 6-1: new full-speed USB device number 42 using dummy_hcd 15:50:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 15:50:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xe02e, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:50:58 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)={0x7fffffff}, 0x8) [ 881.568044][ T9054] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 881.577612][ T9054] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 881.586138][ T9054] usb 6-1: Product: syz [ 881.590780][ T9054] usb 6-1: Manufacturer: syz [ 881.736403][ T9054] usb 6-1: config 0 descriptor?? 15:50:58 executing program 3: socket(0x40000000002, 0x2, 0x9) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xfbec, 0x900) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fstat(r2, &(0x7f0000001f00)) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f00000000c0)=0x8, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fstat(r3, &(0x7f0000001f00)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000180)=0x1e) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r4) perf_event_open(&(0x7f000001d000)={0x1, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1400000017000101faffffffffffffff04000000"], 0x14}}, 0x40004) [ 881.806974][ T9054] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input119 15:50:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000080)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) fallocate(r2, 0x4000000000000010, 0x2, 0x200a00) [ 882.001907][ T9054] usb 6-1: USB disconnect, device number 42 15:50:59 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 882.462790][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 882.473414][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 882.480918][ T4874] loop3: p2 < > 15:50:59 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) syz_usb_connect(0x4, 0x76d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x78, 0x1d, 0xc7, 0x10, 0xbda, 0x8173, 0x9027, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75b, 0x4, 0x4, 0x6, 0x80, 0x1, [{{0x9, 0x4, 0x70, 0x9, 0x8, 0x84, 0x53, 0x84, 0xf7, [@generic={0x78, 0x3, "dd61b165d4ccb5569a8ea5d5b7c4f07723a3a7680494c5d311d54933ea3e98afc6e95189a1724d399657dc3cc122be1fe38a8254b39f2611242d6cea7b083a3c0bc5fbe49168ec547f335f94e186fa2def5f64793087156df6a61657e8e709559abdad7f45b7cf480de9a03c34131163c61150de1ee0"}, @uac_as={[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xf6, 0x4, 0x75, 0x6, "ddd1d7", "fb9b"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7e, 0x1}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x3, 0x1e, 0x1f, "", "c7"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x7, 0x2, 0x1, 0x40, "6b269052b8432c0b15"}]}], [{{0x9, 0x5, 0x4, 0x4, 0x40, 0xbf, 0x1, 0x1, [@generic={0x77, 0x7, "e9266e626c34aa4289966b662c95e26f1208afe02941388b8bc14790cb70c7c35cc9804520c3b6f259328755508f847e824eaf627ad29bc459c266f861adb61e51d9b0298f162ee35656dc1647e7a28138e82dd2c4e6539dfee7da8ce07324b9b246e3dbf8d092d8c5631feb331e7cadb5953447c0"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x1, 0x2f, 0x48}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x0, 0x20, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xac}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x40, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x6}]}}, {{0x9, 0x5, 0xd, 0x3, 0x10, 0xd4, 0x61, 0x8}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0x1c, 0x7, 0x20}}, {{0x9, 0x5, 0xd, 0x8, 0x19f, 0x6, 0x42, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1}]}}, {{0x9, 0x5, 0x9, 0x8, 0x20, 0x3, 0x2, 0x3, [@generic={0x79, 0x11, "046073f63f5dcc1bf534ca16bd2217f8f9a4677fbab3c7cf606c3010f2d7f79abd4d2c741f0e280e547cb4351ee8516e0b0904845bb81b071f246b43dd56cb71f1334547fd9a4fee7ab9df49b0f98c982db5a5184d8d48eb7dfacb7d35504207aabdcdc09c4a8a316fe20a0e3a07246f87082523842eb6"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x20, 0x800}]}}]}}, {{0x9, 0x4, 0xeb, 0x20, 0x5, 0xff, 0x4, 0xe, 0x1, [], [{{0x9, 0x5, 0xb, 0x10, 0x20, 0x0, 0xf7, 0x33, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x1f}, @generic={0xf1, 0x7, "ac2afb1a24c67575ac1914bad9c094df0cb6d7204a43ee4b83cd3ffdc221ac5dafa5cc1fc4e044a1786dd40feb4e213bebaffd323017648fd6de754a2da098d8c06ef12f7484c8f7adb58df73c2201086db13c67e5996924f24090673e427f3709898ba1179de7786b1b92b5c841873306acc6f32ef5f48b56c0ec11f33bac768bf583deefa2818a3127a4fff912d6565ff485aea175b3db68e7f6bc4ceb4e1a6da399cd37c24289202a41b707844ea9a06ab5061596ec1a45b8523cd1ae73db252d602eac40e761ed69823c3e22d2acd804d3ed9fdf46a8eb4661aaa8863b20210e8787134665dc9b5f2ed375af91"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x80, 0x80, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x1}, @generic={0x83, 0x22, "aa45fc91b2733932c56ff56cf79dda88628a8436077ef6a76230d9cbdf4f41cd4814896d65f0f9539472f4edf7d7af84123ebe079dac69302c81adb96cc374fcf7a1045e7da04c52ffbe56b7d5bffe7164bff93483f54e036718f70420cdeb26140d18861349d485df7237140e8bd3f83c30a88354caf15e7f19f1f17ecb7e4d59"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x400, 0x5, 0x81, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x80}, @generic={0x6b, 0x21, "fd9f332620c03266b5a37148ed88f6daab7719ff5556560cf10a90f5cd9cade063c383c895c5af5c1118e3d55497a3203b7a215f38cf4d315ae62a1adb2d459df0f72e8c7778537f3b199c68e8d8eed50d8e0c7b9d7d47a1d56a5f3194b0ec763da552636de407dbb3"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x400, 0x0, 0x7f, 0x20}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x40, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x3f}]}}]}}, {{0x9, 0x4, 0x26, 0x40, 0x1, 0xd7, 0x29, 0x70, 0x1, [], [{{0x9, 0x5, 0xb, 0x1, 0x200, 0x9, 0x80, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xa0}]}}]}}, {{0x9, 0x4, 0x97, 0x20, 0x6, 0xf6, 0x27, 0x73, 0xf7, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x5, 0x6, 0x73, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x98}]}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0x9, 0x4, 0x8a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7f}, @generic={0xd5, 0x0, "fe9af6c9aab3c64c66432ed965285daa7debde24cba1aa183f9db66bfcde938c894bc7443b0a77ee8d642348a06b4ecfa0b560e220d71fd0d48fe5eb4049d6fcd18ca9ae382b1ea68c805c5316b44464fc50fd27877da47e696465c7880d999269b5631cf7bf842978309606d61ee0654fe3c264284c155e6c438809bdcaf62aabc45f7f934ea077348c6be56ac3409f05caf4239650c054bd0fd46f8bcf0115909baa76cf5c5a8657eb2fb8beb5f73467c975589b2c8c607fe492ed76202bc8af46ce7f0540e78df27498b5bcb8b953226f45"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x0, 0xe0, 0x1, 0x25, [@generic={0xf0, 0x3, "47355282e5278f35dd3dc7f298b8aa493084530567eee8b9ddda4ec992eb47872129fc08d10141718ad135f3322302473c8f4c4d26604b17562218dfc3d787310d95b1ef3948239611dcabc4082ab36fc2f4ad68223cbf0e68170054f58eeaffa48d1aa6617e65e82e97af38e1a669aec1e0734d826513d11af0e9d1e77d1bbdcc1217959131c19e242da51de4accea58601ccfc20bb2b1e1360c807a8ebd7b9bb919eff5de39a7c8f14cb5e7f3f3445474d83d47d4a407a48040f153106760b036dd0cecca5b780dc8fec77e75b8fe88c0f8b7527d3a9a149470ac70de4df5493565b110f2c9c93d1250828b14d"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x20, 0x8, 0x0, 0xf6}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0xac, 0x6, 0x80, [@generic={0x49, 0x11, "d2dd51bc7d8e3290167ed3d50f66ce6766c2b3b07130e775016e5de1f1debf889a1532dba26ec184230838e2f712bea85ee1ab07bcda5142d2677fcebf28e2d30dbc7ada8bbfa9"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x7, 0x8, 0x20, [@generic={0x9c, 0xe, "33c791643917e4b4b4a24896cd8c3c53dc24be9eaaad140be216dcaa30ac2107d4b630ee3c9973a7edad0a07649ff415c4fcbafc2b151949401dfd5465a9c79e16ae5b14e1fe3cc6d54fcba15dc5489f7871a2bc791078d1ac0dc522309ab30c9d91ba5542d981177f9fc7b12c9668c79d55740ca7ffab099383202e0fe0d2b752f316f0b316d77afbe34983693398e41752e75215354a5542ab"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x9}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x201, 0x1, 0x0, 0x91, 0x40, 0x7}, 0x20, &(0x7f0000000800)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xc7, "a8724097e2d30f4906052015ac11048e"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x3, 0x8000}]}, 0x5, [{0xe9, &(0x7f0000000840)=@string={0xe9, 0x3, "f073fc01532f04d8ae4b2f3509bcd8c292a140fef81139056c3b11b52db17089ee6716a57ffe99a96fcc5ab62924c7dfadb7ea09fce4f61ced880d273fb0e413149cbec213a84ebc3720a341180d4f232d3d011c3275d2dc3c24697619a8e09b3248a9470e27e7a697761aa8725b493216bb225c5b125605d44062cceda8384886b7a00958938f2e323792d1fc655713442c6336af3adcaa04393910af629837e9c56ac0041a536686c59e9e85bf8be4e46c84f42aaf17f2a2f0f086915abd6c2c0e6412b76c9b82374695ae80e8716a2d4b057aac30c087dee3fead533225bb5f69f7639f1ab6"}}, {0xa7, &(0x7f0000000940)=@string={0xa7, 0x3, "f65819c0696e080758d38c065bfc5d84eaf79fa9b8ef1ef8cb8e27ad629105d9d03e5968f09895ec5c0b30e4d910a0b446ceb1dc3f35d6abeb055830bd69e7cec32ee4371b52a02e8a33b23bf1059ae7f27c00eb9d4b61971e07c70cf898b8b94847859b4402d95836ba95fbc63e8443352dd24cde296916357cb6efda918a133eb8be8ff74629a883d5fd367239d4e0f111d4bbd4d33432d52dbe64caf770fd7ffa46c903"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x425}}, {0xdb, &(0x7f0000000a40)=@string={0xdb, 0x3, "39c402ad8851d363e1b9cd5fca324919e366b58c4dd97880987e1536af0a2ed13769d6decc3782b93e7ff1c364319f5787a5e21d626c0e2efa535470f4f916893d7fa0da61a568cdfeffb431ae9be04f39011daba6feafce8c104181b74b5da5a769ef680364e947e290549d370eb06685d9957b7cb528b6be3e5f9fdbaa503b9ac83abdf869d669ccf20b545aec4ea0ff5fbf594f80cdb87ffb4e5f36dd7e93e0c7bc01fe5044f4ebd065cbc6683417ac0f7646be1dca7f92b578bdf4ef33d23751cc750e40042d873b934447f6748d000ef065ed1e276128"}}, {0x1c, &(0x7f0000000b40)=@string={0x1c, 0x3, "46b7c4af42adf60eeca8a61d7f6c03cdeffd04b8f08272bedd31"}}]}) 15:51:00 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) 15:51:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xfc00, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:51:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$set_reqkey_keyring(0xe, 0x1) 15:51:00 executing program 2: open(&(0x7f0000000000)='./file0\x00', 0x1c3541, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') unlink(&(0x7f00000000c0)='./file1\x00') 15:51:00 executing program 4: r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000004580)='/dev/dlm_plock\x00', 0x18000, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000004680)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004640)={&(0x7f0000004600)={0x2c, 0x0, 0x101, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x24044080) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x8000, 0x2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x34}}, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000140)=0xffe00000, 0x4) [ 883.450253][T12792] usb 6-1: new full-speed USB device number 43 using dummy_hcd 15:51:00 executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) socket$bt_rfcomm(0x1f, 0x3, 0x3) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x4240a543) ioctl$TIOCCONS(r0, 0x541d) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x6, 0x2, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/942], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, r2, 0x0, 0x10, 0x0}, 0x30) close(r4) 15:51:00 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc010643a, &(0x7f0000000040)={0x0, 0x1, 0x15}) 15:51:00 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 883.968903][T12792] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 883.978435][T12792] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 883.987126][T12792] usb 6-1: Product: syz [ 883.991446][T12792] usb 6-1: Manufacturer: syz [ 884.232263][T12792] usb 6-1: config 0 descriptor?? [ 884.301571][T12792] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input120 [ 884.477789][ T3221] usb 5-1: new full-speed USB device number 44 using dummy_hcd 15:51:01 executing program 3: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x80047453, 0x0) 15:51:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xfe80, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 884.527392][T12792] usb 6-1: USB disconnect, device number 43 15:51:01 executing program 2: r0 = socket(0xa, 0x3, 0x200000000000ff) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000304}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0x20000004}) [ 884.838779][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 884.849265][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 884.856538][ T4874] loop3: p2 < > [ 884.970538][T17956] IPVS: ftp: loaded support on port[0] = 21 [ 885.038311][ T3221] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 885.047710][ T3221] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 885.056192][ T3221] usb 5-1: Product: syz [ 885.060755][ T3221] usb 5-1: Manufacturer: syz [ 885.150766][T17956] IPVS: ftp: loaded support on port[0] = 21 [ 885.231602][ T3221] usb 5-1: config 0 descriptor?? [ 885.288129][ T3221] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input121 [ 885.365665][ T1600] tipc: TX() has been purged, node left! [ 885.421978][ T9054] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 885.486483][ T3221] usb 5-1: USB disconnect, device number 44 [ 885.918974][ T9054] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 885.928545][ T9054] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 885.937371][ T9054] usb 6-1: Product: syz [ 885.941689][ T9054] usb 6-1: Manufacturer: syz [ 885.972468][ T9054] usb 6-1: config 0 descriptor?? [ 886.027751][ T9054] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input122 15:51:03 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)=0xffff) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') 15:51:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005074e00"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) 15:51:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@dev, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 15:51:03 executing program 2: r0 = socket(0x2, 0x803, 0xff) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000080)=0x800, 0x4) 15:51:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xff00, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 886.249459][ T8711] usb 6-1: USB disconnect, device number 44 [ 886.277288][ T3221] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 886.516593][T18056] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 886.701769][T18061] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:51:03 executing program 2: r0 = getpgid(0x0) r1 = getpgid(0x0) tgkill(r0, r1, 0x0) [ 886.817596][ T3221] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 886.827286][ T3221] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 886.835789][ T3221] usb 5-1: Product: syz [ 886.840330][ T3221] usb 5-1: Manufacturer: syz [ 887.091123][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 887.101614][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 887.109149][ T4874] loop3: p2 < > [ 887.172206][ T3221] usb 5-1: config 0 descriptor?? 15:51:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') renameat(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00') [ 887.217765][ T26] usb 6-1: new full-speed USB device number 45 using dummy_hcd 15:51:04 executing program 4: ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000040)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) [ 887.337329][ T3221] usb 5-1: can't set config #0, error -71 [ 887.365085][ T3221] usb 5-1: USB disconnect, device number 45 15:51:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xff0f, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 887.760479][ T26] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 887.770122][ T26] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 887.778824][ T26] usb 6-1: Product: syz [ 887.783123][ T26] usb 6-1: Manufacturer: syz 15:51:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xb, 0x6, 0x209e20, 0x22, 0x11}, 0x40) [ 887.994530][ T26] usb 6-1: config 0 descriptor?? [ 888.068255][ T26] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input123 15:51:05 executing program 3: socket$inet6(0xa, 0x3, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x841}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x3f0, 0x198, 0x0, 0x198, 0x198, 0x178, 0x358, 0x358, 0x358, 0x358, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'vcan0\x00', 'wg1\x00'}, 0x0, 0x158, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'fsm\x00', "0d000400000000e400000404fff0cf81dfd28c89544e14cd3e01dd24289831866346c88621039b284c3ff45c42995560a99952bed40cf5a8b9fb6133db7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a7dbaae5592e8b15900000100", 0x8}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "631499f89a95e49806ea7f9eaecf0b0fd0691f86bb9a323cbbaffc30fb26"}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'team_slave_1\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0x1c0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x450) [ 888.259963][ T26] usb 6-1: USB disconnect, device number 45 [ 888.281295][T12792] usb 5-1: new full-speed USB device number 46 using dummy_hcd 15:51:05 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000980)="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", 0xfc0, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000680)={r0, 0xd7, 0xce}, &(0x7f00000006c0)={'enc=', 'oaep', ' hash=', {'hmac(md4-generic)\x00'}}, &(0x7f0000001980)="07bba3c12e9baa98db7e160d8071f37a2a0b3926b7aa688760efba34de26585c68c4ddd9ddb48fe4822510aa03dd8adcd4016c99cda17c36864e0b44a5ee61c8135dc1909d97a71c5223bc4dad3420fa1b92fbea5bf19cc77e4af3a495048853aa410309aedde68ab5cc2701f75d55fdae4c817877836000bbd9aa1e3b3a9411c9f07caa3cdc420718d7a4b999366b00393595659eddf240ea48a1d5ed0357d9b1eafe47ba91f32f9ed76ee3256d67d907144f4a80c90d3819a265613afc69f44b17eac9defd9bd8e9f9c37d793d76e32503499119f0e2", &(0x7f0000001a80)="c3784cd3b941d54733b5bec8b6b1746d626902111ca73951bc372a3e117c5e1ce3e2bfa71e1e6ed7601e81a8062489088db8c87feeeaa7a637c7a88475ad7008109429f903f2b087cd05b44da745c8ea461c7784ac43b6489d270c7c6168395a701ac0cc61cbd6ce6527a534cb3a40932b7fa7491db5eec4704861af458ceba83c1686da4d1032160439781051ac8b222be2696f2a2fdbd487f3aa22f595e3c713cfc0beacc4b75cc24d4754826634a4d7b86c25e0beffe1904fcc009203062b4bbf7ee28da46f4df7bbd4972f10") mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) semget$private(0x0, 0x207, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9b00000b", @ANYBLOB="00042bbd7000fddbdf2505000000140006006970766c616e3000000000000000000014000300200100000000000000000000000000022a00070073797374656d5f753a6f626a6563745f723a6c6f67726f746174655f657865635f743a73300000002900070073797374656d5f753a6f626a6563745f723a6d656d6f72"], 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000001b80)=ANY=[@ANYRES16=r1, @ANYBLOB="0308203d7000ffdbdf11050000000800ba4b0001000021960c00ffffffff1400c70c000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4044091}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000880)=""/235, 0xeb}, {&(0x7f0000000580)=""/109, 0x6d}, {&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000440)=""/133, 0x85}, {&(0x7f0000000740)=""/165, 0xa5}], 0x5, 0x0, 0x1) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000400)={0x6, 0x1, 0x6, 0x2, &(0x7f00000003c0)=[{0x6, 0x100, 0x5}, {0x6, 0x8, 0x1ff, 0x280}]}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000540)=[0x0]) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x412}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 888.775247][T12792] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 888.784807][T12792] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 888.793502][T12792] usb 5-1: Product: syz [ 888.798009][T12792] usb 5-1: Manufacturer: syz [ 888.840777][T12792] usb 5-1: config 0 descriptor?? [ 888.909149][T12792] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input124 [ 889.084009][T12792] usb 5-1: USB disconnect, device number 46 [ 889.101934][T12789] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 889.352188][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 889.362541][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 889.370069][ T4874] loop3: p2 < > [ 889.678782][T12789] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 889.688305][T12789] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 889.697064][T12789] usb 6-1: Product: syz [ 889.701356][T12789] usb 6-1: Manufacturer: syz [ 889.820248][T12789] usb 6-1: config 0 descriptor?? 15:51:06 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/2) 15:51:06 executing program 2: setuid(0xee01) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x6e, 0x5f, 0x5f]}, 0x40) 15:51:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f00000000c0)=0x10, 0x4) 15:51:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xff28, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:51:06 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003ee48bd417c7153677c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010674f6fbc59eac09ace7e6acb2d927256827d29ca33a00d86a5762b2ce231e1da05377a78ea1dd992abcc51de11b2244432818a5f545db3cb9b857903bae2c633abdb8b225b64e4565ccdbb6d9b2020e5f4245bb3c1a83eb5"], 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000040)=0x1f) [ 889.917397][T12789] usb 6-1: can't set config #0, error -71 [ 889.949530][T12789] usb 6-1: USB disconnect, device number 46 15:51:07 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x4048854) 15:51:07 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSDEBUG(r0, 0x8004745a, &(0x7f0000000000)) [ 890.497478][T12792] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 890.727508][T12789] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 890.767474][T12792] usb 5-1: device descriptor read/64, error 18 15:51:07 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f00000012c0)='net/rt_cache\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x75b28dc6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') sendfile(r1, r2, 0x0, 0x7ffff00e) 15:51:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x50000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 891.158421][T12792] usb 5-1: device descriptor read/64, error 18 [ 891.222914][T12789] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 891.232592][T12789] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 891.241477][T12789] usb 6-1: Product: syz [ 891.245789][T12789] usb 6-1: Manufacturer: syz [ 891.414910][T12789] usb 6-1: config 0 descriptor?? [ 891.507634][T12789] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input125 [ 891.517338][T12792] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 891.641051][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 891.651514][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 891.659097][ T4874] loop3: p2 < > [ 891.675045][T12789] usb 6-1: USB disconnect, device number 47 [ 891.791925][T12792] usb 5-1: device descriptor read/64, error 18 [ 892.188016][T12792] usb 5-1: device descriptor read/64, error 18 [ 892.214865][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 892.225359][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 892.233045][ T4874] loop3: p2 < > [ 892.308498][T12792] usb usb5-port1: attempt power cycle [ 892.487021][T12789] usb 6-1: new full-speed USB device number 48 using dummy_hcd 15:51:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xf0ff7f, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 892.977669][T12789] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 892.987479][T12789] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 892.996000][T12789] usb 6-1: Product: syz [ 893.000517][T12789] usb 6-1: Manufacturer: syz [ 893.017058][T12792] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 893.034562][T12789] usb 6-1: config 0 descriptor?? [ 893.088429][T12789] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input126 15:51:10 executing program 4: pause() syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x0) [ 893.293096][T12789] usb 6-1: USB disconnect, device number 48 [ 893.337569][T12792] usb 5-1: device descriptor read/8, error -71 [ 893.514858][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 893.525159][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 893.532802][ T4874] loop3: p2 < > [ 893.558222][T12792] usb 5-1: device descriptor read/8, error -71 [ 894.057026][T12792] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 894.227806][T12792] usb 5-1: device descriptor read/8, error -61 [ 894.500805][T12792] usb 5-1: device descriptor read/8, error -61 [ 894.627422][T12792] usb usb5-port1: unable to enumerate USB device [ 894.832719][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 894.843141][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 894.850637][ T4874] loop3: p2 < > [ 894.952336][T18114] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.677604][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 895.687964][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 895.695244][ T4874] loop3: p2 < > [ 896.142674][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 896.153035][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 896.160603][ T4874] loop3: p2 < > [ 897.233286][ T12] Bluetooth: hci0: command 0x0406 tx timeout [ 897.797798][T18114] bridge1: port 1(bridge_slave_0) entered disabled state [ 903.810675][T18114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 905.738853][T18114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 917.497769][T18114] device bridge1 left promiscuous mode 15:51:34 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000980)="5dd58b4f17ef6f7befe2dbc552123960a602835b984b7c801016202dfd36172e7bfac69e5e14589d5d2d5270b2dbcfd4f9855b9e39515d64d095baf2d0c6890498951e0cd38b9be59b6952e9dbf8441a97dacd3b7462e8f8e518a7215d6dc97a99f0f5d3a51aa70451a0354f9f47fcb6e1eb1b168c6429e5fa49f7d11299e09a5d8e2bc598d82bade0ed7eb415293ebd99d7fab81c634c03a7ae274dbc07372e39047456d1f113578fb0584ba9a788123314db0deaa70c02ae3c580ffd5b3e7cdb6c5d88686dad0cce31d23aa41b1a5eb7ed5e7c1d6ce0c406f5430766fef1f1edbab37d93fa17dfb7dae78cfb8ecea3ebfcd72b49b14cbf1ddca32ad77ba57f54c16a9c2115f9ed83e5d3b3c77887e9dc478eb1836445294b0967d131ee07cf60c625ca78ca06e84efc69b9bd7485b6396b71817fd3773221e0bb79fb4abade120f9dd0167e09a8483905c752ab9bd57baa52155adf59a316d9f4a5baeafdd889cff68c6a5070d1cc1751da7fc59c252c35880f30f6aa7fb15c2e1ce669e4d3f4cc909b3e4449f2f8a01eb1ef6f9b744702978b02f985f76081e1aa3b1c37c7852c7ad97c55dfcc8724547d8acbad9bba0e20f9176a7a8bd5f41b1661204681571cb2c32af777ccb5fdab90b1bb751c0bcd6ebaf16fea2d934a5bb39912fe08a5222dffef15de24d1bacc01d9d32aed48130479e9a34861511c3d107880b36ded36d61bfdd47af182a60f7d4aff793c7ea2ad9fb3da8bad9dbf701042a0f6f401a363551fb5cb84eecd30053af7f35a7442f894381b8c545e6e828d0e62dacedfa367442392384a7ca9fd6a93d759305265a212a8e9412a14cb59367d1261f8ab06fa6a04c95b4885f29f47b7f44ba4db0d2a8fd7e7d181e8ec454e1096f3171ff3d4e723899408ad03cce0f7b53ddd58506ac9ed9ca81a88b392ef787873330a660e6a179ddf2061b26abca38037cea15368ef3c644dc5e52e45b2eb5446468bb0e2c513be6fcb2c0a43ba5e5dd7276d72323e2854dc7215accebd299255d3aa369206921d1dcb1a12fe71ddd7cf98e0a0db49623c1986d3f9088809100263f1bd69d56afcfad811a967e7b80092e781c944c0c30ad6292ddbb60dd9887c54a8db2a150c60e759de6ff9142b5cffade15f1f81c2ff7ad17a31d497042ce8e11427bf8b8f4ffa442f45fb7d1cdc06c6cab7ceb1f57052562620d4d4e63857aef2bc01c328a2d7c510e87f21af04fc3d3f39b87dce4af2a651edc3d135bfc3ab6b00d8a259decf207e52a502c2954d2c82917453bb9bbcb5e8687dc82bb19350ecf6208148f645f1548d7be49b134eefde5d7b684a7041f5fa565725a7a159c19d97dfd240ad361add3608c4778779737c14bf13bcbe3e21275a272a244231cbf4fd0e71837246d512345ebe2cc5069cd541c2940018157d4dfcbd3a8e149f55c55a7a579e4209a0aa28779254b6acbd7211b68140e588d0cc2dc0c907fe82ea03338d6eb83bd68c26d96c67c84fa4872116961c84f78d7ba43a2392272965a5d00e5f0f97a0244c8c4733ae6b2e1930f419a1a82ed7b04c616d5573fdcf49f4fca1d2cb857062d5fc369e1ed45f74d5509f5bb59eb44f748480f8c1c2a5f9fde1a38ed8339acfe17482f3fec8291937ee639510bee6332e8f00dfb4659d642cd0ead598e6f4e5385ee6d311a084e2e6b68e09c86b8a215abdadc4f8f7fc0bf9f6d8c78031a5b8c6e89a9d0e1af24534cec726b7b9112e1e062284185b6b9f986650fbe39c50c7eb25f43b1edf621f891b5fc7fb0d2c8dce88a523d636a0f91103e4acda32df38762fb7b860bbc6e340a82d4ab6bcec08eeceefda63e79afd376d55d7c940afb0b4da0fe81f27df26ef5c3572b6c394adec39f59696f91e224fbeb41c293aa1c2a88ea3ac006af7c24545ac58c14cb026f84594cf3dbe6d920bed5eef0ba529afc2f6c9540e7490b6cbbe406296d55c9990b0b24477a650b31cb17bb46815860d2de37e95241ec153db5d012451d8ad6b49124919f72ab10a2d5fadef2460b82a62748a7dfc916c632fe49e9bcb08394a0c5932baba49f832d5a2b752326a424f31423ccf74fcf3394b32ae5596ca244c0ab4ab6bd3cddd9eb135a76a80968932ac71ac2547aea898212adaa4b67e5805af54a2bd67d073b20b803ce010f1531de15c038abfe9848fd76e7e4df74a73d533cd87dd6001148781d887ff8a63f306e525d7b451ea600d794b2d6893887fd0d80f01390c6158ab1aed6aa7f528096ac02097b3c35b00baf89180481c414f1e0fa44bde3a150a4c87a0bf03f6045551d121bd2723f46a2a051da4df2ff02ef97bf0b7925c0cf67ab9ff4baf1ad1ace9c0691c190dc64bd7d53347973960a301b2680711bc4d836624eabc11bbf1fdf9f89046f7842544e1ff4700561dfc11048ccfcafe7bcbdb605fd0b76a213b6b0e4643f7518f1abdcd8274fe6df0e6bab6d3b23bfd911af6f01beec18788309905c08ca7aa34fce7158c15cab72866c9b7c1ac50618be413d5680cff738aaa6491649628b45debb259689a89044c9a13adda8f21fc81bbf57e86b035ff7f9d033abdcd6a96f75247495648ff3fb99c92110d08a9f00fbc89f973ca471005e44f6bf5cd4a20196e80e2c779b566b521b6d7f366446eea645511bedc3e5a7bfc7ac64ec75dac9901f94af4b5ea76c0e30c4320c0fb200ebef2a2985af46d20dea1e2d48bd8d6b93b33e6d7ef710172af7f9823b500b3132be89b95894f70d2da224b905514077bb410c9acd0427d5d6c18f63f8c6084b6f2b84fcf5d360cfb46abd4fb5524d8720c82a71ea0324d3f7ed5fbbff9876ef8dfceda7ffd29678276f4e79a51485f1b536dd14d1d13125f369ce3180aa69fd4e50614753a04ef18e0912c2b4c2a4df2f74742b906a8cb7cc3f570eb9750e3fd561e88fc20ecbb6f8ee945f0175e95f974f540b03505ccc9a3e90eee69393d64d5f1f87ffdb37fd542ce3e82b92df19eb855ab234e6efe8f5de9ffbf988ab1f08d208c62035ac558083f9734f6f003576ef32d7f3c2a36a5eed1ad93d5a4bdaeae887a237cb575dab3eaf168f7754d0a6ecb6ceec5c288f69faf7af1d6c5e43711e64dd44197662a7c193fb9bb69c40f13e6e02d16d26cb222f932f0dc344f1d850098696cd43982b2bde917fcb38478201dbd6c733d66fd294027c4b2e780e569863ca66a504d1eec689564dc13953544b7a30dc79562c72578a64fa16205ad9fba92bb092ece045d2f94745e012bc519c7055b759021eb29e51dfcf64aa618ce57a7137070ca07e7d23cb4e2e8dffdbb24a1fcfa8ddda12944bdf72c14f0afef64102f71bc8efc63a9aa9b96136d394beb7e0d49b5dbe69ffa8febd31bb8d5b18dbdb823c1f9a9f3ef4e95e84ce89da3e68926eb08a65f6bb61a2755f372bf4dec7addb53ba9d3a9298f7bfe6b9c10f5f8dfc323bc6e116cc5f8f912e7840a94673f3636d6c76c450aa4473cf6df52b8f4aec789a84c88e0540ca6fe2953286425a4bd6b714e682ce848f94d88ce5017d0f54d54e3941c8ef6ddaa121cc2426ac3b51861e15d449f0c14b39c88a1bc18505d2b186cc3fc9d848b4a658f26c11ddf4c2d5d38683de97009fc63a9deb9be686662fd878b3b1c536e21d5e3b71d7d69976392828c6896fde17220cebdb29b75764846bdb049dce291353c51e1bfcb95a39f266110539611de0e408c30431dc0b22d42841cc49947c1b44135e853406060b81238cdbc77cb26db16200db01df447c360ee3dbd9e64dae6e6cb493ebc2be3aa12a7773549b0a63186eaece6b48d9dafe381054dbcb718f8b43bcf7102ee77dd76a392b1dfab48b12704863d5f408b8ea53465255645ca3dd2eee76c734456b1224e0055c7788803960281c21c91a4e1e7a1173c3ada7c1d9e0b377cd991f47202c9bd4707805fd51f5f27300dd6b27adaead8fdf419feeb7880c0b3a366249fc37f973f15dd3d46b3299e3aa7fe0c63ffc9ea8a371c61e530b3c764b956d1d33637093ef8066a6ad4595bd83a3bd60aa0f87fb6a9bec1935aa1b32739d71ce09893dc9cb171476d48d18625766ea26b35882935cc3c618071453acffdaf7cbc5b118879f42ebb20b66cfa011a46bcd6493424f6a295c71c26bc39dc07c408b8342bf5258fda18bdcec6c805625e28dd37ef49a17906a8d346769adb4bc4bd0f6b717e69f66753ae0c22751a5c80fcc092518931ab6f961ccde0d938cb1cf8ae509edd5815a4dab389bb8c8b53fc6a42b9c9ad6c0be19fddf608c1ceaf966f591d9175c066c9557a893a1c2c74b854172e71da290dff7972bca46abc984d0de851a2561e0899613ae257d378a7512dad480f07789321833b6f0751025f4cbc78d54d3217727f16ae6efe03de35afa326b6cb539834d6b07c87979bc69cef5337ecfe3d1ec3be715d1cfb5dcc779603354c5b8f79203cbcacfc6f92a404c39c00a39dc612a6d539c52950fef83864117944e74ca5cc634f90036d89786bb1a94e58d69dbaf38308e8ebe36fd4527d0c4e76e574d2072010540faf85949a06fd4f3f4743dfb35815e85f76b9b79bfef2ff93873618b0b81c94e3f476b67bbc390ef95f0d01fdd24aad3dda90f72c12e0599c8d5c7cbdf08ac07fd3f948b736a67dea31fef61db21225c8e2ef755c4c4552db23de31787ec20ab559ac1e1beb95cabac022bad455b1a17643e1c9fc23dbb21cb6c8ad63d3d63328c9c446bdfd0250fc4864cff01b251a3df1c96d94042ea41aec8a6cf1ee9db4baa57bdc6f2a21a6ef73135b1893abcfdcaec7a99d4e6a2e21c4fc3138c1a9eadedcae00329c36c6b5e39aa5565e8370d59aaa3aa311279bc98e27fd2f07bb6a78f1b5b84e0a3748b14e2545ab36ce24ea5f46c4b341bc4a46d88d4679b51662899e0ba8ac6f5ea5e2528125434f8d592595d5fc033d7132d8687d101c14d9862d9946b76617ba4e111c002b466cd9d200def690fc379383421d56af96c4ee706976b798bc35cb158592b3eb56d5ae598748d85ca7e014de6d33d378fcc585589c62be3a39195bb0c4598cd599cb2cce2d2b74089f17ac281c44f2ce296b717e81507bace6f5d12b51f90fde513e875feeb55517432740bc19a9b56fb090f91b23febf7804045d4b3590adf136466826efd7d2f095c4425018ca9d205a92056873476a60f6aa36bbd178e205ca99fb8b42b15555525f4a7ed5bd5b2dc7da9af377279d09865f8afce9fba59a7d45b62a697bcfeb68f230ed1304e6591b5bb355bb8525e2b30779a84984f75004eb12335de66b823fafa4aa0072cca26200fc8ac9b83ad9bf9f3d15cf9e7b24e655da03d72c927e1b7891fe355dc1cc8e95fddd408a566142a685eb59dfd849329facd954d84b0915c88341faf964bb0c6729bd090cdc7362a42f5326b11286d111ade4cf561959392c18ef38fb713d8eb55f10c3a3e1efc5d926a6872946efa07418ae591247a8bfc74f6eb9ad76cccedcff0633e8fd0d4deaa52aed18a0d222c3b6c1fe12741bc44956396f14c1256ff8511e7f9bf6eddc2b8efd113b8471750c337cab54106784d25d52719a2545d8a0cd245507f8125355af46c73a8c4c49ecf4d8e44195320db403a5e8746896891afa71cfe5583f1589991f612660feedc72a9003832fc2301e359b6c45b63012add6f1100ce79d1f75755a", 0xfc0, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000680)={r0, 0xd7, 0xce}, &(0x7f00000006c0)={'enc=', 'oaep', ' hash=', {'hmac(md4-generic)\x00'}}, &(0x7f0000001980)="07bba3c12e9baa98db7e160d8071f37a2a0b3926b7aa688760efba34de26585c68c4ddd9ddb48fe4822510aa03dd8adcd4016c99cda17c36864e0b44a5ee61c8135dc1909d97a71c5223bc4dad3420fa1b92fbea5bf19cc77e4af3a495048853aa410309aedde68ab5cc2701f75d55fdae4c817877836000bbd9aa1e3b3a9411c9f07caa3cdc420718d7a4b999366b00393595659eddf240ea48a1d5ed0357d9b1eafe47ba91f32f9ed76ee3256d67d907144f4a80c90d3819a265613afc69f44b17eac9defd9bd8e9f9c37d793d76e32503499119f0e2", &(0x7f0000001a80)="c3784cd3b941d54733b5bec8b6b1746d626902111ca73951bc372a3e117c5e1ce3e2bfa71e1e6ed7601e81a8062489088db8c87feeeaa7a637c7a88475ad7008109429f903f2b087cd05b44da745c8ea461c7784ac43b6489d270c7c6168395a701ac0cc61cbd6ce6527a534cb3a40932b7fa7491db5eec4704861af458ceba83c1686da4d1032160439781051ac8b222be2696f2a2fdbd487f3aa22f595e3c713cfc0beacc4b75cc24d4754826634a4d7b86c25e0beffe1904fcc009203062b4bbf7ee28da46f4df7bbd4972f10") mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) semget$private(0x0, 0x207, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9b00000b", @ANYBLOB="00042bbd7000fddbdf2505000000140006006970766c616e3000000000000000000014000300200100000000000000000000000000022a00070073797374656d5f753a6f626a6563745f723a6c6f67726f746174655f657865635f743a73300000002900070073797374656d5f753a6f626a6563745f723a6d656d6f72"], 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000001b80)=ANY=[@ANYRES16=r1, @ANYBLOB="0308203d7000ffdbdf11050000000800ba4b0001000021960c00ffffffff1400c70c000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4044091}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000880)=""/235, 0xeb}, {&(0x7f0000000580)=""/109, 0x6d}, {&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000440)=""/133, 0x85}, {&(0x7f0000000740)=""/165, 0xa5}], 0x5, 0x0, 0x1) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000400)={0x6, 0x1, 0x6, 0x2, &(0x7f00000003c0)=[{0x6, 0x100, 0x5}, {0x6, 0x8, 0x1ff, 0x280}]}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000540)=[0x0]) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x412}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 15:51:34 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109cab2a12d809bed9abf9fdecb9585031b0001000000006a00c0ee68d5037567c28a8187a886ca12ee9593e506c5dc1807dbaab96be7ab90b1d238067111bfb3e8df76c84655eae364324ed4d5885913f7f983f68ae0c7e0225ac197e57059d0230b336709fee383998c79ea37bc0e599aa2d2241a1ec246e36cd33602aa24e45c74ebf987257006589cc778d7c1c8"], 0x0) 15:51:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x1000000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:51:34 executing program 4: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0) 15:51:34 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x41, 0x0, &(0x7f0000000040)) 15:51:35 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000780)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002001100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x4) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 15:51:35 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000001400)={0x0, 0x0, 0x0, 'queue1\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000140)={0x0, 0x0, {0x2}}) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x17) r5 = gettid() tkill(r5, 0x40) [ 918.387826][T12792] usb 6-1: new full-speed USB device number 49 using dummy_hcd 15:51:35 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000980)="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", 0xfc0, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000680)={r0, 0xd7, 0xce}, &(0x7f00000006c0)={'enc=', 'oaep', ' hash=', {'hmac(md4-generic)\x00'}}, &(0x7f0000001980)="07bba3c12e9baa98db7e160d8071f37a2a0b3926b7aa688760efba34de26585c68c4ddd9ddb48fe4822510aa03dd8adcd4016c99cda17c36864e0b44a5ee61c8135dc1909d97a71c5223bc4dad3420fa1b92fbea5bf19cc77e4af3a495048853aa410309aedde68ab5cc2701f75d55fdae4c817877836000bbd9aa1e3b3a9411c9f07caa3cdc420718d7a4b999366b00393595659eddf240ea48a1d5ed0357d9b1eafe47ba91f32f9ed76ee3256d67d907144f4a80c90d3819a265613afc69f44b17eac9defd9bd8e9f9c37d793d76e32503499119f0e2", &(0x7f0000001a80)="c3784cd3b941d54733b5bec8b6b1746d626902111ca73951bc372a3e117c5e1ce3e2bfa71e1e6ed7601e81a8062489088db8c87feeeaa7a637c7a88475ad7008109429f903f2b087cd05b44da745c8ea461c7784ac43b6489d270c7c6168395a701ac0cc61cbd6ce6527a534cb3a40932b7fa7491db5eec4704861af458ceba83c1686da4d1032160439781051ac8b222be2696f2a2fdbd487f3aa22f595e3c713cfc0beacc4b75cc24d4754826634a4d7b86c25e0beffe1904fcc009203062b4bbf7ee28da46f4df7bbd4972f10") mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) semget$private(0x0, 0x207, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9b00000b", @ANYBLOB="00042bbd7000fddbdf2505000000140006006970766c616e3000000000000000000014000300200100000000000000000000000000022a00070073797374656d5f753a6f626a6563745f723a6c6f67726f746174655f657865635f743a73300000002900070073797374656d5f753a6f626a6563745f723a6d656d6f72"], 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000001b80)=ANY=[@ANYRES16=r1, @ANYBLOB="0308203d7000ffdbdf11050000000800ba4b0001000021960c00ffffffff1400c70c000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4044091}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000880)=""/235, 0xeb}, {&(0x7f0000000580)=""/109, 0x6d}, {&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000440)=""/133, 0x85}, {&(0x7f0000000740)=""/165, 0xa5}], 0x5, 0x0, 0x1) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000400)={0x6, 0x1, 0x6, 0x2, &(0x7f00000003c0)=[{0x6, 0x100, 0x5}, {0x6, 0x8, 0x1ff, 0x280}]}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000540)=[0x0]) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x412}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 918.827926][ T1600] tipc: TX() has been purged, node left! [ 918.850397][T12792] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 918.858368][T12792] usb 6-1: can't read configurations, error -61 15:51:36 executing program 4: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x16) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) [ 918.920258][ T1600] tipc: TX() has been purged, node left! [ 919.087380][T12792] usb 6-1: new full-speed USB device number 50 using dummy_hcd 15:51:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x2000000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:51:36 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000980)="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", 0xfc0, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000680)={r0, 0xd7, 0xce}, &(0x7f00000006c0)={'enc=', 'oaep', ' hash=', {'hmac(md4-generic)\x00'}}, &(0x7f0000001980)="07bba3c12e9baa98db7e160d8071f37a2a0b3926b7aa688760efba34de26585c68c4ddd9ddb48fe4822510aa03dd8adcd4016c99cda17c36864e0b44a5ee61c8135dc1909d97a71c5223bc4dad3420fa1b92fbea5bf19cc77e4af3a495048853aa410309aedde68ab5cc2701f75d55fdae4c817877836000bbd9aa1e3b3a9411c9f07caa3cdc420718d7a4b999366b00393595659eddf240ea48a1d5ed0357d9b1eafe47ba91f32f9ed76ee3256d67d907144f4a80c90d3819a265613afc69f44b17eac9defd9bd8e9f9c37d793d76e32503499119f0e2", &(0x7f0000001a80)="c3784cd3b941d54733b5bec8b6b1746d626902111ca73951bc372a3e117c5e1ce3e2bfa71e1e6ed7601e81a8062489088db8c87feeeaa7a637c7a88475ad7008109429f903f2b087cd05b44da745c8ea461c7784ac43b6489d270c7c6168395a701ac0cc61cbd6ce6527a534cb3a40932b7fa7491db5eec4704861af458ceba83c1686da4d1032160439781051ac8b222be2696f2a2fdbd487f3aa22f595e3c713cfc0beacc4b75cc24d4754826634a4d7b86c25e0beffe1904fcc009203062b4bbf7ee28da46f4df7bbd4972f10") mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) semget$private(0x0, 0x207, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9b00000b", @ANYBLOB="00042bbd7000fddbdf2505000000140006006970766c616e3000000000000000000014000300200100000000000000000000000000022a00070073797374656d5f753a6f626a6563745f723a6c6f67726f746174655f657865635f743a73300000002900070073797374656d5f753a6f626a6563745f723a6d656d6f72"], 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000001b80)=ANY=[@ANYRES16=r1, @ANYBLOB="0308203d7000ffdbdf11050000000800ba4b0001000021960c00ffffffff1400c70c000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4044091}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000880)=""/235, 0xeb}, {&(0x7f0000000580)=""/109, 0x6d}, {&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000440)=""/133, 0x85}, {&(0x7f0000000740)=""/165, 0xa5}], 0x5, 0x0, 0x1) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000400)={0x6, 0x1, 0x6, 0x2, &(0x7f00000003c0)=[{0x6, 0x100, 0x5}, {0x6, 0x8, 0x1ff, 0x280}]}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000540)=[0x0]) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x412}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 15:51:36 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f00000024c0)=[{&(0x7f0000000400)=""/115, 0x73}], 0x1, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x1000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x806, 0x0) sendfile(r1, r0, 0x0, 0x40811001) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x24d) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) [ 919.489242][T12792] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 919.497269][T12792] usb 6-1: can't read configurations, error -61 [ 919.592120][T12792] usb usb6-port1: attempt power cycle 15:51:36 executing program 3: statx(0xffffffffffffffff, 0x0, 0x0, 0xa8100d27f9545870, 0x0) [ 919.847464][ T8709] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 920.269816][ T1600] device bridge_slave_0 left promiscuous mode [ 920.276671][ T1600] bridge1: port 1(bridge_slave_0) entered disabled state [ 920.378236][ T8709] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 920.387304][T12792] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 920.395171][ T8709] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 920.403778][ T8709] usb 5-1: Product: syz [ 920.408178][ T8709] usb 5-1: Manufacturer: syz [ 920.518473][ T1600] device hsr_slave_0 left promiscuous mode [ 920.579374][ T8709] usb 5-1: config 0 descriptor?? [ 920.604329][ T1600] device hsr_slave_1 left promiscuous mode [ 920.613958][ T1600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 920.631393][ T8709] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input127 [ 920.657595][T12792] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 920.665557][T12792] usb 6-1: can't read configurations, error -61 [ 920.675073][ T1600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.733018][ T1600] device bridge_slave_1 left promiscuous mode [ 920.739929][ T1600] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.827452][ T8709] usb 5-1: USB disconnect, device number 51 [ 920.918814][T12792] usb 6-1: new full-speed USB device number 52 using dummy_hcd 15:51:38 executing program 5: ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)={"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"}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) 15:51:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getrlimit(0x0, &(0x7f0000000380)) 15:51:38 executing program 2: syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id'}}) 15:51:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x3000000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 921.147840][T12792] usb 6-1: device descriptor read/8, error -71 [ 921.357222][T12792] usb 6-1: device descriptor read/8, error -71 [ 921.447310][T18333] fuse: Bad value for 'fd' [ 921.463340][T18333] fuse: Bad value for 'fd' [ 921.478178][T12792] usb usb6-port1: unable to enumerate USB device 15:51:38 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x18, 0x0, &(0x7f0000003580)) 15:51:38 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) fspick(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1) 15:51:38 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x127c, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "ee462470c06ade6800c3b01150a04fef1dbbdeb85da8894684b441d070f6401227909d2e6a347651b26b98e38dbc3ca91fd943a66343f83223ad49f129233a1d", "3b761c5c42de02661c26ce8fc7f17feea23bf68ff6f3dff92cc6c509803a0338"}) [ 921.992358][ T1600] team0 (unregistering): Port device team_slave_1 removed [ 922.046076][ T1600] team0 (unregistering): Port device team_slave_0 removed [ 922.083680][ T1600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.125308][ T1600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.150591][T10251] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 922.258973][ T9058] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 922.529736][ T1600] bond0 (unregistering): Released all slaves [ 922.625356][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 922.635679][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 922.643242][ T4874] loop3: p2 < > [ 922.689375][T10251] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 922.698729][T10251] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 922.707392][T10251] usb 6-1: Product: syz [ 922.711685][T10251] usb 6-1: Manufacturer: syz [ 922.811027][ T9058] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 922.820655][ T9058] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 922.829587][ T9058] usb 5-1: Product: syz [ 922.833907][ T9058] usb 5-1: Manufacturer: syz [ 922.864626][T10251] usb 6-1: config 0 descriptor?? [ 922.883392][ T9058] usb 5-1: config 0 descriptor?? [ 922.919047][T10251] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input128 [ 922.938504][ T9058] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input129 15:51:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 15:51:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="660af8c5f5b4f35a8d0afc53070000caebcabc97d1dd1d02ae98b3e06ddb029addb9a884d58e899c9052bda062b90cf7ec93cf0e40d395a82bcc38fd04104adbac8caf5022a19b000f338884fbbb07cfb0169d210fe0b9c4e341fd03d27c12680affc7cca744c7975f94594e3cf774196781960fb71d9dea824024ce7991548d80ca9efb63cdbec5a31c9a8bf27af1a9cdc170498650419194b93b2336328a9f5b15593d5b23f42b33ab5b8449d766bec1d5579cd735e89d8eee274cf9d77e3896a8dba01a6febae3567c8dac865351eae1cdffabbd5c378354bb995d6067503bbca23bf4f4b49a9f843a114082555e9365b72c6862ea3ca03", 0xf9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 923.114917][ T8711] usb 6-1: USB disconnect, device number 53 [ 923.155520][ T8709] usb 5-1: USB disconnect, device number 52 [ 923.939641][ T8711] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 924.061503][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 924.071828][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 924.079457][ T4874] loop3: p2 < > [ 924.448033][ T8711] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 924.457586][ T8711] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 924.466109][ T8711] usb 5-1: Product: syz [ 924.470656][ T8711] usb 5-1: Manufacturer: syz [ 924.512843][ T8711] usb 5-1: config 0 descriptor?? [ 924.569532][ T8711] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input130 [ 924.766040][ T8711] usb 5-1: USB disconnect, device number 53 [ 925.887097][T18404] IPVS: ftp: loaded support on port[0] = 21 [ 927.017684][T18404] chnl_net:caif_netlink_parms(): no params data found [ 927.660520][T18404] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.669255][T18404] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.679589][T18404] device bridge_slave_0 entered promiscuous mode [ 927.714628][T18404] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.722109][T18404] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.732955][T18404] device bridge_slave_1 entered promiscuous mode [ 927.809511][T18404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.830735][T18404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.886190][ T3821] Bluetooth: hci0: command 0x0409 tx timeout [ 927.907856][T18404] team0: Port device team_slave_0 added [ 927.928278][T18404] team0: Port device team_slave_1 added [ 927.993086][T18404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.001781][T18404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.028000][T18404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.062349][T18404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.071008][T18404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.097353][T18404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.210345][T18404] device hsr_slave_0 entered promiscuous mode [ 928.231157][T18404] device hsr_slave_1 entered promiscuous mode [ 928.913943][T18404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.964975][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 928.975443][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 929.024624][T18404] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.093632][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 929.103579][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 929.113829][ T8709] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.121269][ T8709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.223004][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 929.233370][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 929.243913][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 929.253792][ T8709] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.261234][ T8709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.270527][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 929.282235][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 929.405148][T18404] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 929.416418][T18404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 929.432330][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 929.443902][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 929.454175][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 929.465269][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 929.476030][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 929.486391][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 929.497630][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 929.507995][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 929.528414][T10251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 929.539465][T10251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 929.610756][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 929.619088][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 929.693542][T18404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.927942][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 929.938803][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 929.976549][ T3821] Bluetooth: hci0: command 0x041b tx timeout [ 930.049900][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 930.060200][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 930.094273][T18404] device veth0_vlan entered promiscuous mode [ 930.123927][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 930.133732][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 930.212484][T18404] device veth1_vlan entered promiscuous mode [ 930.313018][T10251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 930.323853][T10251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 930.334063][T10251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 930.344674][T10251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 930.388769][T18404] device veth0_macvtap entered promiscuous mode [ 930.422724][T18404] device veth1_macvtap entered promiscuous mode [ 930.508743][T18404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 930.519363][T18404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.530984][T18404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 930.541703][T18404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.551804][T18404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 930.562438][T18404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.572522][T18404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 930.583317][T18404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.593413][T18404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 930.604013][T18404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.619467][T18404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.628110][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 930.638387][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 930.648441][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 930.659191][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 930.729403][T18404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 930.739989][T18404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.750175][T18404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 930.760875][T18404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.770987][T18404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 930.781676][T18404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.791820][T18404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 930.802484][T18404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.812586][T18404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 930.823253][T18404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.838393][T18404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 930.848689][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 930.859383][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 932.027210][ T9054] Bluetooth: hci0: command 0x040f tx timeout [ 933.472852][T18631] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.480900][T18631] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.107787][T12792] Bluetooth: hci0: command 0x0419 tx timeout [ 935.704045][T18631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 935.920782][T18631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 15:51:55 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="b1", 0x1, 0xfffffffffffffffb) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) 15:51:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x4000000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:51:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 15:51:55 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001abec51000905820010"], 0x0) 15:51:55 executing program 4: sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004004}, 0x80) r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x3c, r2, 0x90fc047e054328f9, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "1053d0d675a91330884eba0ed581c87ad7d7ec0cf0b4d79df83f59cc7ef83a5210ba081c"}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000fc0904000001ab2551000905820010"], 0x0) 15:51:55 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x101) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="35d484bf10987d38310434fe6100452f85dd57b674dfbcccc70cdd931030c9f513ee1e0a38c92e08fddc6c081f794cbf43eb9e7990749a5846a8c8f6ea4c41eda122e5396ddb7776f2c89084c1f6d915d86bbabbd65c429441c30f2add32189d929c0b89d96f2f54e7ab0ce9a0b5b063b04eb354c55e0a9bafcb4fd552c7ec1c648bc4b25aa9c619893a61983c02557bd98380022a616c219eae7b3efdd44cd1b5a5d9d2f3dafd19e3e17ea1c262d2361cebeb4a77469846ae4537b80538f429eca0aaff8a2650be3fdb8c", &(0x7f0000000180)=@udp6}, 0x20) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:51:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x17, &(0x7f0000000000)="4dc4c733", 0x4) [ 938.330615][T18645] ptrace attach of "/root/syz-executor.2"[18642] was attempted by "/root/syz-executor.2"[18645] [ 938.367407][T10251] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 938.509537][T16149] tipc: TX() has been purged, node left! 15:51:55 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 15:51:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x10}) [ 938.788293][ T8711] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 938.893572][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 938.904117][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 938.911598][ T4874] loop3: p2 < > [ 938.921395][T10251] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 938.931442][T10251] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 938.940113][T10251] usb 6-1: Product: syz [ 938.944463][T10251] usb 6-1: Manufacturer: syz [ 939.099431][T10251] usb 6-1: config 0 descriptor?? [ 939.168553][T10251] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input131 15:51:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x5000000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 939.278965][ T8711] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 939.288481][ T8711] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 939.297215][ T8711] usb 5-1: Product: syz [ 939.301545][ T8711] usb 5-1: Manufacturer: syz [ 939.354316][T10251] usb 6-1: USB disconnect, device number 54 [ 939.515966][ T8711] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 939.525403][ T8711] usb 5-1: no configuration chosen from 1 choice 15:51:56 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f00000000c0)=@generic={0x11, "00000100000000000800ff7f4eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = open(&(0x7f0000002000)='./bus\x00', 0x46042, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 939.570033][T16149] device hsr_slave_0 left promiscuous mode 15:51:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x9e, &(0x7f0000000280)="c4c691019919da078a0098d1e0c393b040f762910000000000000022addee07bee0e6333b5cacd893169b618322ff6602022511253508b5a4496728c2b46e1bc340e2997b9a3406ea73b690808ffdb2dc4a7410b23e405cc30094b1adacdcfac320001000044e203c4b1bc83d8e68fcb229b4b0764a6cf39566fe5a2fad72b0cd3e8bd3e1a0cad036b7f1f9cd1c094f7e71b63a0b2362e10597be447b554"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) [ 939.666046][T16149] device hsr_slave_1 left promiscuous mode [ 939.679965][T16149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.748535][T16149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.792519][T16149] device bridge_slave_1 left promiscuous mode [ 939.799638][T16149] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.930290][T16149] device bridge_slave_0 left promiscuous mode [ 939.938014][T16149] bridge0: port 1(bridge_slave_0) entered disabled state 15:51:57 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2, 0x0) r2 = dup(r1) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x43, 0x0) fchmod(r3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) [ 940.124176][ T28] audit: type=1800 audit(1598975517.182:67): pid=18694 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15982 res=0 [ 940.158134][ T8709] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 940.601386][ T28] audit: type=1800 audit(1598975517.652:68): pid=18697 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15982 res=0 [ 940.769480][ T8709] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 940.778805][ T8709] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 940.787484][ T8709] usb 6-1: Product: syz [ 940.791807][ T8709] usb 6-1: Manufacturer: syz 15:51:58 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xf0d1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth0_macvtap\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00'}) 15:51:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x6000000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 940.982425][ T8709] usb 6-1: config 0 descriptor?? [ 941.102768][ T8709] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input133 [ 941.278088][ T9054] usb 5-1: USB disconnect, device number 54 [ 941.338139][ T8709] usb 6-1: USB disconnect, device number 55 15:51:58 executing program 5: openat$dlm_plock(0xffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x18000, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) 15:51:58 executing program 2: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x5}, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 15:51:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') socket$pppoe(0x18, 0x1, 0x0) ptrace$poke(0x4, 0xffffffffffffffff, &(0x7f0000000200), 0x80000000) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x4, 0x7, 0x3f, 0x7fff, 0x5, {0x0, @in6={{0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}, 0x5, 0x5, 0xffff, 0x8, 0x2}}, &(0x7f00000000c0)=0xb0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ftruncate(r3, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={&(0x7f00000002c0)="c7c77b56bd5ab0c21666b50662", &(0x7f0000000300)=""/68, &(0x7f00000003c0)="bee1a13639b63f953c9bdc10684af3abcc54a2eedbaaeada9a943c4a63dc560124c72a51b6fa4e343f65fea1b130e9b3fc9eb7fbb598eea1a2835f54904ac5fd34e265d133e2043b2b1c039ad8d064062e2a6e1d99382ea26bd9c744e39648debed90dd71aee7f80bf4e8199dd8f996b48afbfb3ec0af496cfafa470f417d0b6483fee51eff075c2a98fbe4b49e3c43e61c61d2e95ad9019221d4d78158ae920c7c93441c055d3afaf0c917602e7", &(0x7f0000000480)="6215316790e1211ede31a42a38d1f21db57729613a93b40384eef2acc78575804be32d603a8e8a85c146743172c42b2bc834b4d2ec8121fcf460126b97eac9f4445e61ecf16bc543ca8359a6a878918c823d57d66d08c6c627249153aecdb5a2e2", 0x7fff, r3, 0x4}, 0x38) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) sysfs$3(0x3) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000001c0)={r2, 0x691}, 0x8) [ 941.682677][T16149] team0 (unregistering): Port device team_slave_1 removed [ 941.926052][T16149] team0 (unregistering): Port device team_slave_0 removed [ 942.114834][T16149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.304317][T16149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 942.537328][ T9054] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 942.588879][ T9058] usb 5-1: new high-speed USB device number 55 using dummy_hcd 15:51:59 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) read$FUSE(r0, 0x0, 0x0) 15:51:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x7000000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 942.880283][ T9058] usb 5-1: device descriptor read/64, error 18 [ 943.019128][ T9054] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 943.028590][ T9054] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 943.037302][ T9054] usb 6-1: Product: syz [ 943.041622][ T9054] usb 6-1: Manufacturer: syz [ 943.213724][ T9054] usb 6-1: config 0 descriptor?? [ 943.261302][T16149] bond0 (unregistering): Released all slaves [ 943.266168][ T9054] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input134 [ 943.300004][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 15:52:00 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) [ 943.310976][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 943.318116][ T9058] usb 5-1: device descriptor read/64, error 18 [ 943.318398][ T4874] loop3: p2 < > [ 943.464515][ T9054] usb 6-1: USB disconnect, device number 56 [ 943.595500][T18723] not chained 20000 origins [ 943.600107][T18723] CPU: 0 PID: 18723 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 943.608790][T18723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 943.618870][T18723] Call Trace: [ 943.622197][T18723] dump_stack+0x21c/0x280 [ 943.626568][T18723] kmsan_internal_chain_origin+0x6f/0x130 [ 943.632321][T18723] ? kmsan_get_metadata+0x116/0x180 [ 943.637545][T18723] ? kmsan_set_origin_checked+0x95/0xf0 [ 943.643121][T18723] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 943.649225][T18723] ? kmsan_get_metadata+0x116/0x180 [ 943.654453][T18723] ? kmsan_set_origin_checked+0x95/0xf0 [ 943.660029][T18723] ? kmsan_get_metadata+0x116/0x180 [ 943.665257][T18723] ? kmsan_set_origin_checked+0x95/0xf0 [ 943.670836][T18723] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 943.676963][T18723] ? _copy_from_user+0x201/0x310 [ 943.682053][T18723] ? kmsan_get_metadata+0x116/0x180 [ 943.687286][T18723] __msan_chain_origin+0x50/0x90 [ 943.692265][T18723] __get_compat_msghdr+0x6db/0x9d0 [ 943.697460][T18723] get_compat_msghdr+0x108/0x2b0 [ 943.702446][T18723] __sys_sendmmsg+0x755/0xf70 [ 943.707184][T18723] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 943.713105][T18723] ? __msan_poison_alloca+0xf0/0x120 [ 943.718437][T18723] ? _copy_to_user+0x1bf/0x260 [ 943.723264][T18723] ? put_old_timespec32+0x231/0x2d0 [ 943.728502][T18723] ? kmsan_get_metadata+0x116/0x180 [ 943.733746][T18723] ? kmsan_get_metadata+0x116/0x180 [ 943.739320][T18723] ? kmsan_get_metadata+0x116/0x180 [ 943.744563][T18723] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 943.749982][T18723] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 943.755565][T18723] __do_fast_syscall_32+0x2af/0x480 [ 943.760810][T18723] do_fast_syscall_32+0x6b/0xd0 [ 943.765692][T18723] do_SYSENTER_32+0x73/0x90 [ 943.770226][T18723] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.776583][T18723] RIP: 0023:0xf7f4f549 [ 943.783098][T18723] Code: Bad RIP value. [ 943.787193][T18723] RSP: 002b:00000000f55490cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 943.795634][T18723] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000140 [ 943.803758][T18723] RDX: 00000000ffffff68 RSI: 0000000000000000 RDI: 0000000000000000 [ 943.811771][T18723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 943.819784][T18723] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 943.827773][T18723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 943.835776][T18723] Uninit was stored to memory at: [ 943.840837][T18723] kmsan_internal_chain_origin+0xad/0x130 [ 943.846589][T18723] __msan_chain_origin+0x50/0x90 [ 943.851559][T18723] __get_compat_msghdr+0x6db/0x9d0 [ 943.856687][T18723] get_compat_msghdr+0x108/0x2b0 [ 943.861648][T18723] __sys_sendmmsg+0x755/0xf70 [ 943.866344][T18723] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 943.871754][T18723] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 943.877330][T18723] __do_fast_syscall_32+0x2af/0x480 [ 943.882554][T18723] do_fast_syscall_32+0x6b/0xd0 [ 943.887441][T18723] do_SYSENTER_32+0x73/0x90 [ 943.891970][T18723] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.898297][T18723] [ 943.900630][T18723] Uninit was stored to memory at: [ 943.905678][T18723] kmsan_internal_chain_origin+0xad/0x130 [ 943.911429][T18723] __msan_chain_origin+0x50/0x90 [ 943.916392][T18723] __get_compat_msghdr+0x6db/0x9d0 [ 943.921521][T18723] get_compat_msghdr+0x108/0x2b0 [ 943.926496][T18723] __sys_sendmmsg+0x755/0xf70 [ 943.931208][T18723] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 943.936614][T18723] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 943.942270][T18723] __do_fast_syscall_32+0x2af/0x480 [ 943.947483][T18723] do_fast_syscall_32+0x6b/0xd0 [ 943.952346][T18723] do_SYSENTER_32+0x73/0x90 [ 943.956886][T18723] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.963335][T18723] [ 943.965683][T18723] Uninit was stored to memory at: [ 943.970733][T18723] kmsan_internal_chain_origin+0xad/0x130 [ 943.976493][T18723] __msan_chain_origin+0x50/0x90 [ 943.981469][T18723] __get_compat_msghdr+0x6db/0x9d0 [ 943.986653][T18723] get_compat_msghdr+0x108/0x2b0 [ 943.991616][T18723] __sys_sendmmsg+0x755/0xf70 [ 943.996319][T18723] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 944.001722][T18723] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 944.007286][T18723] __do_fast_syscall_32+0x2af/0x480 [ 944.012522][T18723] do_fast_syscall_32+0x6b/0xd0 [ 944.017408][T18723] do_SYSENTER_32+0x73/0x90 [ 944.021938][T18723] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 944.028269][T18723] [ 944.030606][T18723] Uninit was stored to memory at: [ 944.035662][T18723] kmsan_internal_chain_origin+0xad/0x130 [ 944.041422][T18723] __msan_chain_origin+0x50/0x90 [ 944.046385][T18723] __get_compat_msghdr+0x6db/0x9d0 [ 944.051642][T18723] get_compat_msghdr+0x108/0x2b0 [ 944.056599][T18723] __sys_sendmmsg+0x755/0xf70 [ 944.061320][T18723] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 944.066727][T18723] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 944.072301][T18723] __do_fast_syscall_32+0x2af/0x480 [ 944.077530][T18723] do_fast_syscall_32+0x6b/0xd0 [ 944.082409][T18723] do_SYSENTER_32+0x73/0x90 [ 944.086936][T18723] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 944.093270][T18723] [ 944.095609][T18723] Uninit was stored to memory at: [ 944.100657][T18723] kmsan_internal_chain_origin+0xad/0x130 [ 944.106410][T18723] __msan_chain_origin+0x50/0x90 [ 944.111371][T18723] __get_compat_msghdr+0x6db/0x9d0 [ 944.116510][T18723] get_compat_msghdr+0x108/0x2b0 [ 944.121591][T18723] __sys_sendmmsg+0x755/0xf70 [ 944.126306][T18723] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 944.131703][T18723] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 944.137282][T18723] __do_fast_syscall_32+0x2af/0x480 [ 944.142512][T18723] do_fast_syscall_32+0x6b/0xd0 [ 944.147390][T18723] do_SYSENTER_32+0x73/0x90 [ 944.151921][T18723] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 944.158257][T18723] [ 944.160594][T18723] Uninit was stored to memory at: [ 944.165752][T18723] kmsan_internal_chain_origin+0xad/0x130 [ 944.171496][T18723] __msan_chain_origin+0x50/0x90 [ 944.176456][T18723] __get_compat_msghdr+0x6db/0x9d0 [ 944.181586][T18723] get_compat_msghdr+0x108/0x2b0 [ 944.186541][T18723] __sys_sendmmsg+0x755/0xf70 [ 944.191240][T18723] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 944.196638][T18723] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 944.202204][T18723] __do_fast_syscall_32+0x2af/0x480 [ 944.207422][T18723] do_fast_syscall_32+0x6b/0xd0 [ 944.212291][T18723] do_SYSENTER_32+0x73/0x90 [ 944.216815][T18723] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 944.223141][T18723] [ 944.225478][T18723] Uninit was stored to memory at: [ 944.230524][T18723] kmsan_internal_chain_origin+0xad/0x130 [ 944.236269][T18723] __msan_chain_origin+0x50/0x90 [ 944.241314][T18723] __get_compat_msghdr+0x6db/0x9d0 [ 944.246446][T18723] get_compat_msghdr+0x108/0x2b0 [ 944.251406][T18723] __sys_sendmmsg+0x755/0xf70 [ 944.256104][T18723] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 944.261494][T18723] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 944.267063][T18723] __do_fast_syscall_32+0x2af/0x480 [ 944.272315][T18723] do_fast_syscall_32+0x6b/0xd0 [ 944.277188][T18723] do_SYSENTER_32+0x73/0x90 [ 944.281719][T18723] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 944.288047][T18723] [ 944.290388][T18723] Local variable ----msg_sys@__sys_sendmmsg created at: [ 944.297342][T18723] __sys_sendmmsg+0xbb/0xf70 [ 944.301945][T18723] __sys_sendmmsg+0xbb/0xf70 [ 944.342319][ T9058] usb 5-1: new high-speed USB device number 56 using dummy_hcd 15:52:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x8000000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 944.674110][ T9058] usb 5-1: device descriptor read/64, error 18 [ 944.876721][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 944.887451][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 944.894904][ T4874] loop3: p2 < > 15:52:02 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000997000001ab2551000905820010"], 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f00000001c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ftruncate(r1, 0x40) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000040), &(0x7f0000000040)=[0x3, 0x200, 0x8, 0x4, 0x9, 0x1], &(0x7f0000000100)=[0x1, 0x3, 0x3, 0x3, 0x8]}) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x20, 0x40, 0x40, 0x4, {{0x19, 0x4, 0x0, 0x3f, 0x64, 0x68, 0x0, 0x5, 0x4, 0x0, @empty, @remote, {[@timestamp={0x44, 0xc, 0xe5, 0x0, 0x7, [0x2, 0x5]}, @rr={0x7, 0x1f, 0xeb, [@private=0xa010102, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty, @rand_addr=0x64010100, @loopback]}, @cipso={0x86, 0x1e, 0x3, [{0x7, 0x5, '2&\a'}, {0x0, 0xe, "4e523c782f33f76dc1436ae6"}, {0x2, 0x5, "575d93"}]}, @rr={0x7, 0x7, 0x67, [@local]}]}}}}}) sendmsg$inet6(r2, &(0x7f0000000940)={&(0x7f0000000200)={0xa, 0x4e23, 0x1f, @loopback, 0xd68}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="817d043857b63a811426db37aa1f2bae0d331c668d99039e978166c30e56835b0087048bc27ad9aa63789e0167fbd7aa1ec3972c065c7ef0c0bb6bf80d8a0885fd5859110d41aa79fd135bd165d2d5781b0f82be61ecf096bf3fafcf4d8f21d6e2155c323627df2df74be0490fda209b23f9571bdf167e8a67b4209cc74b0bb9adac759d42af3477e431a1b9828e5526c74ed3fe08763dcc6f1ee1bc3de82886547fe96968029fa57468326001462be66f70121ccbecf25db7d2a1cd3bd235527f9a70c66ae4c0f227a9253cee80f72e644c97dd6beb1351d0232e51bd861bc4", 0xe0}, {&(0x7f0000000340)="627fd9a3ce2880c6970e3c777fb1c885fadf146cbecb84b143b33bb07aff6c591b0664d9d8d5aa7578de0913ecade5e4d00b73a2eed3495cb17a03e9ee72163f481eae2c97af2dc03df646a3aeedea458ca4ed80b4e33792bf5515bbf73a5d89e8a0c16e44bccdff70925af0498e2f6d82358e77f123e3ccbc62809331909318c5a0bc5e709c9aa1b0ad53b04dafcdc7a22691ee42c6aac33a6a66e66f024939310c60e0b47f0a584e4b6f41a4b3ae45f7ac9304e0", 0xb5}, {&(0x7f0000000400)="03ee58fdcbe64cd61c412aaf272c487df3028f2516709cd2c2c9530b0d4024bd65f85fbebd65cda45a6fe0bdc01f8ca14da239affeae94fcf8e5627e15a7ac9e973216681da1d77b90514696ab954dfce14315caf540b9acea81280402d629179d68d1436be9515c21454e29cdeba94eb3d45c84d1df3895f66e40fc6f760b49388f55cefeccd744", 0x88}], 0x3, &(0x7f0000000600)=[@tclass={{0x10, 0x29, 0x43, 0x2}}, @rthdr_2292={{0xb4, 0x29, 0x39, {0x2e, 0x14, 0x0, 0x7, 0x0, [@remote, @empty, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x24}}, @remote, @local, @private2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, @private2={0xfc, 0x2, [], 0x1}, @ipv4={[], [], @multicast1}]}}}, @rthdrdstopts={{0xcc, 0x29, 0x37, {0x2, 0x17, [], [@generic={0x1, 0xb3, "59891c003c52ba65ac2a35421004329a753f8d8a50a170eb0365d954f53efc0cc05238560c01f31e0fedd5c4d118db690a370932c06f66db17ca832365072bcdcf08eaa8810358206ecc4018fbe2b7bce88470ed6b25753f286898adf25dab23313fa81ada624649652126883d306b75d684078e1305ca770a39ca6b9b1f742a2314ed20cd786a098a19e493b8b2dcfc6d280e38ace19f8c768a860aaf046c4fffffda2e3223189b4837b88683324a63b4afc4"}, @enc_lim={0x4, 0x1, 0x7}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@ipv4={[], [], @remote}}}}, @hopopts_2292={{0xd4, 0x29, 0x36, {0x1, 0x17, [], [@generic={0x1, 0x7f, "715df34b55bd6694d5640817a2b701e4feb3562354257b9ec1eefbe856ac627338dc5fe2d674b0957ac57ca0b6a3f417558b3a0923b23f54f6aadf9c9c1b3ffe779db51f894c250240f0394a62bc831601fccf0c6f6f5c95c0c99e836e698ff5e1b04830e4c0db726d68f661abf42eaaf367a25c09088cc51d347114d5f270"}, @hao={0xc9, 0x10, @private0}, @ra={0x5, 0x2, 0x4}, @pad1, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x24000}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0xc95}]}}}, @dstopts={{0x1c, 0x29, 0x37, {0x6c, 0x0, [], [@pad1]}}}, @pktinfo={{0x20, 0x29, 0x32, {@rand_addr=' \x01\x00', r3}}}, @hopopts={{0x54, 0x29, 0x36, {0x2c, 0x7, [], [@enc_lim={0x4, 0x1, 0xc}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x1b}}, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0xc0}]}}}], 0x314}, 0x85) [ 945.107452][ T9058] usb 5-1: device descriptor read/64, error 18 15:52:02 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) [ 945.227494][ T9058] usb usb5-port1: attempt power cycle [ 945.799434][ T9053] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 946.187461][ T9053] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 946.311071][ T9053] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 946.320599][ T9053] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 946.329644][ T9053] usb 6-1: Product: syz [ 946.333940][ T9053] usb 6-1: Manufacturer: syz [ 946.594998][ T9053] usb 6-1: config 0 descriptor?? [ 946.963459][ T9053] usb 6-1: USB disconnect, device number 57 [ 947.257325][T18788] IPVS: ftp: loaded support on port[0] = 21 [ 947.750700][ T9053] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 948.276399][ T9053] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 948.678028][ T9053] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 948.688445][ T9053] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 948.697199][ T9053] usb 6-1: Product: syz [ 948.752046][ T9053] usb 6-1: config 0 descriptor?? [ 948.777570][ T9053] usb 6-1: can't set config #0, error -71 [ 948.799136][ T9053] usb 6-1: USB disconnect, device number 58 [ 948.883571][T18788] chnl_net:caif_netlink_parms(): no params data found [ 949.077730][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 949.087929][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 949.095170][ T4874] loop3: p2 < > [ 949.148152][ T9058] Bluetooth: hci0: command 0x0409 tx timeout [ 949.158474][T18788] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.165744][T18788] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.176184][T18788] device bridge_slave_0 entered promiscuous mode [ 949.201468][T18788] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.209485][T18788] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.219546][T18788] device bridge_slave_1 entered promiscuous mode [ 949.278882][T18788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.298693][T18788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.371859][T18788] team0: Port device team_slave_0 added [ 949.389467][T18788] team0: Port device team_slave_1 added [ 949.452928][T18788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 949.461451][T18788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 949.487589][T18788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 949.507365][T18788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 949.514982][T18788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 949.541440][T18788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 949.719550][T18788] device hsr_slave_0 entered promiscuous mode [ 949.760587][T18788] device hsr_slave_1 entered promiscuous mode [ 950.073663][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 950.084073][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 950.091534][ T4874] loop3: p2 < > [ 950.421447][T18788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.478106][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 950.488071][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 950.517895][T18788] 8021q: adding VLAN 0 to HW filter on device team0 [ 950.588116][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 950.598843][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 950.608779][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.616081][ T8711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.784108][ T9053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 950.794570][ T9053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 950.805408][ T9053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 950.815619][ T9053] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.823117][ T9053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.834389][ T9053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 950.846212][ T9053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 950.857978][ T9053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 950.869247][ T9053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 951.128933][T18788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 951.139540][T18788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 951.230495][ T9058] Bluetooth: hci0: command 0x041b tx timeout [ 951.282489][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 951.293434][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 951.305070][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 951.316275][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 951.326803][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 951.338103][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 951.348215][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 951.531949][ T9053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 951.655349][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 951.663978][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 951.790548][T18788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.634620][ T9053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 952.645695][ T9053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 952.799479][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 952.810351][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 952.846575][T18788] device veth0_vlan entered promiscuous mode [ 952.860812][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 952.871281][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 952.941786][T18788] device veth1_vlan entered promiscuous mode [ 953.133456][ T9058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 953.144317][ T9058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 953.172491][T18788] device veth0_macvtap entered promiscuous mode [ 953.219674][T18788] device veth1_macvtap entered promiscuous mode [ 953.281802][T18788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 953.292453][T18788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.302647][T18788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 953.313924][T18788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.324193][T18788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 953.334879][T18788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.344988][T18788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 953.355658][T18788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.365792][T18788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 953.376416][T18788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.391881][T18788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.405329][ T9058] Bluetooth: hci0: command 0x040f tx timeout [ 953.417744][ T9058] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 953.429064][ T9058] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 953.440133][ T9058] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 953.451607][ T9058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 953.493728][T18788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 953.504426][T18788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.514638][T18788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 953.525309][T18788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.535418][T18788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 953.546158][T18788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.556331][T18788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 953.567032][T18788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.577143][T18788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 953.588484][T18788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.603783][T18788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.624128][ T9058] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 953.635358][ T9058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 15:52:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x288, 0xe8, 0xe8, 0xe8, 0xe8, 0xe8, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'wg2\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x5fffffc}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'vlan0\x00', 'veth1\x00'}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fffe8ff3506000002000000070600000ee60000bf050000000000000f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000d05bd98c13cc170962bd1735140ecd8c3c090c100a72248445f9fa9869473a88519df1465870fbe7f8c01c982af9f45358e3ba87d439c072c05961f932fdc5a905e67bc08627d42de2a4d7936fa2f4d9c817c5f71e0f46c0b890022865a94531b0ec9aec627e77235846bfbcd7c3e23339be6da4d03de41cfb8277313a5798c7f19dde0ef085bde2ed2bb7277330b4d981ee32f81913c7a962a1975e498d6fdecf6fb3086de88ffe7f464c1e1a5953acdb3fa929e51bffed9b9dc694c9f7ea6cc09e1aeacf7619e53699d182719e2b20c57711d31609289beba1b1feb8c391aefbd117821dcd7cbbbf12"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1bd7", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="0800cc1619605fc8ad0b00290300040038bec50a4c6c2e3bd47642c6e8851eb96263f3e4c76195c47910ec10b8d2ab1b66c3129b72", @ANYBLOB], 0x70}}, 0x20000001) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) 15:52:11 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000008ab2551000905820010"], 0x0) 15:52:11 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x4000040) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) 15:52:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x9000000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:52:11 executing program 3: unshare(0x6c060000) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) 15:52:11 executing program 5: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)={0xe6, 0xfffffffc, "adedbcb0bc22184a3c2f8c87799a496f261c1b6612ef302ef7aeda8b4fd795e9fc862e0bf4af9b748509d96805c6ca74f16e0a95a971c7b693b480caa8f0fe3cbb8a2335d859038a510e9ae04afb9409606d2830adc6fff1143845b9c9893c6ab2638d20653fb17c33f80b03f4252f797cca6b6b2ef645a05ea1384e36879e571e3a6778d5169077c2372b734a493d571aa665319843318667002b7220353ea40774efdaf9ee291fcdc14303bbe98c2743c27eaaffbb3d996fc84d32245610ea73fba38bceea25a1e39212784a67a5c5d313d5e095b17c7c3cbffe02bdef"}, 0x84080) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) [ 954.737658][T19045] IPVS: ftp: loaded support on port[0] = 21 [ 955.000193][T10251] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 955.008536][ T9058] usb 6-1: new full-speed USB device number 59 using dummy_hcd 15:52:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x2c000}], 0x3) dup3(r0, r1, 0x0) 15:52:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000000c0)={0x0, 0xffffffea}) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x0) [ 955.336556][T16150] tipc: TX() has been purged, node left! [ 955.428552][T10251] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 955.471383][T18351] Bluetooth: hci0: command 0x0419 tx timeout [ 955.561623][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 955.572091][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 955.579966][ T4874] loop3: p2 < > [ 955.589564][ T9058] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 955.599765][ T9058] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 955.608822][ T9058] usb 6-1: Product: syz [ 955.613252][ T9058] usb 6-1: Manufacturer: syz [ 955.631244][T10251] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 955.640663][T10251] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 955.649499][T10251] usb 5-1: Product: syz [ 955.654026][T10251] usb 5-1: Manufacturer: syz [ 955.663397][ T9058] usb 6-1: config 0 descriptor?? [ 955.673853][T10251] usb 5-1: config 0 descriptor?? [ 955.729976][T10251] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input135 [ 955.749691][ T9058] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input136 15:52:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xa000000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 956.249540][ T9058] usb 6-1: USB disconnect, device number 59 [ 956.307139][T10251] usb 5-1: USB disconnect, device number 58 15:52:13 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0xc004743e, &(0x7f0000000340)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x400) 15:52:13 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x6, 0x0, 0x0, 0x0, 0x1000000) timer_create(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0xa, 0x7) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x38f4}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 15:52:13 executing program 5: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x401) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) [ 957.199524][T10251] usb 5-1: new full-speed USB device number 59 using dummy_hcd 15:52:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, 0x0) [ 957.580388][T10251] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 957.917472][ T8711] usb 6-1: new full-speed USB device number 60 using dummy_hcd 15:52:15 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000040)={0xa, {0x2, 0xf9, 0x81}}, 0xa) 15:52:15 executing program 0: openat2(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x4dca49b147bd811}, 0x18) [ 958.118175][T10251] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 958.127888][T10251] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 958.242991][T10251] usb 5-1: config 0 descriptor?? [ 958.281305][T10251] usb 5-1: can't set config #0, error -71 [ 958.291732][T10251] usb 5-1: USB disconnect, device number 59 15:52:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xb0080fe, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 958.398868][ T8711] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 958.409248][ T8711] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 958.418059][ T8711] usb 6-1: Product: syz [ 958.422605][ T8711] usb 6-1: Manufacturer: syz [ 958.625054][ T8711] usb 6-1: config 0 descriptor?? 15:52:15 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0x80044df9, &(0x7f00000005c0)) [ 958.714127][ T8711] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input137 15:52:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f00000000c0)) [ 958.927875][ T8711] usb 6-1: USB disconnect, device number 60 15:52:16 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) fsopen(&(0x7f0000000000)='afs\x00', 0x0) [ 959.108194][ T3821] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 959.588271][ T3821] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 959.598080][ T3821] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 959.606640][ T3821] usb 5-1: Product: syz [ 959.611206][ T3821] usb 5-1: Manufacturer: syz 15:52:16 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'sit0\x00', @ifru_mtu=0x531101}) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x2716, 0x0, &(0x7f00000000c0)) 15:52:16 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x26}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x8001) [ 959.830567][ T3821] usb 5-1: config 0 descriptor?? [ 959.877743][ T3821] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input138 15:52:17 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) 15:52:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xf000000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 960.074122][ T3821] usb 5-1: USB disconnect, device number 60 15:52:17 executing program 2: r0 = semget$private(0x0, 0x8, 0x0) semctl$GETZCNT(r0, 0x72a2fe93cd16fd01, 0xf, 0x0) 15:52:17 executing program 3: r0 = gettid() process_vm_readv(r0, &(0x7f0000001600)=[{0x0}, {0x0}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x3, &(0x7f0000001c80)=[{&(0x7f0000001680)=""/230, 0xe6}], 0x1, 0x0) [ 960.557352][T10251] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 960.847328][ T3821] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 961.010609][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 961.021467][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 961.029017][ T4874] loop3: p2 < > [ 961.079782][T10251] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 961.089627][T10251] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 961.098684][T10251] usb 6-1: Product: syz [ 961.103017][T10251] usb 6-1: Manufacturer: syz [ 961.163237][T10251] usb 6-1: config 0 descriptor?? [ 961.215933][T10251] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input139 [ 961.328083][ T3821] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 961.337637][ T3821] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 961.346346][ T3821] usb 5-1: Product: syz [ 961.351243][ T3821] usb 5-1: Manufacturer: syz [ 961.383066][ T3821] usb 5-1: config 0 descriptor?? [ 961.419518][ T8711] usb 6-1: USB disconnect, device number 61 [ 961.440545][ T3821] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input140 [ 961.652112][ T3821] usb 5-1: USB disconnect, device number 61 15:52:18 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000040)) 15:52:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454d9, 0x4ac000) 15:52:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0xc, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 15:52:18 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x29, 0x8, 0x0, 0x3) 15:52:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x10000120, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:52:19 executing program 2: r0 = socket(0xa, 0x5, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x29, 0x1d, 0x0, 0x3) 15:52:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r3, 0x1, 0x0, 0x0, {0x5, 0x4}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}]}]}]}, 0x44}}, 0x0) [ 962.208211][ T3821] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 962.417823][ T8711] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 962.690188][ T3821] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 962.700111][ T3821] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 962.713518][ T3821] usb 6-1: Product: syz [ 962.717955][ T3821] usb 6-1: Manufacturer: syz [ 962.748431][ T3821] usb 6-1: config 0 descriptor?? [ 962.775125][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 962.785561][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 962.794407][ T4874] loop3: p2 < > [ 962.805410][ T3821] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input141 [ 962.938445][ T8711] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 962.948230][ T8711] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 962.956762][ T8711] usb 5-1: Product: syz [ 962.961493][ T8711] usb 5-1: Manufacturer: syz [ 962.998017][ T3821] usb 6-1: USB disconnect, device number 62 [ 963.085275][ T8711] usb 5-1: config 0 descriptor?? 15:52:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000c94276817210200e01019122ffe7000109021b0001000000000904000001ab256886164e9b5100", @ANYBLOB="61e0fdf22845ea0b4485f12c4efdf60b803398e0e231eef19bf32238349ccdfe207840a4e108411960c5ee38f4a1fdb5c88ebd6e37299dc14af8bd6ed5483fccf850d232b7063866efe6f0157382bf00fba2495133b6a3990195c27a1269a22d97be87a8d410b46bed43403d74f5146bfe4ab48959bb7e86", @ANYRES16=r2, @ANYRESHEX=r0], 0x0) [ 963.137353][ T8711] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input142 15:52:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x3c}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_CREATE(r0, 0x5501) 15:52:20 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891d, 0x0) 15:52:20 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 15:52:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x18020000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 963.341203][ T3821] usb 5-1: USB disconnect, device number 62 [ 963.440058][T19417] input: syz1 as /devices/virtual/input/input143 [ 963.987527][ T26] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 964.138207][ T3821] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 964.211266][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 964.225287][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 964.233443][ T4874] loop3: p2 < > [ 964.268045][ T26] usb 6-1: device descriptor read/64, error 18 [ 964.581360][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 964.592604][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 964.601007][ T4874] loop3: p2 < > [ 964.618384][ T3821] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 964.627630][ T3821] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 964.636101][ T3821] usb 5-1: Product: syz [ 964.640654][ T3821] usb 5-1: Manufacturer: syz [ 964.657200][ T26] usb 6-1: device descriptor read/64, error 18 [ 964.674784][ T3821] usb 5-1: config 0 descriptor?? [ 964.726362][ T3821] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input145 [ 964.935450][ T9058] usb 5-1: USB disconnect, device number 63 [ 964.945446][ T26] usb 6-1: new full-speed USB device number 64 using dummy_hcd 15:52:22 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="7311000100009b12c31eae8494f9"], 0xff86) close(r2) socket$netlink(0x10, 0x3, 0x4) socket(0x1e, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:52:22 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) 15:52:22 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='!%{}') 15:52:22 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/prev\x00') getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x3, [0x800, 0x400, 0x6]}, &(0x7f00000000c0)=0xa) semctl$GETPID(0xffffffffffffffff, 0x2, 0xb, &(0x7f0000000100)=""/143) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000c94272102b0e010191773698187722ffe7000106021b00b9eff4e1cbd2de0300002e013cd49d9e9a8f02f4a700cf4d692ee46f36f95e85f5d66c8f09bb1e202e7538b18c891a3fbca1441771ea3cb70c21ab501da13a11156f007f02"], 0x0) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) connect$rose(r1, &(0x7f00000001c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) 15:52:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x20000000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:52:22 executing program 3: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_free(r3) [ 965.238368][ T26] usb 6-1: device descriptor read/64, error 18 15:52:22 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200001e5c, 0x400000000000087f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) [ 965.677671][ T26] usb 6-1: device descriptor read/64, error 18 [ 965.798424][ T26] usb usb6-port1: attempt power cycle [ 965.957672][T18633] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 966.128003][T19484] NFS: Device name not specified [ 966.248434][T18633] usb 5-1: too many configurations: 119, using maximum allowed: 8 [ 966.388781][T18633] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 966.406638][T18633] usb 5-1: can't read configurations, error -61 [ 966.528129][ T26] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 966.627280][T18633] usb 5-1: new full-speed USB device number 65 using dummy_hcd 15:52:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) r1 = openat$misdntimer(0xffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x82300, 0x0) r2 = openat$vcs(0xffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x90, 0x2, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROBES={0x5, 0x15, 0x4}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROBES={0x5, 0x15, 0x3}]}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xf8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x4fdc48a477f1ce99}, 0x45040) tee(r0, r1, 0x8, 0x9) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 15:52:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x20010010, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:52:23 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f0000000bc0)='./file0\x00', 0xc0242, 0x0) write$P9_RSTAT(r1, &(0x7f0000000040)=ANY=[], 0xfffffe7a) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)={0x0, 0x5, 0x1}) 15:52:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000000010000000000000c5", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 966.818500][ T26] usb 6-1: device descriptor read/8, error -71 [ 966.918928][T18633] usb 5-1: too many configurations: 119, using maximum allowed: 8 [ 967.037196][ T26] usb 6-1: device descriptor read/8, error -71 [ 967.078788][T18633] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 967.091776][T18633] usb 5-1: can't read configurations, error -61 [ 967.154766][T19496] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 967.215251][T19499] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 967.261390][T18633] usb usb5-port1: attempt power cycle [ 967.300730][T19501] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 15:52:24 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "e22528", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, [], 0x3e}, @ipv4={[], [], @broadcast}}}}}, 0x0) [ 967.387898][T19499] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 967.469316][T19496] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 967.493803][T19501] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 967.641571][ T26] usb 6-1: new full-speed USB device number 66 using dummy_hcd 15:52:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000000806150c778a760000000000000000000d000300686173603a6e65740a00000005006d7f004000000900020073797a30000092000c0007800800122b8001000405000d0002000000050001"], 0x54}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000030000002200000ff03ff00000000000800"], 0x1}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x84ffe0, 0x0) [ 967.871109][ T26] usb 6-1: device descriptor read/8, error -61 15:52:25 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10=\x8f\xa2\xc7\x8b\x96|?\x16\xbf\xa1$\xe2\xf4\xa6t#M\xe0l\x0e<\x89\x8df\xa0m\x00\a\xbb\x84\xc2V\xff\xb0j\x06\x00\xba\x1a\xe7@\xab\xe2v\x8a\x97\x88\xd3\xa5\xeePb\x10\xf5\'\xc1\x01\xfew\xdfgCM>\xba\xc6\xe5\xa6\xac\xfa\xed\xdf;') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x143042, 0x0) fallocate(r1, 0x8, 0x0, 0x12000) 15:52:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x24000000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 968.160406][ T26] usb 6-1: device descriptor read/8, error -61 [ 968.177617][T18633] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 968.287922][ T26] usb usb6-port1: unable to enumerate USB device [ 968.328778][T18633] usb 5-1: too many configurations: 119, using maximum allowed: 8 [ 968.459650][T18633] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 968.472017][T18633] usb 5-1: can't read configurations, error -61 [ 968.506044][T19517] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 968.520030][T19517] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 968.538728][T19517] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:52:25 executing program 4: sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x3e9, 0x8, 0x70bd27, 0x25dfdbfd, {0x10, 0x0, 0x2, 0xffffffffffffffff, 0x1, 0x1, 0x8a, 0xc461, 0x0, 0x20}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40004400}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYBLOB="76e62b7cdbb89475460eeb236c5835a050ef5e1b5f106fdee4c16637761125a9763c1f4ef815fa297774797c67de6c6183daa9999427867997ad177cba6b5d025fc55328c15fad5b0fa30ced6fd494fce70a40a54db8b2594111156ed56d3be66ef9933eabf53cc25475dde50ef533dd36bcbd6dde9693536691b2aee7daf0de2f4c6c7e9ffbc94c0f59e55da124175c407ade0c79efa689fd6d76b57afc29"], 0x0) 15:52:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r2, 0x407, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$packet(0x11, 0xa, 0x300) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x30005, 0x0) 15:52:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000080)=""/38, 0x26) getdents(r0, &(0x7f0000000000)=""/69, 0x45) 15:52:26 executing program 0: syz_emit_ethernet(0xec, &(0x7f0000000480)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0x0], @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9cffff", 0xb6, 0x3a, 0x0, @local={0xfe, 0x80, [0x0, 0x10, 0x0, 0x26, 0x0, 0x4c]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xb, "a78ce540cd4f791153d581000000ff0300000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac11084db8f736b41e5a803721d"}, {0x0, 0x9, "84f0da52ef24571313968050378ee824f4dffba7feed320557f7671975afc9c545c5ea6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee126a2c281295ae9405b"}]}}}}}}, 0x0) [ 969.517233][T18633] usb 5-1: new low-speed USB device number 67 using dummy_hcd [ 969.693096][T18633] usb 5-1: device descriptor read/8, error -61 [ 969.977792][T18633] usb 5-1: device descriptor read/8, error -61 [ 970.102089][T18633] usb usb5-port1: unable to enumerate USB device 15:52:27 executing program 5: syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x20803) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) 15:52:27 executing program 0: pipe(0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1b, 0x0, 0x64}}) 15:52:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x28ff0000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:52:27 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='nv\x00', 0x3) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000003c0)={r2, @in={{0x2, 0x4e21, @remote}}}, 0x84) fchmod(0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a347f1f6588b967480541ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bbecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:52:27 executing program 2: ioperm(0x0, 0x200, 0xffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={0x0, 0x0, 0x18}, 0x10) 15:52:27 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100), 0xc, &(0x7f00000005c0)={0x0, 0x58}}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000000c0), 0xc, &(0x7f0000000700)={&(0x7f0000002600)={0x710, 0x1, 0x5, 0x0, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "f76c6235f69dc8e76d45f30a8883faea86d734773f4d58ce5218389dbe26b9bd", "0b1ff251ea0e3e8b07daa3811b26d38ff0731403675037e74541201459734d1a"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "0793f96cc5d9af995703bf7fa109dd64db55f049dd31566d29c8a3cf5b499d8f", "3a7e6c76cf01ad5819e4c9bd8b56c15369d60ed65647531bb8d0fd9877ad86ed"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "83b5575a47e662d14df7408b2c9f1f5aad3215a341a3966bb2ffe1bd60a61283", "0a2d10f58cf5559be0b581cd434eb534e2014569688f7232e5c8acb99945f546"}}}]}, 0x710}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000c00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/140, 0x8c}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000280), 0xc, &(0x7f0000000a40)={0x0, 0x1a4}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x7c4}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 15:52:27 executing program 2: set_mempolicy(0x40000000004003, &(0x7f00000000c0)=0x8, 0xc2) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) [ 970.839926][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 970.850409][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 970.858138][ T4874] loop3: p2 < > [ 970.937760][ T9058] usb 6-1: new full-speed USB device number 67 using dummy_hcd 15:52:28 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000740)=""/59, 0x3b}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000002c0)=""/154, 0x9a}, {&(0x7f0000000280)=""/22, 0x16}], 0x8}}], 0x1, 0x0, 0x0) [ 971.439289][ T9058] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 971.448852][ T9058] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 971.457548][ T9058] usb 6-1: Product: syz [ 971.461867][ T9058] usb 6-1: Manufacturer: syz [ 971.607600][ T9058] usb 6-1: config 0 descriptor?? [ 971.682340][ T9058] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input146 [ 971.852674][ T9058] usb 6-1: USB disconnect, device number 67 15:52:29 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@dev, @multicast2}, &(0x7f0000000080)=0xc) 15:52:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x34c45de5, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:52:29 executing program 3: ioperm(0x0, 0x200, 0xffff) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0xf54e5cfdc6aaa136) 15:52:29 executing program 2: set_mempolicy(0x40000000004003, &(0x7f00000000c0)=0x8, 0xc2) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) 15:52:29 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="10010000c9427210200e000904000001ab255100090682001000"/41], 0x0) 15:52:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "eaffffff090000000000000000000000000053"}) set_mempolicy(0x2, &(0x7f0000000080)=0xe4e, 0x6) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5423, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, "0000000000000000aed8f5d766cdc0460900"}) 15:52:29 executing program 3: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x1c0}]) 15:52:29 executing program 2: set_mempolicy(0x40000000004003, &(0x7f00000000c0)=0x8, 0xc2) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) [ 972.897651][T18351] usb 5-1: new full-speed USB device number 68 using dummy_hcd 15:52:30 executing program 0: r0 = io_uring_setup(0x192b, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x2, 0x960000, 0x4000) 15:52:30 executing program 3: r0 = io_uring_setup(0x192b, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x2, 0x960000, 0x4000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[0xffffffffffffffff]}, 0x14) [ 973.200491][T18633] usb 6-1: new full-speed USB device number 68 using dummy_hcd 15:52:30 executing program 2: set_mempolicy(0x40000000004003, &(0x7f00000000c0)=0x4000000000008, 0xc2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 15:52:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x3f000000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 973.489349][T18633] usb 6-1: too many configurations: 37, using maximum allowed: 8 [ 973.528364][T18351] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 973.538328][T18351] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 973.548562][T18351] usb 5-1: Product: syz [ 973.552965][T18351] usb 5-1: Manufacturer: syz [ 973.571931][T18351] usb 5-1: config 0 descriptor?? [ 973.619026][T18633] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 973.626389][T18351] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input147 [ 973.627328][T18633] usb 6-1: can't read configurations, error -61 [ 973.825704][ T9058] usb 5-1: USB disconnect, device number 68 [ 973.998611][T18633] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 974.281112][T18633] usb 6-1: too many configurations: 37, using maximum allowed: 8 [ 974.411913][T18633] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 974.420114][T18633] usb 6-1: can't read configurations, error -61 [ 974.458144][T18633] usb usb6-port1: attempt power cycle [ 974.627398][ T9058] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 974.659780][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 974.670514][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 974.678830][ T4874] loop3: p2 < > [ 974.989707][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 975.000576][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 975.008107][ T4874] loop3: p2 < > [ 975.177215][T18633] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 975.192030][ T9058] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 975.201515][ T9058] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 975.210401][ T9058] usb 5-1: Product: syz [ 975.215238][ T9058] usb 5-1: Manufacturer: syz [ 975.292606][ T9058] usb 5-1: config 0 descriptor?? [ 975.309939][T18633] usb 6-1: too many configurations: 37, using maximum allowed: 8 [ 975.359592][ T9058] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input148 [ 975.438724][T18633] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 975.446502][T18633] usb 6-1: can't read configurations, error -61 [ 975.627652][T18633] usb 6-1: new full-speed USB device number 71 using dummy_hcd 15:52:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r3, 0x0, 0x0) setuid(0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x150) 15:52:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc008aec1, &(0x7f0000000000)) 15:52:32 executing program 3: r0 = io_uring_setup(0x192b, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x2, 0x960000, 0x4000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x3, 0x0, 0x0) [ 975.701851][ T9058] usb 5-1: USB disconnect, device number 69 15:52:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x40000000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 975.779417][T18633] usb 6-1: too many configurations: 37, using maximum allowed: 8 15:52:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="05001bd22a577d742a5bfa5ebf0029000000"], 0x0) [ 976.208161][T18633] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 976.216077][T18633] usb 6-1: can't read configurations, error -71 [ 976.291871][T18633] usb usb6-port1: unable to enumerate USB device 15:52:33 executing program 2: set_mempolicy(0x2, &(0x7f0000000080)=0xe4e, 0x6) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001680)=ANY=[]) 15:52:33 executing program 3: set_mempolicy(0x2, &(0x7f0000000080)=0xe4e, 0x6) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$fuse(0x1000000, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, 0x0) 15:52:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x101281, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)) sendfile(r1, r0, 0x0, 0x1c01) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 976.754199][T19715] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 977.007429][T10251] usb 6-1: new full-speed USB device number 72 using dummy_hcd 15:52:34 executing program 2: set_mempolicy(0x40000000004003, &(0x7f00000000c0)=0x8, 0xc2) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0xfffffffe, 0x0, 0x0, 0x5}, 0x10) 15:52:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x41020000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:52:34 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb6d, 0x0, @perf_config_ext={0x0, 0xa8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='nv\x00', 0x3) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f0000000180)=0x84) fchmod(0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a347f1f6588b967480541ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bbecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x20000, 0x0) [ 977.300945][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 977.311918][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 977.319581][ T4874] loop3: p2 < > [ 977.327681][T10251] usb 6-1: device descriptor read/64, error 18 [ 977.743066][T10251] usb 6-1: device descriptor read/64, error 18 15:52:34 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100), 0xc, &(0x7f00000005c0)={0x0, 0x58}}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000480)={&(0x7f0000002580)={0x70, 0x1, 0x3, 0x0, 0x0, 0x0, {}, [@NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}, @NFQA_VLAN_TCI={0x6}, @NFQA_VLAN_TCI={0x6}]}, @NFQA_MARK={0x8}, @NFQA_MARK={0x8}, @NFQA_CT={0xc, 0xb, 0x0, 0x1, [@CTA_TIMEOUT={0x8}]}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}, @NFQA_CT={0x10, 0xb, 0x0, 0x1, [@CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev}]}]}]}, 0x70}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000c00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/140, 0x8c}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000280), 0xc, &(0x7f0000000a40)={0x0, 0x1a4}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 15:52:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000b6dfc8)={0x507, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x70}}, 0x0) [ 978.049157][T10251] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 978.388100][T10251] usb 6-1: device descriptor read/64, error 18 15:52:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x54000000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:52:35 executing program 3: r0 = io_uring_setup(0x192b, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x2, 0x960000, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x3, 0x0, 0x0) [ 978.788478][T10251] usb 6-1: device descriptor read/64, error 18 15:52:35 executing program 2: r0 = io_uring_setup(0x192b, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x2, 0x960000, 0x4000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[0xffffffffffffffff]}, 0x14) [ 978.907854][T10251] usb usb6-port1: attempt power cycle [ 979.269846][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 979.282855][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 979.290661][ T4874] loop3: p2 < > [ 979.617446][T10251] usb 6-1: new full-speed USB device number 74 using dummy_hcd 15:52:36 executing program 5: syz_usb_connect(0x6, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x0) r0 = openat$vcs(0xffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x240480, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r2, 0x0) ioprio_get$uid(0x0, r2) 15:52:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)) 15:52:36 executing program 3: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x181800, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, 0x0) 15:52:36 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb6d, 0x0, @perf_config_ext={0x0, 0xa8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000080)=""/38, &(0x7f00000000c0)=0x26) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='nv\x00', 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e21, @remote}}}, 0x84) prctl$PR_GET_FP_MODE(0x2e) fchmod(r2, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a347f1f6588b967480541ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bbecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x20000, 0x0) [ 979.803132][T10251] usb 6-1: device descriptor read/8, error -71 15:52:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x58000000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 980.020468][T10251] usb 6-1: device descriptor read/8, error -71 15:52:37 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100), 0xc, &(0x7f00000005c0)={0x0, 0x58}}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002580)={0x44, 0x1, 0x3, 0x0, 0x0, 0x0, {}, [@NFQA_MARK={0x8}, @NFQA_MARK={0x8}, @NFQA_CT={0xc, 0xb, 0x0, 0x1, [@CTA_TIMEOUT={0x8}]}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}]}, 0x44}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000c00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/140, 0x8c}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x985}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 15:52:37 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201bfffffff01000000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 15:52:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "eaffffff090000000000000000000000000053"}) set_mempolicy(0x2, &(0x7f0000000080)=0xe4e, 0x6) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) 15:52:38 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="019122ff000904000001ab255121090582000000000000000000a78f4570c77c9e0bbc0674830600912c508dec0881133d774fe6f598059187ed1d9972b2bec9b2febe3ebe5792c1422f40c83b56168daec6b0d38aa701dcd18a1254bdeeaa721101f1300cad1537fb86f111b6ecdcc22e42858cd88edb67fe6fb0aefeb82e731ce4f770e8177f22e1d27008e423d788e72d69f84ecf0a6916bcafb76233f964f580d80707e3296b6ac247a871d02b858bc8124d21e0c3065824703eff9047dd5f5946e7b4580f9cadd8e7b8e5a550c90258a045a942e0547b3deb1603b397063d2c67644bb1"], 0x0) semctl$GETPID(0x0, 0x4, 0xb, &(0x7f0000000000)=""/171) 15:52:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "eaffffff090000000000000000000000000053"}) set_mempolicy(0x2, &(0x7f0000000080)=0xe4e, 0x6) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5423, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x0, "0000000000000000ffffff00"}) 15:52:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "eaffffff090000000000000000000000000053"}) set_mempolicy(0x2, &(0x7f0000000080)=0xe4e, 0x6) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5423, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, "0000000000000000ffffff00"}) 15:52:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x7ffff000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:52:39 executing program 3: set_mempolicy(0x40000000004003, &(0x7f00000000c0)=0x8, 0xc2) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @local}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 982.027578][ T9058] usb 6-1: new full-speed USB device number 76 using dummy_hcd 15:52:39 executing program 2: ioperm(0x0, 0x200, 0xffff) fchown(0xffffffffffffffff, 0x0, 0x0) [ 982.101688][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 982.111982][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 982.119475][ T4874] loop3: p2 < > 15:52:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "eaffffff090000000000000000000000000053"}) set_mempolicy(0x2, &(0x7f0000000080)=0xe4e, 0x6) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5423, &(0x7f0000000000)={0xd, 0x0, 0x0, 0x0, 0x0, "0000000000000000ffffff00"}) [ 982.307259][ T9058] usb 6-1: device descriptor read/64, error 18 15:52:39 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100), 0xc, &(0x7f00000005c0)={0x0, 0x58}}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000480)={&(0x7f0000002580)={0x44, 0x1, 0x3, 0x0, 0x0, 0x0, {}, [@NFQA_MARK={0x8}, @NFQA_MARK={0x8}, @NFQA_CT={0xc, 0xb, 0x0, 0x1, [@CTA_TIMEOUT={0x8}]}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}]}, 0x44}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000c00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/140, 0x8c}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000280), 0xc, &(0x7f0000000a40)={0x0, 0x1a4}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 982.707362][ T9058] usb 6-1: device descriptor read/64, error 18 15:52:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 15:52:40 executing program 0: r0 = io_uring_setup(0x192b, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x2, 0x960000, 0x4000) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x3, 0x0, 0x0) [ 983.027540][ T9058] usb 6-1: new full-speed USB device number 77 using dummy_hcd 15:52:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x8c050000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 983.307731][ T9058] usb 6-1: device descriptor read/64, error 18 [ 983.414139][T19854] syz-executor.3 (19854) used greatest stack depth: 3832 bytes left 15:52:40 executing program 3: set_mempolicy(0x40000000004003, &(0x7f00000000c0)=0x8, 0xc2) syz_init_net_socket$ax25(0x3, 0x3, 0x0) [ 983.727906][ T9058] usb 6-1: device descriptor read/64, error 18 [ 983.861219][ T9058] usb usb6-port1: attempt power cycle [ 984.272691][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 984.283400][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 984.290911][ T4874] loop3: p2 < > 15:52:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$sock(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0xe19, @private2, 0x1d87}}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=[@txtime={{0x14}}, @mark={{0x10, 0x1, 0x24, 0x4}}, @txtime={{0x14, 0x1, 0x3d, 0x3ff}}, @txtime={{0x14, 0x1, 0x3d, 0x3}}, @timestamping={{0x10}}, @timestamping={{0x10, 0x1, 0x25, 0x7}}, @mark={{0x10, 0x1, 0x24, 0x33709723}}, @txtime={{0x14, 0x1, 0x3d, 0x7}}, @txtime={{0x14, 0x1, 0x3d, 0x5}}, @timestamping={{0x10, 0x1, 0x25, 0x6ade}}], 0xb4}, 0x24040884) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) 15:52:41 executing program 2: r0 = io_uring_setup(0x192b, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x2, 0x960000, 0x4000) 15:52:41 executing program 0: r0 = io_uring_setup(0x2442, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x2, 0x960000, 0x4000) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) 15:52:41 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000200000000001000"}) r3 = syz_open_pts(r2, 0x4000000040042) r4 = fcntl$dupfd(r2, 0x0, r3) dup3(r3, r2, 0x0) write(r2, &(0x7f0000000280)="84225af5012e10c806731d620b72cbbc030c5df6a9faf4a399637449e277aee80d8c6b2ec451e77e322fc8b2ab92a0e47c4d00"/64, 0xfffffffffffffe8c) r5 = openat$autofs(0xffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0xd0802, 0x0) recvfrom$netrom(r5, &(0x7f0000001340)=""/171, 0xab, 0x60, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r6 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x381000) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000000340)={{r2}, r7, 0xc, @inherit={0x60, &(0x7f00000002c0)={0x1, 0x3, 0x5, 0x9, {0x10, 0x8, 0x3, 0x7, 0xff}, [0x5, 0xcf4, 0x7e]}}, @subvolid=0x1f}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c09425, &(0x7f0000000100)={"e193b2fb3a7c18b49678cbe5141cb5da", r7, r8, {0xe33, 0x80000000}, {0x100, 0x40}, 0x9, [0x5, 0x9, 0x5, 0x9, 0x80000001, 0x7, 0x6, 0x0, 0x5, 0x6, 0x8, 0x4, 0x7, 0x1f, 0x5, 0xffffffffffffffe1]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ftruncate(r0, 0x40) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x2, 0x2, 0x3}}, 0x14) 15:52:41 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100), 0xc, &(0x7f00000005c0)={0x0, 0x58}}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000000c0), 0xc, &(0x7f0000000700)={&(0x7f0000002600)={0x710, 0x1, 0x5, 0x0, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "f76c6235f69dc8e76d45f30a8883faea86d734773f4d58ce5218389dbe26b9bd", "0b1ff251ea0e3e8b07daa3811b26d38ff0731403675037e74541201459734d1a"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "0793f96cc5d9af995703bf7fa109dd64db55f049dd31566d29c8a3cf5b499d8f", "3a7e6c76cf01ad5819e4c9bd8b56c15369d60ed65647531bb8d0fd9877ad86ed"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "83b5575a47e662d14df7408b2c9f1f5aad3215a341a3966bb2ffe1bd60a61283", "0a2d10f58cf5559be0b581cd434eb534e2014569688f7232e5c8acb99945f546"}}}]}, 0x710}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000480)={&(0x7f0000002580)={0x44, 0x1, 0x3, 0x0, 0x0, 0x0, {}, [@NFQA_MARK={0x8}, @NFQA_MARK={0x8}, @NFQA_CT={0xc, 0xb, 0x0, 0x1, [@CTA_TIMEOUT={0x8}]}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}]}, 0x44}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000c00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/140, 0x8c}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000280), 0xc, &(0x7f0000000a40)={0x0, 0x1a4}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x7c4}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 15:52:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x8dffffff, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 984.588048][ T9058] usb 6-1: new full-speed USB device number 78 using dummy_hcd 15:52:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0x192b, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x2, 0x960000, 0x4000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[0xffffffffffffffff]}, 0x1) 15:52:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_TARGET_NETNSID={0x8}]}, 0x3c}}, 0x0) [ 985.121479][ T9058] usb 6-1: device not accepting address 78, error -71 [ 985.129049][T10251] usb 5-1: new full-speed USB device number 70 using dummy_hcd 15:52:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000015c0)={[{@logbufs={'logbufs', 0x3d, 0x2}}]}) 15:52:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x80284504, &(0x7f0000001080)=[0x200]) [ 985.567785][ T9058] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 985.612073][T19918] XFS (loop2): Invalid superblock magic number 15:52:42 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) [ 985.660146][T10251] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 985.669661][T10251] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 985.678329][T10251] usb 5-1: Product: syz [ 985.682678][T10251] usb 5-1: Manufacturer: syz [ 985.801136][T10251] usb 5-1: config 0 descriptor?? 15:52:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x91ffffff, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 985.857200][T10251] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input149 [ 985.982349][ T9058] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 985.992412][ T9058] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 986.001082][ T9058] usb 6-1: Product: syz [ 986.005442][ T9058] usb 6-1: Manufacturer: syz [ 986.087723][ T9058] usb 6-1: config 0 descriptor?? [ 986.156792][ T9058] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input150 [ 986.355155][ T9058] usb 6-1: USB disconnect, device number 79 [ 986.396878][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 986.407757][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 986.415015][ T4874] loop3: p2 < > [ 986.816335][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 986.827422][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 986.834709][ T4874] loop3: p2 < > 15:52:44 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0xffffba70, 0x359000) 15:52:44 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @private1, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c]}}}}}}}}, 0x0) 15:52:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x80284504, &(0x7f0000001080)=[0x200]) [ 987.679775][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 987.690062][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 987.697803][ T4874] loop3: p2 < > [ 987.727343][ T9054] usb 6-1: new full-speed USB device number 80 using dummy_hcd 15:52:44 executing program 4: r0 = openat$null(0xffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa042f14e908822ee}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x33}, 0x1, 0x0, 0x0, 0x41090}, 0x200400d0) syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 15:52:44 executing program 2: 15:52:44 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000280)='/dev/input/mice\x00', 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) dup2(r1, r0) 15:52:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xb8040000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:52:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$evdev(&(0x7f0000002ac0)='/dev/input/event#\x00', 0x800000000004, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x80284504, &(0x7f0000001080)=[0x200]) [ 987.806570][T18351] usb 5-1: USB disconnect, device number 70 15:52:45 executing program 2: 15:52:45 executing program 3: 15:52:45 executing program 0: [ 988.220396][ T9054] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 988.229915][ T9054] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 988.238631][ T9054] usb 6-1: Product: syz [ 988.242943][ T9054] usb 6-1: Manufacturer: syz [ 988.310079][ T9054] usb 6-1: config 0 descriptor?? [ 988.356428][ T9054] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input151 [ 988.462310][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 988.473163][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 988.480672][ T4874] loop3: p2 < > [ 988.559102][T18351] usb 6-1: USB disconnect, device number 80 15:52:45 executing program 2: [ 989.357371][T18351] usb 6-1: new full-speed USB device number 81 using dummy_hcd [ 989.374307][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 989.384498][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 989.392572][ T4874] loop3: p2 < > [ 989.626912][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 989.638115][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 989.645375][ T4874] loop3: p2 < > [ 989.901955][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 989.912646][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 989.920078][ T4874] loop3: p2 < > [ 989.929075][T18351] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 989.938458][T18351] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 989.946957][T18351] usb 6-1: Product: syz [ 989.951983][T18351] usb 6-1: Manufacturer: syz [ 990.022968][T18351] usb 6-1: config 0 descriptor?? [ 990.076264][T18351] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input152 [ 990.158860][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 990.169157][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 990.180381][ T4874] loop3: p2 < > [ 990.277547][T18351] usb 6-1: USB disconnect, device number 81 15:52:47 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x323, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xe0, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x2af}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x3f, 0x1}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x7, 0xff, 0xfc, 0xff, 0x20}, 0x10a, &(0x7f0000000200)={0x5, 0xf, 0x10a, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x8, 0x2, 0x8, 0xff}, @wireless={0xb, 0x10, 0x1, 0xc, 0x49, 0x80, 0x1f, 0x20, 0x2}, @generic={0xef, 0x10, 0x1, "9efe73de35a408112e7ece56e3f423cd19c5f566ab928443c1b88594549097cfd74e66864f9ef672f5c3ea3de32b521d6aca8743c5983e93a875648d2b3238d4c43c6cc589f31d160932da83a4ce14158a7aaafd8fa312cba0207c6ec748ebad2ab5fa48af0792b984ec32b5f68c1b8b84c01b2b25b50804488287bb7a40fec680000accac3877e8d97dfa86fae36f3d1971550aec7ddd125df83f3269d4142ae2ac2811e5b1c3a9e3626f5143d3bf8bf86f00b276f4dc9a7f88af02106bd84fac867a3ef0179380af10c677ceaaea6432920dd1d3515ac76fdf3dacefe5d8078d0fa879a7fabb43d297d0a4"}]}, 0x2, [{0x24, &(0x7f0000000340)=@string={0x24, 0x3, "333a24399fc53842807cfb8cd376fec3a9bec11460f1e6730ca024aa99854ddce4c5"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x440e}}]}) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x401, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x1e, 0x408240) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f0000000100)=0x433187bf) ioctl$RTC_PLL_SET(r0, 0x401c7012, &(0x7f0000000080)={0x2, 0x7ffa, 0x80000000, 0x8, 0x7f, 0x40, 0x9d8}) 15:52:47 executing program 0: 15:52:47 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 15:52:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xe02e0000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:52:47 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe70001090200000904000001ab255100090582001000000000002835ef9e23652cd4608009e5aeb2e29056a4671a0d4df3094b2a4e907f5799dbe0d3dd9fb458f626a87423d8251d3e587952223c6179bbb9dd86b15247f21a1a4cabd1d1329881fc80f3bc4c8cd60ce85d4e187b7df36602af7a8ac41732b29f0623af2d5b263fff1d5c5dbde80cb1bfd02c94016b0ff3bb9fec4db072332bcd4b9efbfc681cae9aabb7"], 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') 15:52:47 executing program 2: 15:52:47 executing program 0: [ 990.725789][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 990.736374][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 990.743796][ T4874] loop3: p2 < > 15:52:47 executing program 2: [ 990.767766][ T9054] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 990.957437][T18633] usb 6-1: new full-speed USB device number 82 using dummy_hcd 15:52:48 executing program 3: 15:52:48 executing program 0: [ 991.128745][ T9054] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 991.227745][T18633] usb 6-1: device descriptor read/64, error 18 [ 991.258701][ T9054] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 991.268209][ T9054] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 991.276698][ T9054] usb 5-1: Product: syz [ 991.281320][ T9054] usb 5-1: Manufacturer: syz 15:52:48 executing program 2: 15:52:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xe0ffffff, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 991.606297][ T9054] usb 5-1: USB disconnect, device number 71 [ 991.627690][T18633] usb 6-1: device descriptor read/64, error 18 [ 991.765970][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 991.776370][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 991.783776][ T4874] loop3: p2 < > [ 991.897349][T18633] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 992.167494][T18633] usb 6-1: device descriptor read/64, error 18 [ 992.346843][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 992.357732][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 992.365087][ T4874] loop3: p2 < > [ 992.387701][ T9054] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 992.567603][T18633] usb 6-1: device descriptor read/64, error 18 [ 992.586407][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 992.597204][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 992.604230][ T4874] loop3: p2 < > [ 992.688306][T18633] usb usb6-port1: attempt power cycle [ 992.757652][ T9054] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 992.878384][ T9054] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 992.888240][ T9054] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 992.896739][ T9054] usb 5-1: Product: syz [ 992.901336][ T9054] usb 5-1: Manufacturer: syz [ 993.061827][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 993.072184][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 993.079636][ T4874] loop3: p2 < > [ 993.213631][T18351] usb 5-1: USB disconnect, device number 72 [ 993.407703][T18633] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 993.578754][T18633] usb 6-1: device descriptor read/8, error -61 15:52:50 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000000040)=""/83) 15:52:50 executing program 3: 15:52:50 executing program 0: 15:52:50 executing program 2: 15:52:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xe55dc434, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:52:50 executing program 4: ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000040)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) [ 993.748677][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 993.759006][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 993.766288][ T4874] loop3: p2 < > [ 993.798940][T18633] usb 6-1: device descriptor read/8, error -71 15:52:51 executing program 2: 15:52:51 executing program 3: 15:52:51 executing program 0: [ 994.159029][ T9054] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 994.370619][T18633] usb 6-1: new full-speed USB device number 85 using dummy_hcd 15:52:51 executing program 0: 15:52:51 executing program 2: 15:52:51 executing program 3: [ 994.629460][T18633] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 994.637928][T18633] usb 6-1: can't read configurations, error -61 [ 994.648068][ T9054] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 994.657613][ T9054] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 994.666102][ T9054] usb 5-1: Product: syz [ 994.670602][ T9054] usb 5-1: Manufacturer: syz [ 994.705245][T18633] usb usb6-port1: unable to enumerate USB device [ 994.744611][ T9054] usb 5-1: config 0 descriptor?? [ 994.800422][ T9054] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input153 [ 995.014824][ T9054] usb 5-1: USB disconnect, device number 73 [ 995.240367][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 995.250822][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 995.258296][ T4874] loop3: p2 < > 15:52:54 executing program 0: 15:52:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xf5ffffff, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:52:54 executing program 2: 15:52:54 executing program 3: 15:52:54 executing program 4: accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0xc00) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x2840, 0x8000, 0x3, 0x6, 0x1}}) accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@short={0xb, @dev, @remote, 0x1, @default}, &(0x7f0000000100)=0x1c, 0xc00) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x0) 15:52:54 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x75, 0x400400) write$hidraw(r0, &(0x7f0000000040)="4fc1997f50182f8ab7b5b53f13737f75098a1bca8721775017b608323e16b67e3cb29ad9ee2912d904eb6486bfd49ba9b59718157cfbac7591cf6b7cfcc5e4c953262fcee085dbbf42a740d1a41ef40b62dd65786bc1b021e60f32167a75cf6fd54c8829881e8dc89f6d74124e5bfcce5e9141b43315374a98a0ac0104e676396801a56264334eff6d38d952d76f4588460b2b31b9a5772caff7fb5c78be28bec06e2615cd07e77806b679eae0c83bc31bf3328515389679e7b2bfbc5a35a23e22bf95174e7890f90fe25a090e70", 0xce) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x8, 0x8]}, 0x8, 0x800) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x140d, 0x200, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x44044) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @mcast2}, {0x2, 0x0, 0xac141424, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, r4}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x0, r4, 0x1c, 0x0, @in={0x2, 0x4e23, @empty}}}, 0xa0) 15:52:54 executing program 3: 15:52:54 executing program 2: 15:52:54 executing program 0: [ 997.617890][T18351] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 997.669168][ T9058] usb 6-1: new full-speed USB device number 86 using dummy_hcd 15:52:54 executing program 3: 15:52:54 executing program 2: 15:52:55 executing program 0: [ 998.029518][T18351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1296, setting to 64 [ 998.169899][T18351] usb 5-1: New USB device found, idVendor=8d08, idProduct=0101, bcdDevice=20.91 [ 998.179413][T18351] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 998.188636][T18351] usb 5-1: Product: syz [ 998.192953][T18351] usb 5-1: Manufacturer: syz [ 998.199992][ T9058] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 998.209440][ T9058] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 998.218033][ T9058] usb 6-1: Product: syz [ 998.222336][ T9058] usb 6-1: Manufacturer: syz [ 998.285946][T18351] usb 5-1: config 0 descriptor?? [ 998.294616][ T9058] usb 6-1: config 0 descriptor?? 15:52:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xfc000000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 998.364724][ T9058] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input154 15:52:55 executing program 3: 15:52:55 executing program 2: [ 998.539657][ T9054] usb 5-1: USB disconnect, device number 74 [ 998.586008][ T9058] usb 6-1: USB disconnect, device number 86 [ 998.787657][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 998.798049][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 998.805370][ T4874] loop3: p2 < > 15:52:55 executing program 0: 15:52:56 executing program 4: ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) [ 999.380862][ T9058] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 999.565801][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 999.576368][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 999.584148][ T4874] loop3: p2 < > [ 999.767755][ T8711] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 999.931831][ T9058] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 999.941250][ T9058] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 999.950139][ T9058] usb 6-1: Product: syz [ 999.954454][ T9058] usb 6-1: Manufacturer: syz [ 999.986466][ T9058] usb 6-1: config 0 descriptor?? [ 1000.040165][ T9058] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input155 [ 1000.129438][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1000.139733][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1000.146736][ T4874] loop3: p2 < > [ 1000.248999][ T8711] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1000.258858][ T8711] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1000.267626][ T8711] usb 5-1: Product: syz [ 1000.271969][ T8711] usb 5-1: Manufacturer: syz [ 1000.301840][ T9058] usb 6-1: USB disconnect, device number 87 [ 1000.323170][ T8711] usb 5-1: config 0 descriptor?? [ 1000.391135][ T8711] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input156 15:52:57 executing program 5: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x1000, 0x7]}, 0x8) setsockopt$inet6_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000100)="66fcffa64deabeb6da1cd85908872928fda1939994ec4cf9213bf154eec4dcede177ece1caa197785836b11351f613860decd4e849fae69c95ce9638da2a36ff8200ea7c83520c455e2ad3879b9fa997f573aca6ab8e1bda5bf8b2b54a049d6b4201b542c74f78e4228ca110664b350b3fa25eccbb76a1e2331dcf94ee20fecdbec453d822a640468b", 0x89) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{r0, r1+60000000}}, &(0x7f0000000080)) 15:52:57 executing program 3: 15:52:57 executing program 2: 15:52:57 executing program 0: 15:52:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xfe800000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 1000.572367][ T8711] usb 5-1: USB disconnect, device number 75 15:52:57 executing program 0: 15:52:57 executing program 2: 15:52:57 executing program 3: 15:52:58 executing program 5: r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) bind$netrom(r0, &(0x7f0000000040)={{0x3, @bcast, 0x7}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = accept4$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x1c, 0x40800) setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000140)=0x1ff, 0x4) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) 15:52:58 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000240)={{0x2, @private=0xa010102, 0x4e20, 0x1, 'rr\x00', 0x20, 0x5, 0x17}, {@rand_addr=0x64010102, 0x4e20, 0x3, 0x6, 0x42, 0xfffffffa}}, 0x44) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={r3}, &(0x7f0000000200)=0xc) sendto$inet6(r1, &(0x7f00000002c0)="6253383b94d9d8c4614548aa1af46dfcdb892c65649fe271fa4cb72f9071d8105058f0378a4eb8a821348e7f6241e19354a05621f293aa6c406f9bc79f6d399466379d574b1b08c8b97858cae7eb3a5254a94b404201889921c5855ec2eb805604c56f8f34bda865f7a0bcc7b0751e16551d9c205484a2bd02bbaf03", 0x7c, 0x8000, &(0x7f0000000140)={0xa, 0x4e23, 0x2, @empty, 0x7fff}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x50, 0x0, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1c0000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa81f}]}, @CTA_TIMEOUT_L4PROTO={0x0, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0xb2}}, 0x40) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESHEX=r4], 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000040)=""/218, 0xda) 15:52:58 executing program 2: 15:52:58 executing program 3: 15:52:58 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) getdents(r4, 0x0, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x8) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r3) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) 15:52:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xfe80000b, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 1001.797642][T18351] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 1001.832508][T20310] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20000 15:52:59 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="304a6485cc94c81eb7317a81183b737a2e222311670aef396a422c372e8b18d52de6753807ce2511240f2890ff55c52e4f5fddfd05b34924a3864f9424556fca", 0x40}], 0x1}}], 0x1, 0x0) [ 1001.924918][T20310] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1002.133116][ T28] audit: type=1804 audit(1598975579.191:69): pid=20314 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir243624575/syzkaller.zc0BKc/45/bus" dev="sda1" ino=16379 res=1 15:52:59 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2e) [ 1002.237754][ T8711] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1002.341090][ T28] audit: type=1804 audit(1598975579.281:70): pid=20316 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir243624575/syzkaller.zc0BKc/45/bus" dev="sda1" ino=16379 res=1 [ 1002.366274][ T28] audit: type=1804 audit(1598975579.361:71): pid=20314 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir243624575/syzkaller.zc0BKc/45/bus" dev="sda1" ino=16379 res=1 [ 1002.391297][ T28] audit: type=1804 audit(1598975579.361:72): pid=20316 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir243624575/syzkaller.zc0BKc/45/bus" dev="sda1" ino=16379 res=1 [ 1002.399539][T18351] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1002.424636][T18351] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1002.433841][T18351] usb 6-1: Product: syz [ 1002.438288][T18351] usb 6-1: Manufacturer: syz [ 1002.540078][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1002.550553][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1002.558151][ T4874] loop3: p2 < > [ 1002.571819][T18351] usb 6-1: config 0 descriptor?? 15:52:59 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x130, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xbc, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b96178c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7cf5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6352eeda}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41f6fcfc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeeef}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55561151}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e29}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f3850fa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3d8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70530ff7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x352cdea8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa78d}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4314daa6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e8528e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d399364}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30f9f576}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47dc63ff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb584}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3168669c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61dc1de0}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x1}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000280), 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000240)={0x0, 'batadv0\x00', {0xa}, 0x7}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f000000bc80)={0x0, 0x0, &(0x7f000000bc40)={&(0x7f000000bb80)={0x18, r3, 0xa56f26d04ef423cf, 0x0, 0x0, {0xd}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 1002.597939][ T8711] usb 5-1: device descriptor read/64, error 18 15:52:59 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) r4 = openat(0xffffffffffffffff, &(0x7f000060cff8)='/', 0x0, 0x0) getdents(r4, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$TIOCSCTTY(r4, 0x540e, 0x8) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r3) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 1002.652789][T18351] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input157 [ 1002.841625][T18351] usb 6-1: USB disconnect, device number 88 [ 1002.988284][ T8711] usb 5-1: device descriptor read/64, error 18 15:53:00 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x20000000021) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) 15:53:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xfe80ffff, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 1003.273199][ T8711] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1003.349574][ T28] audit: type=1804 audit(1598975580.411:73): pid=20349 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir243624575/syzkaller.zc0BKc/46/bus" dev="sda1" ino=16378 res=1 [ 1003.540132][ T28] audit: type=1804 audit(1598975580.451:74): pid=20349 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir243624575/syzkaller.zc0BKc/46/bus" dev="sda1" ino=16378 res=1 [ 1003.564693][ T28] audit: type=1804 audit(1598975580.481:75): pid=20354 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir243624575/syzkaller.zc0BKc/46/bus" dev="sda1" ino=16378 res=1 [ 1003.589655][ T28] audit: type=1804 audit(1598975580.531:76): pid=20349 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir243624575/syzkaller.zc0BKc/46/bus" dev="sda1" ino=16378 res=1 [ 1003.620836][ T8711] usb 5-1: device descriptor read/64, error 18 15:53:00 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="5210200e01019122ffe70001702e0000000010004d42e94b44660630de83"], 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000040)) prctl$PR_SET_THP_DISABLE(0x29, 0x1) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) [ 1004.057556][ T8711] usb 5-1: device descriptor read/64, error 18 [ 1004.163166][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1004.173557][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1004.181195][ T4874] loop3: p2 < > [ 1004.204586][ T8711] usb usb5-port1: attempt power cycle [ 1004.318060][T18351] usb 6-1: new full-speed USB device number 89 using dummy_hcd [ 1004.607183][T18351] usb 6-1: device descriptor read/64, error 18 [ 1004.674405][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1004.684958][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1004.693160][ T4874] loop3: p2 < > 15:53:01 executing program 4: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000200)={0x2, 0xa, 0x800, 0x401, 0xfd, 0x5, &(0x7f0000000000)="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"}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) dup3(0xffffffffffffffff, r0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010a2410b3a0ec1f8318fcef8d929169c6c8b046cb4c2d4050b83d87ac8ba64339f2230acd1554042fdba57e49ebb3e48d59c40cf188ec15206641363fbd56dade25899bd4a57af3578eb9b46233dfa71575947c75b2542d88ad708184cf15382c72816c7d73e2afa2d5c1e5f7650b2133dda768123b7155f25162e0c63a081bc18c97959a4b85a4083b348591152dffb161581077505423a197a1c3b69067eb87a41f96151bfb40a152d19839fa6d8bad7f6fc210d1f753601bc81"], 0x0) 15:53:01 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket(0x15, 0x80005, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 15:53:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x395d5, &(0x7f0000000400)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x40}}, 0x0) 15:53:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xfec0ffff, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:53:01 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = socket(0x15, 0x80005, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd}, 0xc) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000005) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0105502, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1004.880161][T20377] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1005.031143][T18351] usb 6-1: device descriptor read/64, error 18 [ 1005.036638][T20387] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 15:53:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x5865, &(0x7f0000000400)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x40}}, 0x0) [ 1005.308312][T18351] usb 6-1: new full-speed USB device number 90 using dummy_hcd [ 1005.322559][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1005.332974][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1005.340478][ T4874] loop3: p2 < > 15:53:02 executing program 3: msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000013c0)=""/4096) [ 1005.597327][T18351] usb 6-1: device descriptor read/64, error 18 [ 1005.617491][ T8711] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1005.791067][T20401] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1005.828980][ T8711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 528, setting to 64 [ 1005.956790][T20401] device ipvlan4 entered promiscuous mode [ 1005.978330][ T8711] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1005.987697][ T8711] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1005.996323][ T8711] usb 5-1: Product: syz [ 1006.000880][ T8711] usb 5-1: Manufacturer: syz [ 1006.031499][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1006.042406][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1006.049829][ T4874] loop3: p2 < > [ 1006.058381][T18351] usb 6-1: device descriptor read/64, error 18 [ 1006.154580][ T8711] usb 5-1: config 0 descriptor?? 15:53:03 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f000000bc80)={0x0, 0x0, &(0x7f000000bc40)={&(0x7f000000bb80)={0x18, r1, 0xa56f26d04ef423cf, 0x0, 0x0, {0xb}, [@HEADER={0x4}]}, 0x18}}, 0x0) 15:53:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xff000000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 1006.179223][T18351] usb usb6-port1: attempt power cycle [ 1006.208596][T20415] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1006.231911][T20415] device ipvlan5 entered promiscuous mode [ 1006.272250][ T8711] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input158 [ 1006.416118][ T8711] usb 5-1: USB disconnect, device number 78 15:53:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x5865, &(0x7f0000000400)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x40}}, 0x0) [ 1006.853371][T20439] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 15:53:04 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0x47, 0x6, 0x0, 0x2d13, 0xffff, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}]}]}, 0x4c}}, 0x0) [ 1006.897309][T18351] usb 6-1: new full-speed USB device number 91 using dummy_hcd [ 1006.902561][T20439] device ipvlan6 entered promiscuous mode 15:53:04 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, 0x0) [ 1007.217781][T10251] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 1007.257613][T18351] usb 6-1: device descriptor read/8, error -71 [ 1007.478391][T18351] usb 6-1: device descriptor read/8, error -71 [ 1007.588416][T10251] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 528, setting to 64 [ 1007.750475][T10251] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1007.760182][T10251] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1007.769128][T10251] usb 5-1: Product: syz [ 1007.773442][T10251] usb 5-1: Manufacturer: syz [ 1007.927196][T10251] usb 5-1: config 0 descriptor?? [ 1007.976395][T10251] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input159 15:53:05 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f000000bc80)={0x0, 0xe000000, &(0x7f000000bc40)={&(0x7f000000bb80)={0x18, r1, 0xa56f26d04ef423cf, 0x0, 0x0, {0x2}, [@HEADER={0x4}]}, 0x18}}, 0x0) 15:53:05 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$ppp(0xffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) dup3(r1, r2, 0x80000) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0xeb6, 0x40, [], 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}]}, 0x24}}, 0x8000090) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) 15:53:05 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, 0x0, 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) 15:53:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xff0f0000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:53:05 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00') getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000280), 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128-generic\x00'}, 0x58) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000002c0)={0x0, 0x2}) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="304a6485cc94c81eb7317a81183b737a2e222311670aef396a422c372e8b18d52de6753807ce2511240f2890ff55c52e4f5fddfd05b34924a3864f9424556fca839058bc3c8d551477c623e68d771d8710a9b2183b8153af9dfb84cadfebc001d56c6b138d9b659492d00af9abe6442507ccbc7c08173c78aba6191c873abf603e65452e07947904589250c39382f235e09fb08efbce6b49ebc25102ad32ecbe4aa41ab1f55faede308ad5a81cf69291fcace3", 0xb3}, {&(0x7f0000000440)="f04475f43449e43a689975dd0e239efa0155a790f60df55894b7bcc2248573f001399071ce9efc2f8963acbc968ecf1adeddde7cc8b626c0ef83237c48b62e714665d5814bc5b794", 0x48}, {&(0x7f00000004c0)="b92006101253a8ff21f043aae52859eebe1fbf283c62f82feed5da6553cbe7", 0x1f}, {&(0x7f00000005c0)="3ee55ec841eba55d04fa46611742356dbbff6052cd3c2368084df6a28c", 0x1d}], 0x4}}], 0x1, 0x0) 15:53:05 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES64], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0xd, &(0x7f0000000080)={r2}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={r2, @in={{0x2, 0x4e22, @loopback}}, [0x1, 0x80000000, 0x7fffffff, 0x200, 0x1000, 0x91, 0x1000, 0xae, 0x800, 0xfffffffffffffff9, 0x100, 0x3, 0x7, 0xa6a, 0x7ff0000]}, &(0x7f0000000240)=0xfc) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)={0x7d, 0x3ff, 0x5, 0xb, 0x0, 0x81}) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) [ 1008.187801][T10251] usb 5-1: USB disconnect, device number 79 [ 1008.517617][ T28] audit: type=1804 audit(1598975585.571:77): pid=20482 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir888932182/syzkaller.mDry0C/297/bus" dev="sda1" ino=16378 res=1 15:53:05 executing program 0: write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) open(0x0, 0x141042, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34000000100001fc1e8e6f4ed158770000000000", @ANYRES32=r3, @ANYBLOB="ddffffffffffffff140012000c00010062726964676500"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00'], 0x28}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @loopback}, r3}, 0x14) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f00000010c0)=""/4096, 0x1000) 15:53:05 executing program 2: set_mempolicy(0x3, &(0x7f00000000c0)=0x1, 0x4) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="6e6f6465636f6d706f73652c747970653de7ef4bf82c666f7263652c62"]) [ 1008.702845][ T28] audit: type=1804 audit(1598975585.701:78): pid=20483 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir888932182/syzkaller.mDry0C/297/bus" dev="sda1" ino=16378 res=1 [ 1008.774092][T18351] usb 6-1: new full-speed USB device number 92 using dummy_hcd [ 1008.912955][ T28] audit: type=1804 audit(1598975585.851:79): pid=20483 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir888932182/syzkaller.mDry0C/297/bus" dev="sda1" ino=16378 res=1 [ 1008.920241][ T3821] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 1008.938315][ T28] audit: type=1804 audit(1598975585.901:80): pid=20486 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir888932182/syzkaller.mDry0C/297/bus" dev="sda1" ino=16378 res=1 15:53:06 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000401090a0200027400f801", 0x17}], 0x0, &(0x7f0000000100)={[{@fat=@quiet='quiet'}]}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./file0\x00', r0, 0x0) [ 1009.133680][T20489] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1009.186727][T20489] device bridge1 entered promiscuous mode [ 1009.217854][T18351] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1009.227440][T18351] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1009.235935][T18351] usb 6-1: Product: syz [ 1009.240928][T18351] usb 6-1: Manufacturer: syz [ 1009.277417][ T3821] usb 5-1: device descriptor read/64, error 18 15:53:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xffff0000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 1009.375895][T18351] usb 6-1: config 0 descriptor?? [ 1009.393381][T20497] hfsplus: unable to parse mount options [ 1009.428690][T20496] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1009.514166][T18351] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input160 [ 1009.668256][ T3821] usb 5-1: device descriptor read/64, error 18 [ 1009.689047][T18351] usb 6-1: USB disconnect, device number 92 15:53:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x84, &(0x7f00000000c0)={[{@xino_on='xino=on'}, {@metacopy_off='metacopy=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 15:53:06 executing program 2: syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001880), 0x0, &(0x7f0000000280)={[{@norgrplvb='norgrplvb'}]}) 15:53:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000013c0)=""/79) [ 1009.937509][ T3821] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 1010.150577][T20523] gfs2: not a GFS2 filesystem [ 1010.209248][ T3821] usb 5-1: device descriptor read/64, error 18 [ 1010.212995][T20523] gfs2: not a GFS2 filesystem 15:53:07 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="9122ffe7000109021b0001000100000904f79e2551000905820010829015f6ed978acb1d97b5ab495029d4f97a7eeb9d8c10cf122048b383e66042eee3e2b47ef026a05c71e00ab8927eca219385f11bd28e2783c0ece285300c9bf6eca9fb302d5c07e3e3e577cd5848103a9928036018375d1e9ef35d5ce42222fe499fe5fafe354a39558ecb348549935d7661732e94b8bb000e6714103650e43d9a8ed8986b16df8c68acbcf14d81fbb32f95c97d7ea3b1c5dbfc602898"], 0x0) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0xa0000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_START(r1, 0x5402) read$FUSE(r1, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$setsig(0x4203, r2, 0x0, &(0x7f00000022c0)={0x2, 0x18000}) sendmsg$AUDIT_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3e8, 0x8, 0x70bd2a, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10445}, 0x44814) 15:53:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:53:07 executing program 0: syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc) setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001f0d0100268f1c87f38001040000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a0036459cdb26cd03cc"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) membarrier(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 15:53:07 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x380) [ 1010.598904][ T3821] usb 5-1: device descriptor read/64, error 18 [ 1010.717779][ T3821] usb usb5-port1: attempt power cycle [ 1011.069088][T20548] device vxlan0 entered promiscuous mode [ 1011.077796][T18351] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 1011.363236][T18351] usb 6-1: device descriptor read/64, error 18 [ 1011.437319][ T3821] usb 5-1: new full-speed USB device number 82 using dummy_hcd 15:53:08 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab255100f3b00905820010"], 0x0) r0 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000740)='/proc/capi/capi20ncci\x00', 0x200, 0x0) r1 = openat$dlm_control(0xffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x400000, 0x0) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000100)=0x28) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000780)={0x0, @bcast, @rose={'rose', 0x0}, 0x6, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 15:53:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xffff80fe, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:53:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x3, 0x0, 0x10001, 0x6], 0x4, 0x0, 0x0, 0xffffffffffffffff}) syz_open_pts(r2, 0xa4962) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) close(r0) 15:53:08 executing program 2: set_mempolicy(0x3, &(0x7f00000000c0)=0x1, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) [ 1011.678009][ T3821] usb 5-1: device descriptor read/8, error -71 [ 1011.791435][T18351] usb 6-1: device descriptor read/64, error 18 [ 1011.887765][ T3821] usb 5-1: device descriptor read/8, error -71 [ 1011.975614][T20550] device vxlan0 entered promiscuous mode [ 1012.095221][T18351] usb 6-1: new full-speed USB device number 94 using dummy_hcd 15:53:09 executing program 3: set_mempolicy(0x3, &(0x7f00000000c0)=0x1, 0x4) request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='/dev/vhost-vsock\x00', 0xfffffffffffffffb) [ 1012.397399][T18351] usb 6-1: device descriptor read/64, error 18 15:53:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a90200000002000000cd0700000a000000250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000002c0)={[{@data_err_abort='data_err=abort'}, {@commit={'commit', 0x3d, 0xff}}, {@journal_path={'journal_path', 0x3d, './file1/file0'}}]}) [ 1012.677569][ T3821] usb 5-1: new full-speed USB device number 83 using dummy_hcd 15:53:09 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002280)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 15:53:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41b5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r1, &(0x7f0000007f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)=""/128, 0x80}, {&(0x7f0000001700)=""/4108, 0x100c}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0907000000000000000001"], 0x14}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x801) [ 1012.817801][T18351] usb 6-1: device descriptor read/64, error 18 [ 1012.889913][ T3821] usb 5-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 1012.900679][ T3821] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1012.937569][T18351] usb usb6-port1: attempt power cycle [ 1013.021464][T20589] EXT4-fs (loop2): error: could not find journal device path: error -2 [ 1013.118714][ T3821] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1013.128236][ T3821] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1013.136716][ T3821] usb 5-1: Product: syz [ 1013.141243][ T3821] usb 5-1: Manufacturer: syz [ 1013.166664][T20589] EXT4-fs (loop2): error: could not find journal device path: error -2 [ 1013.225552][ T3821] usb 5-1: config 0 descriptor?? [ 1013.273835][ T3821] pegasus_notetaker 5-1:0.0: Invalid number of endpoints [ 1013.281347][ T3821] pegasus_notetaker: probe of 5-1:0.0 failed with error -22 [ 1013.478537][ T3821] usb 5-1: USB disconnect, device number 83 [ 1013.667450][T18351] usb 6-1: new full-speed USB device number 95 using dummy_hcd 15:53:10 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/video37\x00', 0x2, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0xd21e0000) 15:53:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xffffc0fe, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:53:10 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x200, &(0x7f0000000400)=0x0) io_submit(r1, 0x41, &(0x7f0000000440)=[&(0x7f0000000000)={0x4, 0x960000, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="10000040040000000000000000000000b22025285db74192e7576d9062ec6e2fe8ffff3ff248691861d03a71091d334252afb1af5b8f0474c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0x40000010}]) 15:53:10 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002280)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x4000, 0x0) [ 1013.827428][T18351] usb 6-1: device descriptor read/8, error -71 [ 1014.037459][T18351] usb 6-1: device descriptor read/8, error -71 [ 1014.269242][ T3821] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 1014.638173][ T3821] usb 5-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 1014.649232][ T3821] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1014.669383][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1014.680023][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1014.687462][ T4874] loop3: p2 < > [ 1014.778575][ T3821] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1014.788647][ T3821] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1014.797334][ T3821] usb 5-1: Product: syz [ 1014.801637][ T3821] usb 5-1: Manufacturer: syz [ 1014.871205][ T3821] usb 5-1: config 0 descriptor?? [ 1014.914065][ T3821] pegasus_notetaker 5-1:0.0: Invalid number of endpoints [ 1014.940158][ T3821] pegasus_notetaker: probe of 5-1:0.0 failed with error -22 15:53:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ftruncate(r0, 0x40) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x82, 0x800) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12016e41c9427210200e01219122ffe7000109021b0001000000000904000001ab904563daf92ba2e1"], 0x0) 15:53:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15}, @sadb_x_nat_t_type={0x1}]}, 0x60}}, 0x0) 15:53:12 executing program 5: r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x1, 0x0, 0x0, {0x25}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1ec, r2, 0x2, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xf801}, {0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0xfffffff7}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6d5f0f41}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3f}, {0x6, 0x16, 0x8000}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x101}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2800000}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x9}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_crypto(0x10, 0x3, 0x15) 15:53:12 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x200, &(0x7f0000000400)=0x0) io_submit(r1, 0x41, &(0x7f0000000440)=[&(0x7f0000000000)={0x4, 0x960000, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="10000040040000000000000000000000b22025285db74192e7576d9062ec6e2fe8ffff3ff248691861d03a71091d334252afb1af5b8f0474c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0x40000010}]) 15:53:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x15, 0x0, 0x0, "6186f42aaa45bf863a304682d2470a23"}, 0x15, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:53:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xffffff8d, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 1015.104232][T10251] usb 5-1: USB disconnect, device number 84 [ 1015.413913][T20645] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1015.454320][T20651] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1015.727259][T10251] usb 6-1: new full-speed USB device number 97 using dummy_hcd 15:53:12 executing program 0: syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc) setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001f0d0100268f1c87f38001040000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a0036459cdb26cd03cc"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) membarrier(0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0xffffffff}, 0x10}, 0x74) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 15:53:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000680)=""/148, 0x94}], 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f0000000140)=0x0) timer_settime(r1, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0}], 0x1, 0x0) 15:53:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x560f, &(0x7f0000000040)) [ 1016.061062][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1016.071620][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1016.079968][ T4874] loop3: p2 < > [ 1016.217701][ T26] usb 5-1: new full-speed USB device number 85 using dummy_hcd 15:53:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xffffff91, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 1016.497499][ T26] usb 5-1: device descriptor read/64, error 18 [ 1016.559605][T20671] device vxlan0 entered promiscuous mode [ 1016.937933][ T26] usb 5-1: device descriptor read/64, error 18 15:53:14 executing program 3: syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa561100000000080046"], 0x0) 15:53:14 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) [ 1017.237319][ T26] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 1017.528669][ T26] usb 5-1: device descriptor read/64, error 18 [ 1017.655956][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1017.666806][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1017.674289][ T4874] loop3: p2 < > [ 1017.814198][T20690] device vxlan0 entered promiscuous mode [ 1017.978778][ T26] usb 5-1: device descriptor read/64, error 18 [ 1018.097875][ T26] usb usb5-port1: attempt power cycle 15:53:15 executing program 4: syz_usb_connect(0x6, 0x37, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x36, 0x3b, 0x40, 0x586, 0x330b, 0x46b8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0xe8, 0x0, 0x0, 0x48, 0xcc, 0xe}}]}}]}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000040)) 15:53:15 executing program 2: [ 1018.634663][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1018.645007][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1018.652532][ T4874] loop3: p2 < > 15:53:15 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5, 0x10000]}, 0x8) ioctl$TIOCNOTTY(r0, 0x5422) 15:53:15 executing program 3: 15:53:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xffffffe0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:53:15 executing program 0: [ 1018.857637][T10251] usb 6-1: unable to get BOS descriptor or descriptor too short 15:53:16 executing program 2: [ 1018.988100][T10251] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1018.996043][T10251] usb 6-1: can't read configurations, error -71 15:53:16 executing program 3: 15:53:16 executing program 0: 15:53:16 executing program 2: [ 1019.496520][ T26] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 1019.517952][T10251] usb 6-1: new full-speed USB device number 98 using dummy_hcd 15:53:16 executing program 3: 15:53:16 executing program 0: [ 1019.859372][ T26] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1019.868975][ T26] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1019.878069][ T26] usb 5-1: Product: syz [ 1019.882379][ T26] usb 5-1: Manufacturer: syz [ 1019.958622][ T26] usb 5-1: config 0 descriptor?? [ 1020.008756][ T26] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input161 [ 1020.019550][T10251] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1020.029208][T10251] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1020.038032][T10251] usb 6-1: Product: syz [ 1020.042336][T10251] usb 6-1: Manufacturer: syz [ 1020.131174][T10251] usb 6-1: config 0 descriptor?? [ 1020.177699][T10251] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input162 [ 1020.203099][ T8711] usb 5-1: USB disconnect, device number 87 [ 1020.383048][T10251] usb 6-1: USB disconnect, device number 98 [ 1020.618292][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1020.629482][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1020.636733][ T4874] loop3: p2 < > 15:53:17 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000014000904000001ab2551000905820010"], 0x0) 15:53:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xfffffff5, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 1021.179865][T10251] usb 6-1: new full-speed USB device number 99 using dummy_hcd [ 1021.346317][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1021.356830][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1021.364429][ T4874] loop3: p2 < > [ 1021.587458][ T26] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 1021.678267][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1021.688696][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1021.695760][ T4874] loop3: p2 < > [ 1021.709901][T10251] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1021.719416][T10251] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1021.728121][T10251] usb 6-1: Product: syz [ 1021.732439][T10251] usb 6-1: Manufacturer: syz [ 1021.744891][T10251] usb 6-1: config 0 descriptor?? [ 1021.796343][T10251] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input163 [ 1022.005507][ T8711] usb 6-1: USB disconnect, device number 99 15:53:19 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d5427210200e01019122ffe7010109021b000100000000090599b567ec9e8b017337058200"], 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x1000000) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000100)={0x990000, 0x2, 0x0, r0, 0x0, &(0x7f00000000c0)={0x9e0904, 0x101, [], @value=0x7}}) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000080)=0x3) 15:53:19 executing program 2: 15:53:19 executing program 3: 15:53:19 executing program 0: [ 1022.171119][ T26] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1022.180451][ T26] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1022.189322][ T26] usb 5-1: Product: syz [ 1022.193650][ T26] usb 5-1: Manufacturer: syz [ 1022.333328][ T26] usb 5-1: config 0 descriptor?? 15:53:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000002, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 1022.410108][ T26] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input164 15:53:19 executing program 3: [ 1022.616021][ T26] usb 5-1: USB disconnect, device number 88 15:53:19 executing program 2: 15:53:19 executing program 0: [ 1023.028231][ T8711] usb 6-1: new full-speed USB device number 100 using dummy_hcd 15:53:20 executing program 2: 15:53:20 executing program 3: [ 1023.281639][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1023.292321][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1023.299798][ T4874] loop3: p2 < > [ 1023.378552][ T26] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 1023.393364][ T8711] usb 6-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config [ 1023.404015][ T8711] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1023.597856][ T8711] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1023.607392][ T8711] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=1 [ 1023.615886][ T8711] usb 6-1: Product: syz [ 1023.620465][ T8711] usb 6-1: Manufacturer: syz [ 1023.625258][ T8711] usb 6-1: SerialNumber: syz [ 1023.734092][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1023.744383][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1023.750715][ T8711] usb 6-1: config 0 descriptor?? [ 1023.751976][ T4874] loop3: p2 < > [ 1023.908947][ T26] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1023.918344][ T26] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1023.926962][ T26] usb 5-1: Product: syz [ 1023.931513][ T26] usb 5-1: Manufacturer: syz [ 1023.995797][ T8711] usb 6-1: USB disconnect, device number 100 [ 1024.005845][ T26] usb 5-1: config 0 descriptor?? [ 1024.060556][ T26] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input165 [ 1024.258329][ T8711] usb 5-1: USB disconnect, device number 89 15:53:21 executing program 4: recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180), 0xc, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f0000000540)=""/236, 0xec}], 0x2, &(0x7f0000000400)=[{0xdc, 0x0, 0x0, ""/206}], 0xdc}, 0x1c, 0x60010000) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x64, 0xbe, "19efd765e8689dac8d84f9afd295b36b0f6b8ad70eb80bec1a398668fc8d2588f9310c21f38e6b64effae37e3de361a1bc1485c3dacb4e4a7720bdea02fcb31e9bdbcdb6d97fd4d8d3a9416cac48f43605155e55c8cd9a40f7bf2c6699e604b6"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000001}, 0x850) 15:53:21 executing program 2: [ 1024.673759][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1024.684107][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1024.691678][ T4874] loop3: p2 < > [ 1024.777501][ T9054] usb 6-1: new full-speed USB device number 101 using dummy_hcd [ 1024.846308][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1024.856554][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1024.864197][ T4874] loop3: p2 < > [ 1025.086180][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1025.097151][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1025.104412][ T4874] loop3: p2 < > [ 1025.159689][ T9054] usb 6-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config [ 1025.170691][ T9054] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1025.337878][ T9054] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1025.347421][ T9054] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=1 [ 1025.355903][ T9054] usb 6-1: Product: syz [ 1025.360907][ T9054] usb 6-1: Manufacturer: syz [ 1025.367723][ T9054] usb 6-1: SerialNumber: syz [ 1025.412496][ T9054] usb 6-1: config 0 descriptor?? [ 1025.476579][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1025.486861][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1025.494655][ T4874] loop3: p2 < > 15:53:22 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x7, 0x0, 0x2, 0xa1}) 15:53:22 executing program 0: 15:53:22 executing program 3: 15:53:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:53:22 executing program 2: 15:53:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000080)={0x7, &(0x7f00000001c0)=[{@none}, {}, {@none}, {@fixed}, {@fixed}, {}, {@fixed}]}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRESDEC=r3, @ANYRESHEX=r3], 0x0) [ 1025.591648][ T26] usb 6-1: USB disconnect, device number 101 15:53:22 executing program 0: 15:53:23 executing program 2: 15:53:23 executing program 3: [ 1025.985160][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1025.995759][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1026.003273][ T4874] loop3: p2 < > [ 1026.103420][T10251] usb 5-1: new full-speed USB device number 90 using dummy_hcd 15:53:23 executing program 0: [ 1026.388288][T10251] usb 5-1: device descriptor read/64, error 18 15:53:23 executing program 3: [ 1026.447662][ T3821] usb 6-1: new full-speed USB device number 102 using dummy_hcd 15:53:23 executing program 2: [ 1026.717514][ T3821] usb 6-1: device descriptor read/64, error 18 [ 1026.802964][T10251] usb 5-1: device descriptor read/64, error 18 [ 1026.928008][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1026.938715][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1026.946034][ T4874] loop3: p2 < > [ 1027.087434][T10251] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 1027.108288][ T3821] usb 6-1: device descriptor read/64, error 18 [ 1027.357566][T10251] usb 5-1: device descriptor read/64, error 18 [ 1027.377684][ T3821] usb 6-1: new full-speed USB device number 103 using dummy_hcd [ 1027.591419][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1027.601782][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1027.609904][ T4874] loop3: p2 < > [ 1027.655507][ T3821] usb 6-1: device descriptor read/64, error 18 [ 1027.767440][T10251] usb 5-1: device descriptor read/64, error 18 [ 1027.804127][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1027.814522][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1027.822193][ T4874] loop3: p2 < > [ 1027.901740][T10251] usb usb5-port1: attempt power cycle [ 1028.047508][ T3821] usb 6-1: device descriptor read/64, error 18 [ 1028.170999][ T3821] usb usb6-port1: attempt power cycle [ 1028.540383][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1028.552358][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1028.560418][ T4874] loop3: p2 < > [ 1028.647992][T10251] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 1028.834279][T10251] usb 5-1: device descriptor read/8, error -71 [ 1028.887337][ T3821] usb 6-1: new full-speed USB device number 104 using dummy_hcd [ 1028.967426][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1028.978072][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1028.986027][ T4874] loop3: p2 < > [ 1029.057855][T10251] usb 5-1: device descriptor read/8, error -71 [ 1029.058419][ T3821] usb 6-1: device descriptor read/8, error -61 15:53:26 executing program 5: r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) 15:53:26 executing program 0: 15:53:26 executing program 2: 15:53:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000005, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:53:26 executing program 3: 15:53:26 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x600001, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000080)={0x0, "8afef4dd9bf5f69351f2ac54499052218ff53a1b8bbfbdeb072442edaf5691bff98e1336fe34026d0683d0ae3c19e16cd7f331c996d588fce3b068f23a589ee7", {0x7fffffff, 0x6}}) [ 1029.277609][ T3821] usb 6-1: device descriptor read/8, error -71 15:53:26 executing program 3: 15:53:26 executing program 2: 15:53:26 executing program 0: [ 1029.882172][T10251] usb 5-1: new full-speed USB device number 93 using dummy_hcd 15:53:27 executing program 3: [ 1030.227887][T10251] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1030.237757][T10251] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1030.247862][T10251] usb 5-1: Product: syz [ 1030.252202][T10251] usb 5-1: Manufacturer: syz [ 1030.287983][ T3821] usb 6-1: new full-speed USB device number 105 using dummy_hcd [ 1030.344168][T10251] usb 5-1: config 0 descriptor?? 15:53:27 executing program 0: [ 1030.400377][T10251] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input166 15:53:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000006, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 1030.595017][ T8711] usb 5-1: USB disconnect, device number 93 [ 1030.680274][ T3821] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1030.689824][ T3821] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1030.698825][ T3821] usb 6-1: Product: syz [ 1030.704165][ T3821] usb 6-1: Manufacturer: syz [ 1030.884591][ T3821] usb 6-1: config 0 descriptor?? [ 1030.964432][ T3821] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input167 [ 1031.219272][ T3821] usb 6-1: USB disconnect, device number 105 [ 1031.389458][ T9054] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 1031.661425][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1031.672404][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1031.680246][ T4874] loop3: p2 < > 15:53:28 executing program 2: 15:53:28 executing program 0: 15:53:28 executing program 3: 15:53:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000008000801030000000000000000000000000900010073797831000000000400048005000300000000000600024000000000"], 0x34}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x1010, r1, 0x0) ftruncate(r0, 0x40) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x5, 0xa, 0x13, 0xc, "14a78c740fa26bd457c75fd870f1c8c72241e540f494508e1c715236d39b06db1d11d57e72fc56caab89007617bbd5ecc4950d02f170ddc967ccb58ef82ef4b0", "04d8e4ca0d54fcadb7a7e3897fb2c0b799ad1b61b53182634c35ea8fb03cf554", [0x1, 0x1dbc3ab0]}) ioctl$RTC_WIE_ON(r0, 0x700f) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000c9427210200e01019122ff0100010902e9317be9c163800b9b57b0fe4cd1d17acf0000000904000001ab2551000905820010"], 0x0) [ 1031.898680][ T9054] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1031.909407][ T9054] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1031.920163][ T9054] usb 5-1: Product: syz [ 1031.924475][ T9054] usb 5-1: Manufacturer: syz 15:53:29 executing program 3: [ 1032.019221][ T9054] usb 5-1: config 0 descriptor?? [ 1032.075844][ T9054] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input168 15:53:29 executing program 4: ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000001c0)={0x1, 0x2, 0x1000, 0xfc, &(0x7f0000000240)="a92dae094b9d35d89510a8cd870aa29782ad4896e21c6034a8a425832ccb1980b266a192662cbf12aaf3c6a3561440a16bad84f918115c461a8028c16bdf5efe5e9a52b800000000000000004ec0342168539e166209c06276911d77e400f3ec1f38592ce4ee12ddefce9ecc50cadd85a3c161250629cda6f95ad6eb2dae36003aaac8576f1aa3db235a57b7daeb11eeb5ed69c35671bca13b344fc7bdadfa1588bc5473f5c9509e4d08d26d9e09501e3598c635a40795ba2c1fb5bf0c069f8e34a676bd366371f2339d48425e889c9bc950a265c426614db48948367aac5701fa973e5d6d6e6822ab7a089a798390f0215ecb909b2a6aaaaa560bb6", 0xe1, 0x0, &(0x7f00000000c0)="ce0fc280f96c9e35cf2c57529062157c0bba28536474199fbf0ed8d47e0d7fbd6e08179dcc8705c0eda55c2dadc299300167c2b9189d0f545a80d3fb51303c81e069c2e388ec42508b9944c139d88348d7c9b318a0cc6f61377b79c66e28a3cb949cd2f3894c41e6666d1a8c7a27e668c33563a3ddc1ee3e6b94edf668635ff2e9bb6d31b4e38855fbd5f0a8b424a87bb136a3a13076a424463625ad4ae1dab0059c368d0fb4607764c870d889cb8413d871778eceb3e52e230ed36037eb124af495a0155b93eea4b43ba5c1c6ceb07984ee46ac4361f35cb849088625e5104c30"}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 15:53:29 executing program 2: 15:53:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000007, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:53:29 executing program 0: 15:53:29 executing program 3: [ 1032.466032][ T9054] usb 5-1: USB disconnect, device number 94 [ 1032.498549][ T9058] usb 6-1: new full-speed USB device number 106 using dummy_hcd 15:53:29 executing program 2: [ 1032.888408][ T9058] usb 6-1: config index 0 descriptor too short (expected 12777, got 27) [ 1032.906307][ T9058] usb 6-1: config 233 has too many interfaces: 123, using maximum allowed: 32 [ 1032.916655][ T9058] usb 6-1: config 233 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.927243][ T9058] usb 6-1: config 233 has 0 interfaces, different from the descriptor's value: 123 [ 1033.127302][T10251] usb 5-1: new full-speed USB device number 95 using dummy_hcd 15:53:30 executing program 0: 15:53:30 executing program 3: [ 1033.229975][ T9058] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1033.239481][ T9058] usb 6-1: New USB device strings: Mfr=255, Product=1, SerialNumber=0 [ 1033.248202][ T9058] usb 6-1: Product: syz [ 1033.252539][ T9058] usb 6-1: Manufacturer: syz [ 1033.562823][ T9058] usb 6-1: USB disconnect, device number 106 15:53:30 executing program 2: [ 1033.639751][T10251] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1033.649119][T10251] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1033.657954][T10251] usb 5-1: Product: syz [ 1033.662279][T10251] usb 5-1: Manufacturer: syz [ 1033.691438][T10251] usb 5-1: config 0 descriptor?? [ 1033.741150][T10251] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input169 15:53:30 executing program 0: [ 1033.935538][ T9058] usb 5-1: USB disconnect, device number 95 15:53:31 executing program 5: ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000080)={0x0, 0x2, 0x3, &(0x7f0000000040)=0x800}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9e0ba427210200e01019122ffe7000109021b0001000000000904000001ab255100090582"], 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 15:53:31 executing program 3: 15:53:31 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) 15:53:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:53:31 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}, {0x10}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 15:53:31 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000000080)=""/35, 0x23) 15:53:31 executing program 3: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="c4000000040601724380375b7cb5d126720013000500010006"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff99) splice(r0, 0x0, r4, 0x0, 0x4000000000010006, 0x0) 15:53:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000040), 0x0) [ 1034.873485][T21083] input: syz1 as /devices/virtual/input/input170 [ 1034.937469][ T8711] usb 6-1: new full-speed USB device number 107 using dummy_hcd [ 1035.134627][T21093] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1035.227850][ T8711] usb 6-1: device descriptor read/64, error 18 [ 1035.267625][ T3821] usb 5-1: new full-speed USB device number 96 using dummy_hcd 15:53:32 executing program 0: 15:53:32 executing program 3: [ 1035.619570][ T8711] usb 6-1: device descriptor read/64, error 18 [ 1035.680189][T21100] input: syz1 as /devices/virtual/input/input171 [ 1035.778531][ T3821] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1035.788715][ T3821] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1035.797467][ T3821] usb 5-1: Product: syz [ 1035.801783][ T3821] usb 5-1: Manufacturer: syz 15:53:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 1035.887609][ T8711] usb 6-1: new full-speed USB device number 108 using dummy_hcd 15:53:33 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002608100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x278, 0x110, 0x0, 0x148, 0x110, 0x148, 0x1e0, 0x240, 0x240, 0x1e0, 0x240, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'tunl0\x00'}, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) tkill(r0, 0xb) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 1035.976824][ T3821] usb 5-1: config 0 descriptor?? [ 1036.030757][ T3821] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input172 [ 1036.157663][ T8711] usb 6-1: device descriptor read/64, error 18 [ 1036.238578][ T3821] usb 5-1: USB disconnect, device number 96 [ 1036.547432][ T8711] usb 6-1: device descriptor read/64, error 18 [ 1036.668219][ T8711] usb usb6-port1: attempt power cycle [ 1036.675446][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1036.685901][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1036.694034][ T4874] loop3: p2 < > [ 1036.997444][ T3821] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 1037.285829][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1037.296492][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1037.304937][ T4874] loop3: p2 < > [ 1037.377469][ T8711] usb 6-1: new full-speed USB device number 109 using dummy_hcd [ 1037.470225][ T8711] usb 6-1: Invalid ep0 maxpacket: 66 [ 1037.488579][ T3821] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1037.498318][ T3821] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1037.506935][ T3821] usb 5-1: Product: syz [ 1037.511690][ T3821] usb 5-1: Manufacturer: syz [ 1037.525651][ T3821] usb 5-1: config 0 descriptor?? [ 1037.578259][ T3821] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input173 15:53:34 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x2, 0x8000}, 0xc) 15:53:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 1037.629288][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1037.640580][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1037.648066][ T4874] loop3: p2 < > [ 1037.667394][ T8711] usb 6-1: new full-speed USB device number 110 using dummy_hcd [ 1037.793260][ T3821] usb 5-1: USB disconnect, device number 97 15:53:35 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd1, 0xd1, 0x2, [@datasec={0x0, 0x4, 0x0, 0xf, 0x1, [{}, {}, {}, {}], "cb"}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @typedef, @enum={0x0, 0x8, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}]}]}}, 0x0, 0xee}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:53:35 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x141242, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r5 = openat(r4, &(0x7f0000000080)='./file0\x00', 0x145042, 0x0) r6 = memfd_create(&(0x7f00000000c0)='\xe58\xb9C;`\xb6p\x98\xcf\x1dT\b$$+\x10\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r6, &(0x7f0000000180)=[{&(0x7f0000000140)="fb", 0x1}], 0x1, 0x18180b, 0x0) sendfile(r5, r6, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x7fffffff) 15:53:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2000000a, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:53:35 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1223, 0x3f07, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x7f, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x3, 0x8, 0x1, {0x22, 0x8e6}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0xfb, 0x6}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x26, 0x6, 0x1, 0x0, 0x80}, 0x1a, &(0x7f00000000c0)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x3f, 0xfff7}, @wireless={0xb, 0x10, 0x1, 0x4, 0xc0, 0x80, 0x6, 0x2}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xd0ff}}]}) syz_usb_control_io(r0, &(0x7f0000000300)={0x18, &(0x7f00000001c0)={0x20, 0x0, 0x2c, {0x2c, 0x21, "1f0b980b45749899de3706219b78add82b5f781fd898d4afc4c601627399187e9ac989fc12ed19ff7eb2"}}, &(0x7f0000000200)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "10434b6af5f1afc0c58a9512202ae6558a6de208c86faaa686e5cbf9"}}, &(0x7f0000000240)={0x0, 0xf, 0x17, {0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xa, 0x5, 0x1000}, @wireless={0xb, 0x10, 0x1, 0x4, 0x6f, 0xff, 0xd8, 0xf8b, 0x1}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x40, 0x3f, "38dcda67", "ba923dc9"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x3, 0x20, 0x9, 0x7, 0x3ff, 0x68c2}}}, &(0x7f0000000800)={0x44, &(0x7f0000000340)={0x40, 0x14, 0xd7, "88e0554f948bb206e1cc83eb9fa519dfa3cb47d0d02ce2c379b9b1dd42fc7d37a736e220958fbe3642fe7a91249f80254c5ef7fa41a6b97493afbcf736f76434989407182c02da3574b2dcd3e695609c5917d040502f4dfd422bc0d44abb71ca1d49a00ffe0e65dde87fb24ca5d5e606666b7fc02590d71cd38a9ea3d0936d7d925b9217eeb4ad218aec3f9e2a7f60e93a1791df3f3c6e613e340c3af37507e290d0ff168441a9dfd25adce2bed01675a003d7751e23fd7d7a0426bbf95821e274fe26a21fadd4cc40cf32ab8dd3c01ad430b06d6d5b96"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x8, 0x1}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000580)={0x40, 0x9, 0x1}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "0f35"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={[], 0x26}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @link_local}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "da70"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x1000}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x1f}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ftruncate(r1, 0x40) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000880)={0xff, 0x80000001, 0x81, 0x401, 0x6, 0xb9}) [ 1038.148175][ T8711] usb 6-1: device not accepting address 110, error -71 [ 1038.181038][ T8711] usb usb6-port1: unable to enumerate USB device 15:53:35 executing program 0: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'macvlan1\x00'}) [ 1038.609079][ T8711] usb 6-1: new full-speed USB device number 111 using dummy_hcd [ 1038.779374][T10251] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 1039.098299][ T8711] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1039.107816][ T8711] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1039.116460][ T8711] usb 6-1: Product: syz [ 1039.121148][ T8711] usb 6-1: Manufacturer: syz 15:53:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000014, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 1039.302042][T10251] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1039.303650][ T8711] usb 6-1: config 0 descriptor?? [ 1039.311372][T10251] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1039.311491][T10251] usb 5-1: Product: syz [ 1039.330036][T10251] usb 5-1: Manufacturer: syz [ 1039.458780][ T8711] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input174 [ 1039.471217][T10251] usb 5-1: config 0 descriptor?? [ 1039.517759][T10251] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input175 15:53:36 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004090000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) [ 1039.713614][T21183] udc-core: couldn't find an available UDC or it's busy [ 1039.721166][T21183] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1039.738194][ T8711] usb 6-1: USB disconnect, device number 111 [ 1039.902770][T10251] usb 5-1: USB disconnect, device number 98 [ 1040.270986][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1040.282100][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1040.289507][ T4874] loop3: p2 < > [ 1040.301553][T21215] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1040.336625][T21220] device bridge_slave_0 left promiscuous mode [ 1040.344062][T21220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.492567][T21220] bridge2: port 1(bridge_slave_0) entered blocking state [ 1040.500052][T21220] bridge2: port 1(bridge_slave_0) entered disabled state [ 1040.512583][T21220] device bridge_slave_0 entered promiscuous mode [ 1040.715045][T21220] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1040.778087][ T8711] usb 6-1: new full-speed USB device number 112 using dummy_hcd [ 1040.858351][T10251] usb 5-1: new full-speed USB device number 99 using dummy_hcd 15:53:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000018, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:53:38 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000001140)=@raw={'raw\x00', 0x201, 0x3, 0x438, 0x0, 0x8f, 0x1a0, 0x308, 0x198, 0x3a0, 0x290, 0x290, 0x3a0, 0x290, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x308, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @fd={0x2, 0x0, r0}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000001340)) clone(0x2000000002608100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000001300)={0x2, 0x7ffffffb, 0x6e5}) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x278, 0x110, 0x0, 0x148, 0x0, 0x148, 0x1e0, 0x240, 0x240, 0x1e0, 0x240, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'tunl0\x00'}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@length={{0x28, 'length\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x10000}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) tkill(r4, 0xb) ptrace$setopts(0x4206, r4, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 15:53:38 executing program 5: r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r1, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, r1, r2) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0009000001ab25510009058200100063231bef2d16"], 0x0) [ 1041.158086][T10251] usb 5-1: device descriptor read/64, error 18 15:53:38 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x1fb842, 0x0) unlink(&(0x7f0000000080)='./bus\x00') [ 1041.218312][ T8711] usb 6-1: device descriptor read/all, error -71 [ 1041.897651][ T8711] usb 6-1: new full-speed USB device number 113 using dummy_hcd [ 1042.259611][ T8711] usb 6-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 1042.270679][ T8711] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 1042.469133][ T8711] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1042.479781][ T8711] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1042.488540][ T8711] usb 6-1: Product: syz [ 1042.494606][ T8711] usb 6-1: Manufacturer: syz [ 1042.579237][ T8711] usb 6-1: config 0 descriptor?? 15:53:39 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x1fb842, 0x0) unlink(&(0x7f0000000080)='./bus\x00') 15:53:39 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd28, 0x5dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffffe}}, 0x14000) 15:53:39 executing program 2: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x50, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x0) 15:53:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0x2, 0x2, 0x6}, 0x1c) 15:53:39 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x2c, 0x2, {{}, [@TCA_NETEM_CORR={0x10}]}}}]}, 0x5c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 1042.826491][ T8711] usb 6-1: USB disconnect, device number 113 15:53:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0x3, 0x2, 0x6}, 0x1c) 15:53:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x2, [@datasec={0x0, 0x4, 0x0, 0xf, 0x1, [{}, {}, {}, {}], "cb"}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @typedef, @enum={0x0, 0x8, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}]}, @typedef]}}, 0x0, 0xfa}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1043.158161][T10251] usb 5-1: new full-speed USB device number 100 using dummy_hcd 15:53:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0x4, 0x2, 0x6}, 0x1c) 15:53:40 executing program 5: r0 = dup(0xffffffffffffffff) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000001080)={@ax25={{0x3, @null, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, {&(0x7f0000000040)=""/4096, 0x1000}, &(0x7f0000001040), 0x54}, 0xa0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) 15:53:40 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x2583, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0), 0x10) [ 1043.700948][T10251] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1043.716313][T10251] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1043.728180][T10251] usb 5-1: Product: syz [ 1043.732728][T10251] usb 5-1: Manufacturer: syz [ 1043.761149][T10251] usb 5-1: config 0 descriptor?? [ 1043.826753][T10251] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input176 15:53:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001800030b00000000000000000a00000000000007"], 0x28}}, 0x0) [ 1044.024436][T10251] usb 5-1: USB disconnect, device number 100 [ 1044.155605][T21314] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1044.167444][T21314] IPv6: NLM_F_REPLACE set, but no existing node found! 15:53:41 executing program 3: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) 15:53:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001800030b00000000000000000a00000000000007"], 0x28}}, 0x0) [ 1044.318103][ T9053] usb 6-1: new full-speed USB device number 114 using dummy_hcd [ 1044.541203][T21319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1044.550917][T21319] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1044.809572][ T9053] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1044.818977][ T9053] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1044.830529][ T9053] usb 6-1: Product: syz [ 1044.836217][ T9053] usb 6-1: Manufacturer: syz [ 1044.837177][T10251] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 1044.896613][ T9053] usb 6-1: config 0 descriptor?? [ 1044.947800][ T9053] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input177 [ 1045.165311][T18633] usb 6-1: USB disconnect, device number 114 [ 1045.419413][T10251] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1045.430484][T10251] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1045.439296][T10251] usb 5-1: Product: syz [ 1045.443782][T10251] usb 5-1: Manufacturer: syz [ 1045.605409][T10251] usb 5-1: config 0 descriptor?? [ 1045.658573][T10251] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input178 15:53:42 executing program 4: r0 = openat$audio(0xffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8000, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x2) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x12c4, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) 15:53:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0x5, 0x2, 0x6}, 0x1c) 15:53:42 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x141242, 0x0) fallocate(r1, 0x0, 0x0, 0x60000) r2 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000240)="aa", 0x1}], 0x1, 0x40000, 0x0) sendfile(r1, r2, 0x0, 0x2000005) 15:53:42 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x1c1242, 0x0) r2 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)='V', 0x1}], 0x1, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x2000005) [ 1045.831424][T10251] usb 5-1: USB disconnect, device number 101 [ 1045.997804][ T9053] usb 6-1: new full-speed USB device number 115 using dummy_hcd 15:53:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0x6, 0x2, 0x6}, 0x1c) [ 1046.489108][ T9053] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1046.498551][ T9053] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1046.507319][ T9053] usb 6-1: Product: syz [ 1046.507434][ T9053] usb 6-1: Manufacturer: syz [ 1046.576107][ T9053] usb 6-1: config 0 descriptor?? 15:53:43 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000080)}) 15:53:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000f5ff0000609eef7b000800000000000000ffea84dd154ab65c1f2d618d31644ff3020000000000000008000000000000000090"], 0x3a) [ 1046.677308][ T9053] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input179 [ 1046.677637][T10251] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1046.906601][ T9053] usb 6-1: USB disconnect, device number 115 15:53:44 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc9, 0xc9, 0x2, [@datasec={0x0, 0x4, 0x0, 0xf, 0x1, [{}, {}, {}, {}], "cb"}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @typedef, @enum={0x0, 0x7, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}]}]}}, 0x0, 0xe6}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:53:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x0) 15:53:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0x7, 0x2, 0x6}, 0x1c) [ 1047.198944][T10251] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1047.208352][T10251] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1047.217598][T10251] usb 5-1: Product: syz [ 1047.222449][T10251] usb 5-1: Manufacturer: syz [ 1047.364825][T10251] usb 5-1: config 0 descriptor?? [ 1047.433690][T10251] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input180 15:53:44 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) [ 1047.699762][T10251] usb 5-1: USB disconnect, device number 102 15:53:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0x8, 0x2, 0x6}, 0x1c) [ 1048.277538][T18633] usb 6-1: new full-speed USB device number 116 using dummy_hcd [ 1048.437292][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1048.449092][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1048.456371][ T4874] loop3: p2 < > [ 1048.547304][T18633] usb 6-1: device descriptor read/64, error 18 [ 1048.587841][T10251] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 1048.947773][T18633] usb 6-1: device descriptor read/64, error 18 [ 1049.068096][T10251] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1049.081245][T10251] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1049.091567][T10251] usb 5-1: Product: syz [ 1049.096044][T10251] usb 5-1: Manufacturer: syz [ 1049.109984][T10251] usb 5-1: config 0 descriptor?? [ 1049.162428][T10251] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input181 [ 1049.219274][T18633] usb 6-1: new full-speed USB device number 117 using dummy_hcd [ 1049.270413][T10251] usb 5-1: USB disconnect, device number 103 15:53:46 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) r0 = openat$mice(0xffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x404000) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000080)) 15:53:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x7fffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 15:53:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0x9, 0x2, 0x6}, 0x1c) 15:53:46 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x141242, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r5 = openat(r4, &(0x7f0000000080)='./file0\x00', 0x145042, 0x0) r6 = memfd_create(&(0x7f00000000c0)='\xe58\xb9C;`\xb6p\x98\xcf\x1dT\b$$+\x10\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) pwritev(r6, &(0x7f0000000180)=[{&(0x7f0000000140)="fb", 0x1}], 0x1, 0x18180b, 0x0) sendfile(r5, r6, 0x0, 0x200000f) ftruncate(r5, 0x100) sendfile(r3, r3, 0x0, 0x7fffffff) [ 1049.507525][T18633] usb 6-1: device descriptor read/64, error 18 15:53:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0x12, 0x2, 0x6}, 0x1c) 15:53:46 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x141242, 0x0) r2 = memfd_create(&(0x7f0000000580)='k\x83+@\x00p#\x04\x94&k>\x1cud\xfd\x9c', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000500)={0x28}, 0x28) pwritev(r2, &(0x7f00000003c0)=[{&(0x7f0000000080)='r', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x74, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) [ 1049.933415][T18633] usb 6-1: device descriptor read/64, error 18 [ 1050.058808][T18633] usb usb6-port1: attempt power cycle [ 1050.230950][T10251] usb 5-1: new full-speed USB device number 104 using dummy_hcd 15:53:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioprio_get$uid(0x3, 0x0) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000140)='./file0\x00', 0x0, r1) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200008d5, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) accept4(r0, 0x0, 0x0, 0x80800) socket$inet6(0xa, 0x80002, 0x0) r3 = socket(0x11, 0x3, 0x0) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875b2e32a60b244e340b7679500800058110308d9123127ecce6616f3f6db1c00010000000000210050740000000000000006ad8e5ecc326d3a09ffc200000000000000000000e000"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8914, &(0x7f0000000000)={'lo\x00'}) 15:53:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x3, 0x6}, 0x1c) 15:53:47 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="04010000c9427210200e01019122ffe72ace09021b00c5d501000000000904000001ab2551000905820010050dcfedfb8109735e1704ba68816039f3829caee5b8a18bc683e783024698656d7cb57ad1f8b48f6639b4d60a1a8f077025785e6e8fed0653bdb9bb6cac4f664dd7af1dfd1f0dbd175c19ac128ae7fa31d6509d45761a9d08d740722b2cd5db0decaf1c562894980390860faf80"], 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000000)) 15:53:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0xb, &(0x7f0000000740)=0x5536, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 1050.768341][T10251] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1050.777814][T10251] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1050.786873][T10251] usb 5-1: Product: syz [ 1050.791426][T10251] usb 5-1: Manufacturer: syz [ 1050.956645][T10251] usb 5-1: config 0 descriptor?? [ 1051.022975][T10251] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input182 [ 1051.220264][T12789] usb 5-1: USB disconnect, device number 104 [ 1051.820901][T18633] usb 6-1: new full-speed USB device number 119 using dummy_hcd [ 1052.038127][T12789] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 1052.139649][T18633] usb 6-1: too many configurations: 206, using maximum allowed: 8 [ 1052.229943][T18633] usb 6-1: config 213 has too many interfaces: 197, using maximum allowed: 32 [ 1052.240116][T18633] usb 6-1: config 213 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.252867][T18633] usb 6-1: config 213 has 0 interfaces, different from the descriptor's value: 197 15:53:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4, 0x6}, 0x1c) [ 1052.459858][T18633] usb 6-1: config 213 has too many interfaces: 197, using maximum allowed: 32 [ 1052.469040][T18633] usb 6-1: config 213 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.479666][T18633] usb 6-1: config 213 has 0 interfaces, different from the descriptor's value: 197 [ 1052.587833][T12789] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1052.597933][T12789] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1052.606464][T12789] usb 5-1: Product: syz [ 1052.611025][T12789] usb 5-1: Manufacturer: syz [ 1052.640175][T18633] usb 6-1: config 213 has too many interfaces: 197, using maximum allowed: 32 [ 1052.649595][T18633] usb 6-1: config 213 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.660346][T18633] usb 6-1: config 213 has 0 interfaces, different from the descriptor's value: 197 [ 1052.775024][T12789] usb 5-1: config 0 descriptor?? 15:53:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) syz_fuse_handle_req(r1, &(0x7f00000001c0)="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", 0x2000, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg(r0, &(0x7f0000004600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="24000000150007031dfffd946fa2830002200a0009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1052.930005][T18633] usb 6-1: config 213 has too many interfaces: 197, using maximum allowed: 32 [ 1052.941734][T18633] usb 6-1: config 213 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.952320][T18633] usb 6-1: config 213 has 0 interfaces, different from the descriptor's value: 197 15:53:50 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES16=0x0], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000004, 0x12, r0, 0x8136000) ftruncate(r0, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ftruncate(r1, 0x40) timerfd_settime(r1, 0x0, &(0x7f0000000240), &(0x7f0000000280)) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x400c4152, &(0x7f00000001c0)={0x0, &(0x7f0000000180)=[&(0x7f0000000000)="c87f94ff5d4501257eea2929c3859b28095da90c5bfb411295e5800f6558cef90aca8e869d690acaf05aa12713c6f46211a9c03e4247e086ad6e777fb69d8b05006c520039d07b284d8b5426664108a3fc9a1ea980678e9c9a0abb42bde87da86d9fe13c3624f962a906cef15f52cf91cb4e86426d73b6e5367fc3369bc561bf25b1838cd28984d05ca3835e5ae93235350a18ecec49727f06071a50c45c3822a31b946b755e046a50cb6fbd6e87ad787339cb256d4999ddf94ddf91428a24be53f3132e4e9422867925bc0960695b7edf629ae6e7fb30840758f263943abaf738", &(0x7f0000000100)="21388dbfbcb1707e1eff0257773924e40d4adb6084d52d2201f5b73c7c82e5a059bf175f8f2ea7b0a5f833248da8df78a384f8c29a0f1f4ba4e3cb4f2415144b6fe80d57a839861242d83d078bcd19db03d58c66de1d0459f5cb419008a45d4d1aac1f9e826c5bb014048cc0c3"], 0x3}) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x11, 0xffffffffffffffff, 0x156800) r2 = socket(0x3, 0xa, 0x9b) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f00000004c0)={{r0}, r3, 0x16, @unused=[0x3, 0x5, 0x0, 0xffffffff], @subvolid=0x9}) [ 1053.038007][T12789] usb 5-1: can't set config #0, error -71 [ 1053.054385][T12789] usb 5-1: USB disconnect, device number 105 [ 1053.199561][T18633] usb 6-1: config 213 has too many interfaces: 197, using maximum allowed: 32 [ 1053.208983][T18633] usb 6-1: config 213 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.219958][T18633] usb 6-1: config 213 has 0 interfaces, different from the descriptor's value: 197 15:53:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x7) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) [ 1053.439268][T18633] usb 6-1: config 213 has too many interfaces: 197, using maximum allowed: 32 [ 1053.448574][T18633] usb 6-1: config 213 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.459406][T18633] usb 6-1: config 213 has 0 interfaces, different from the descriptor's value: 197 15:53:50 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/mcfilter6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) sendfile(r2, r0, 0x0, 0x808) [ 1053.670151][T18633] usb 6-1: config 213 has too many interfaces: 197, using maximum allowed: 32 [ 1053.679525][T18633] usb 6-1: config 213 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.690247][T18633] usb 6-1: config 213 has 0 interfaces, different from the descriptor's value: 197 [ 1053.862888][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1053.875813][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1053.883339][ T4874] loop3: p2 < > [ 1053.894061][T10251] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1053.909639][T18633] usb 6-1: config 213 has too many interfaces: 197, using maximum allowed: 32 [ 1053.919142][T18633] usb 6-1: config 213 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.930626][T18633] usb 6-1: config 213 has 0 interfaces, different from the descriptor's value: 197 [ 1054.119787][T18633] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1054.129224][T18633] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=42 [ 1054.138093][T18633] usb 6-1: Product: syz [ 1054.142430][T18633] usb 6-1: Manufacturer: syz [ 1054.147310][T18633] usb 6-1: SerialNumber: syz [ 1054.188527][T10251] usb 5-1: device descriptor read/64, error 18 15:53:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x5, 0x6}, 0x1c) 15:53:51 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000180)=0x1, 0x4) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:53:51 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000004000001ab2551000905820010"], 0x0) [ 1054.557845][T18633] usb 6-1: can't set config #213, error -71 [ 1054.585760][T18633] usb 6-1: USB disconnect, device number 119 [ 1054.597755][T10251] usb 5-1: device descriptor read/64, error 18 15:53:51 executing program 2: unshare(0x22060400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r3, 0x10, &(0x7f00000004c0)={&(0x7f0000000440)=""/75, 0x4b}}, 0x10) 15:53:51 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@empty, @rand_addr=' \x01\x00', @ipv4={[0xfc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7e, 0x0, 0x2], [], @remote={0xac, 0x4, 0xb}}}) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) mlockall(0x1) mremap(&(0x7f0000a94000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000424000/0x1000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1) [ 1054.877444][T10251] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1055.217301][T10251] usb 5-1: device descriptor read/64, error 18 [ 1055.238200][T12789] usb 6-1: new full-speed USB device number 120 using dummy_hcd 15:53:52 executing program 2: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)={0x9, 0x20000000001, '['}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') lseek(r0, 0x80, 0x0) getdents64(r0, &(0x7f0000000100)=""/236, 0x20000103) [ 1055.627434][T10251] usb 5-1: device descriptor read/64, error 18 [ 1055.639234][T12789] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.649603][T12789] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1055.748601][T10251] usb usb5-port1: attempt power cycle [ 1055.837639][T12789] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1055.847331][T12789] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1055.855846][T12789] usb 6-1: Product: syz [ 1055.860298][T12789] usb 6-1: Manufacturer: syz [ 1055.927444][T12789] usb 6-1: config 0 descriptor?? 15:53:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x6, 0x6}, 0x1c) [ 1056.177839][ T9053] usb 6-1: USB disconnect, device number 120 [ 1056.285216][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1056.296371][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1056.303767][ T4874] loop3: p2 < > 15:53:53 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000000280)='logon\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='syz', 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) keyctl$update(0x2, 0x0, 0x0, 0x0) 15:53:53 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x117}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 1056.477552][T10251] usb 5-1: new high-speed USB device number 108 using dummy_hcd 15:53:53 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100019122ffef000109021b00010000000009000905820008000000000000009813f78e015bfafd4f9bf98ef2f9d46f1c6b0f642b5014b89e3e361c242999dbd212d6b5"], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') [ 1056.777642][T10251] usb 5-1: device descriptor read/8, error -71 [ 1056.957866][ T9053] usb 6-1: new full-speed USB device number 121 using dummy_hcd [ 1056.997808][T10251] usb 5-1: device descriptor read/8, error -71 15:53:54 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x3, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 1057.159859][T21607] ptrace attach of "/root/syz-executor.0"[21605] was attempted by "/root/syz-executor.0"[21607] [ 1057.360212][ T9053] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.370652][ T9053] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 15:53:54 executing program 2: [ 1057.622908][ T9053] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1057.632461][ T9053] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1057.641222][ T9053] usb 6-1: Product: syz [ 1057.645585][ T9053] usb 6-1: Manufacturer: syz [ 1057.834087][ T9053] usb 6-1: config 0 descriptor?? [ 1058.031074][T10251] usb 5-1: new full-speed USB device number 109 using dummy_hcd 15:53:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x7, 0x6}, 0x1c) [ 1058.163172][T10251] usb 5-1: Invalid ep0 maxpacket: 239 [ 1058.174819][T10251] usb usb5-port1: unable to enumerate USB device [ 1058.297982][ T9053] usb 6-1: can't set config #0, error -71 [ 1058.329458][ T9053] usb 6-1: USB disconnect, device number 121 15:53:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5, 0x100010, r0, 0x200000) ftruncate(r0, 0x40) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000040)={0xfffffffffffffc01, 0x4, 0x9, 0x5}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000005000801030000000000000000000000000900010073797a3100000000244002000006080001400000009a05000300000000000000024000"/70], 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRES64=r0, @ANYRESDEC=r1, @ANYRES32=r2, @ANYRESOCT=r1, @ANYRESHEX, @ANYBLOB="eda8f7eedc097bed380bf69c330c698212942d06b09de28ae68b4d73172f5a925e57e0e612227c68c1f35bf55e47ce21035b4c100868cbdf9d1e24ad071f26757f8e37041b066647f6d50bb62f847b829cca16d2146389d92b5ab3b4dcabc7e44772bf10841a257cf7f522e3c615741903044b5d03febac20ba8622815cce197edb028a84fc93f484befcd9b6b4a39359186fed4616f9d8b71961945acd9855cebd6e370e37c70cb037c0b57ad940cccbf3285ab0472de9b40314457cc01418599230c69e006707e393873458b6f8d0f8d674674"], 0x0) 15:53:55 executing program 2: 15:53:56 executing program 0: [ 1059.288572][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1059.299125][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1059.306644][ T4874] loop3: p2 < > [ 1059.391013][ T9053] usb 6-1: new full-speed USB device number 122 using dummy_hcd [ 1059.667239][ T9053] usb 6-1: device descriptor read/64, error 18 [ 1060.057735][ T9053] usb 6-1: device descriptor read/64, error 18 [ 1060.337400][ T9053] usb 6-1: new full-speed USB device number 123 using dummy_hcd [ 1060.620914][ T9053] usb 6-1: device descriptor read/64, error 18 [ 1061.021012][ T9053] usb 6-1: device descriptor read/64, error 18 [ 1061.148799][ T9053] usb usb6-port1: attempt power cycle [ 1061.887503][ T9053] usb 6-1: new full-speed USB device number 124 using dummy_hcd [ 1062.015905][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1062.026606][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1062.034192][ T4874] loop3: p2 < > [ 1062.061045][ T9053] usb 6-1: device descriptor read/8, error -71 [ 1062.280264][ T9053] usb 6-1: device descriptor read/8, error -71 15:54:02 executing program 3: 15:54:02 executing program 0: 15:54:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x8, 0x6}, 0x1c) 15:54:02 executing program 2: 15:54:02 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x0) 15:54:02 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010", @ANYRES64, @ANYRES64], 0x0) [ 1065.650602][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1065.661220][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1065.668799][ T4874] loop3: p2 < > 15:54:02 executing program 2: 15:54:02 executing program 0: 15:54:02 executing program 3: [ 1065.918008][ T3821] usb 6-1: new full-speed USB device number 126 using dummy_hcd [ 1065.977938][ T9053] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 1066.250228][ T9053] usb 5-1: device descriptor read/64, error 18 [ 1066.287954][ T3821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1808, setting to 64 15:54:03 executing program 2: 15:54:03 executing program 0: 15:54:03 executing program 3: [ 1066.420177][ T3821] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1066.429819][ T3821] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1066.438615][ T3821] usb 6-1: Product: syz [ 1066.443055][ T3821] usb 6-1: Manufacturer: syz [ 1066.640319][ T3821] usb 6-1: config 0 descriptor?? [ 1066.683173][ T9053] usb 5-1: device descriptor read/64, error 18 [ 1066.711542][ T3821] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input183 15:54:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x9, 0x6}, 0x1c) [ 1066.905084][ T3821] usb 6-1: USB disconnect, device number 126 [ 1066.962506][ T9053] usb 5-1: new full-speed USB device number 111 using dummy_hcd 15:54:04 executing program 0: [ 1067.237651][ T9053] usb 5-1: device descriptor read/64, error 18 15:54:04 executing program 2: 15:54:04 executing program 3: [ 1067.629544][ T9053] usb 5-1: device descriptor read/64, error 18 [ 1067.727672][ T26] usb 6-1: new full-speed USB device number 127 using dummy_hcd [ 1067.748310][ T9053] usb usb5-port1: attempt power cycle [ 1068.099747][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1808, setting to 64 [ 1068.258887][ T26] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1068.268675][ T26] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1068.277431][ T26] usb 6-1: Product: syz [ 1068.281761][ T26] usb 6-1: Manufacturer: syz [ 1068.331496][ T26] usb 6-1: config 0 descriptor?? [ 1068.396186][ T26] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input184 [ 1068.415709][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1068.426213][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1068.433778][ T4874] loop3: p2 < > [ 1068.467717][ T9053] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 1068.541842][ T26] usb 6-1: USB disconnect, device number 127 15:54:05 executing program 4: syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0) 15:54:05 executing program 0: 15:54:05 executing program 2: 15:54:05 executing program 3: 15:54:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0xa, 0x6}, 0x1c) 15:54:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRESDEC], 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000040)=""/54, 0x36) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000140)={0x1, 0x7, 0x0, 'queue0\x00', 0x9}) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') openat$null(0xffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x189142, 0x0) [ 1068.758564][ T9053] usb 5-1: device descriptor read/8, error -71 [ 1068.967691][ T9053] usb 5-1: device descriptor read/8, error -71 15:54:06 executing program 2: 15:54:06 executing program 0: 15:54:06 executing program 3: [ 1069.378237][ T26] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1069.460136][ T9053] usb 5-1: new low-speed USB device number 113 using dummy_hcd [ 1069.518152][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1069.528410][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1069.535716][ T4874] loop3: p2 < > [ 1069.647270][ T26] usb 6-1: device descriptor read/64, error 18 [ 1069.668707][ T9053] usb 5-1: device descriptor read/8, error -61 15:54:06 executing program 3: 15:54:06 executing program 0: 15:54:06 executing program 2: [ 1069.938193][ T9053] usb 5-1: device descriptor read/8, error -61 [ 1070.037977][ T26] usb 6-1: device descriptor read/64, error 18 [ 1070.058327][ T9053] usb usb5-port1: unable to enumerate USB device [ 1070.307383][ T26] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1070.597311][ T26] usb 6-1: device descriptor read/64, error 18 [ 1070.742922][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1070.753530][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1070.761279][ T4874] loop3: p2 < > [ 1070.997455][ T26] usb 6-1: device descriptor read/64, error 18 [ 1071.126878][ T26] usb usb6-port1: attempt power cycle [ 1071.307441][T18351] Bluetooth: hci0: command 0x0406 tx timeout [ 1071.871202][ T26] usb 6-1: new high-speed USB device number 4 using dummy_hcd 15:54:09 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9467200200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) 15:54:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0xc, 0x6}, 0x1c) 15:54:09 executing program 3: 15:54:09 executing program 2: 15:54:09 executing program 0: 15:54:09 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)={0x7f}) [ 1072.247849][ T26] usb 6-1: device descriptor read/8, error -71 [ 1072.458177][ T26] usb 6-1: device descriptor read/8, error -71 15:54:09 executing program 2: 15:54:09 executing program 3: 15:54:09 executing program 0: [ 1073.319272][ T3821] usb 5-1: new full-speed USB device number 114 using dummy_hcd 15:54:10 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x0) 15:54:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setuid(r2) ioctl$PIO_FONTX(r0, 0x4b66, &(0x7f0000000040)={0x0, 0x0, 0x0}) [ 1073.487845][ T26] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1073.598466][ T3821] usb 5-1: device descriptor read/64, error 18 15:54:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0xe, 0x6}, 0x1c) [ 1073.838104][ T26] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1073.847658][ T26] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1073.856143][ T26] usb 6-1: Product: syz [ 1073.860833][ T26] usb 6-1: Manufacturer: syz [ 1073.987516][ T3821] usb 5-1: device descriptor read/64, error 18 [ 1073.996343][ T26] usb 6-1: config 0 descriptor?? [ 1074.051011][ T26] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input185 [ 1074.245434][ T26] usb 6-1: USB disconnect, device number 5 [ 1074.267713][ T3821] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 1074.537514][ T3821] usb 5-1: device descriptor read/64, error 18 [ 1074.558512][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1074.569492][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1074.576523][ T4874] loop3: p2 < > [ 1074.895371][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1074.906380][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1074.913878][ T4874] loop3: p2 < > [ 1074.927513][ T3821] usb 5-1: device descriptor read/64, error 18 [ 1075.047686][ T3821] usb usb5-port1: attempt power cycle [ 1075.067443][ T26] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1075.639480][ T26] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1075.648820][ T26] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1075.657531][ T26] usb 6-1: Product: syz [ 1075.661859][ T26] usb 6-1: Manufacturer: syz [ 1075.757892][ T3821] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 1075.815833][ T26] usb 6-1: config 0 descriptor?? [ 1075.868128][ T3821] usb 5-1: Invalid ep0 maxpacket: 0 [ 1075.928711][ T26] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input186 [ 1076.031351][ T3821] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 1076.135388][ T26] usb 6-1: USB disconnect, device number 6 15:54:13 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x218, r0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x120, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bb34a55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fd75bf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4edba307}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37869c19}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68e754e6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65fdb439}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75e475f9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26aecbb8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f9ed788}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b3d42f2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x592f8f96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d02f1e2}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a668c89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39f1d213}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15b50ed1}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fe65c1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29876408}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2be802ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xacc5af5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62c34c97}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x48, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b595a0b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc523}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f204104}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x93fa3f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x337e92dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6029cce1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x99d7e7d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc614}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x218}}, 0x20) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) 15:54:13 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x20000000, 0x0) 15:54:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000540)=0x7, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000100)=0x5, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 15:54:13 executing program 2: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0x62020000, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0xb003, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "ddc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) 15:54:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x14, 0x6}, 0x1c) 15:54:13 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x18000}, 0x20040014) [ 1076.261996][ T3821] usb 5-1: device descriptor read/8, error -71 [ 1076.477488][ T3821] usb 5-1: device descriptor read/8, error -71 15:54:13 executing program 2: r0 = fanotify_init(0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x9, 0x48000020, r1, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/25, 0x19}], 0x1) [ 1076.598220][ T3821] usb usb5-port1: unable to enumerate USB device 15:54:14 executing program 0: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgid() creat(0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @restrict={0x0, 0x0, 0x0, 0xa}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000004600)=""/210, 0x4a, 0xd2, 0x8}, 0x20) [ 1077.178901][ T3821] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1077.278048][ T9053] usb 5-1: new full-speed USB device number 118 using dummy_hcd 15:54:14 executing program 0: setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x20004070) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000140)=""/149, 0x3a, 0x95, 0x8}, 0x20) getgid() setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @restrict={0x0, 0x0, 0x0, 0xa}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000004600)=""/210, 0x4a, 0xd2, 0x8}, 0x20) [ 1077.375295][T21857] BPF: (anon) type_id=2 bitfield_size=0 bits_offset=0 [ 1077.382344][T21857] BPF: [ 1077.385164][T21857] BPF:Invalid member [ 1077.392715][T21857] BPF: [ 1077.392715][T21857] 15:54:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x240, 0x6}, 0x1c) [ 1077.661145][ T3821] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1077.670724][ T3821] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1077.679878][ T3821] usb 6-1: Product: syz [ 1077.684246][ T3821] usb 6-1: Manufacturer: syz [ 1077.799444][ T9053] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1077.808958][ T9053] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1077.817672][ T9053] usb 5-1: Product: syz [ 1077.822106][ T9053] usb 5-1: Manufacturer: syz [ 1077.888325][ T3821] usb 6-1: config 0 descriptor?? [ 1077.936850][ T3821] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input187 [ 1078.025621][ T9053] usb 5-1: config 0 descriptor?? 15:54:15 executing program 0: clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @restrict={0x0, 0x0, 0x0, 0xa}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000004600)=""/210, 0x4a, 0xd2, 0x8}, 0x20) [ 1078.171534][ T9053] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input188 [ 1078.257710][ T3821] usb 6-1: USB disconnect, device number 7 15:54:15 executing program 2: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x9}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0x14}]}}]}, 0x4c}}, 0x0) sendto$inet(r0, &(0x7f0000000100)='6', 0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 1078.412858][ T9053] usb 5-1: USB disconnect, device number 118 [ 1078.811186][T21903] BPF: (anon) type_id=2 bitfield_size=0 bits_offset=0 [ 1078.818321][T21903] BPF: [ 1078.821240][T21903] BPF:Invalid member [ 1078.825255][T21903] BPF: [ 1078.825255][T21903] [ 1078.892363][T21905] BPF: (anon) type_id=2 bitfield_size=0 bits_offset=0 [ 1078.899659][T21905] BPF: [ 1078.902486][T21905] BPF:Invalid member [ 1078.906434][T21905] BPF: [ 1078.906434][T21905] [ 1078.947726][ T3821] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1079.078491][T18351] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 1079.173739][T21911] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1079.429196][ T3821] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1079.438775][ T3821] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1079.447537][ T3821] usb 6-1: Product: syz [ 1079.451858][ T3821] usb 6-1: Manufacturer: syz [ 1079.525288][ T3821] usb 6-1: config 0 descriptor?? [ 1079.577207][ T3821] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input189 [ 1079.618403][T18351] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1079.627775][T18351] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1079.636265][T18351] usb 5-1: Product: syz [ 1079.641105][T18351] usb 5-1: Manufacturer: syz [ 1079.714569][T18351] usb 5-1: config 0 descriptor?? [ 1079.783578][T18351] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input190 15:54:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x2}, 0x1c) 15:54:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xab, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x81) sendto$inet(r0, &(0x7f0000000040)="a9a4d999a499b27bbbbe4851df2fd8b248b1e87a3fc6ea329b787d8b", 0x1c, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x0, 0x9]}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) 15:54:17 executing program 3: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x9}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0x14}]}}]}, 0x4c}}, 0x0) 15:54:17 executing program 2: r0 = socket(0xa, 0x2400080001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c74657200000000000061da9af000000000000000150d000000000000000e000000040000009002000000000000c800000060010000c8000000c8000000e8010000f8010000f8010000f8010000f801000504000000118000000000ffff00000000000075e500f4ffffff00000000000000000000000000000000003e7ef2a0a2080000ff000000000000000000000020000027000000849db535fd3542290000000000000000000000ffff00000000000000440000a000c800f8ff7f00000000fdff000000000000000000000030006164647274797065000007000000d2590000000000000000000000000000000040c601000f6c0000000000000000280052454a4543540000800000000000020000000000000000000000000000000000000068a30000e09ebca7f181683a9c000400040000006772653000000007000000ddffffffa96500fffffffffffffff70093ae4afb000000000000000000000100000f000b0b00000006000000ef0002b8942a9082d4cf0000001d00001370009800ef00000000000000000067080000000000000000280052454a45435400001bead0de0000000000000000000000000000003f000000000b00000000000000000000000000000002000000000000000000000000800000000000008d42280e000000000000000a02000000000000000000000000000000000002000000008100000000000000000000000000000000000000b9bf007000980000000000000000000000000002000000800000002800534554000000000000000000000000030000020000000000000000000001000004000000050f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00007000980000020000000000000000000000000000000100002800000002000000000000000000000097a3eb8d13ab7daa1c00000000000000feffffff"], 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@broadcast, @random="04f4002000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @broadcast}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @multicast2}}}}}}, 0x0) [ 1080.000973][T18351] usb 5-1: USB disconnect, device number 119 [ 1080.012135][ T3821] usb 6-1: USB disconnect, device number 8 15:54:17 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4, 0x500) fsetxattr$security_evm(r0, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@ng={0x4, 0x3, "c84023c801a6434a26579dd542e2"}, 0x10, 0x3) 15:54:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x10}]}]}]}, 0x38}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004300)=[{{&(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="06ec75c8e9f7", 0x6}], 0x1, &(0x7f00000001c0)=[@ip_tos_int={{0x10, 0x0, 0x1, 0xfffffffc}}], 0x10}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="d9bae64cfc0f1fa6846590b03065c647bc501a6a39372e985e2560344d9c75ad71", 0x21}, {&(0x7f0000000240)="9ca5158e152c4833bb99a3708b319f344fcd7fbe91c82efc229fafbe044d8d92a19da1a344063110c2edd60543a785ad8009f4dda475e62271d1d409422e1086ae888b32468b894af4b0903c4c25ed5e619549e6f2155031e736236843fbb4ebed2698bc97af2e0e47eb46111bd7d8f6d6e925586771df6c015a60e8694dd2f06aa45b375f7888472f189eff288a200f69a06ead559c0f49b921c226266ad69c2630147adb6b177064dcf811dce4e8dff616", 0xb2}, {&(0x7f0000000300)="d5ddd55a942d236bd7d765e2013821a8105d4dd4cad9019b59293d3b2bd61ef6b228d0ee3045d455d179222fe21904fa9ff1174b45e02a13cace160a0842f8601c61994f63fe00345b79dca4a66cd9d8734a4dd640be9729f7cd37f199bef05a1db5ea68fef25e8e9ad39fab8e5080d0861bce14c71645e5f967115e5fa2b6691593e7d35b6e22b25fc8a2e4e1b2e1046b32", 0x92}, {&(0x7f00000003c0)="00daf7f67686a864d51241a51d68d9b8f69c4e9a923f137e37d7224f8bab10361a6e04a9c8e3432da8aca224ad781d9cb3b4e310b24634b1434e6e8b9ce2813742d2", 0x42}], 0x4, &(0x7f0000000480)=[@ip_retopts={{0x48, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xe0, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x22}, 0x3}, {@loopback, 0x80000001}]}, @rr={0x7, 0x27, 0x9, [@rand_addr=0x64010102, @empty, @private=0xa010102, @broadcast, @multicast1, @loopback, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x1a}]}]}}}], 0x48}}, {{&(0x7f0000000500)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000000540)="95a0acbbaedce8679a70c65c6f0f9dec87588409c7d75f9817b7ece09bcd0359c471e1ab72ec9a6b5cd9406fc0be3839afb96c454e47f941c16124a15f30e7eaf41089f953dedf85f0e1f8094e5fe8efffcb4563207d05261c", 0x59}, {&(0x7f00000005c0)="4d9aa32b72ccc901da1279110764a07f046af071b657a9132bbef2ea3f8ad8d8017c2981ceeecee10d933dc89f504bae4ac0f51ebb923b6981e4d1edb2d4347065f4a1f65b69be334f298ee7c354ad0db3564085006368822191efcdbf0bab7b7aa06c47dc21ee50f5af8c199a8a9ab34ed684bc3ecbaa6c1241a52687283404fb5ccdb4280203ab842e6a2050de9d216f56424652e736abeca09e866a19cf0338482a3157514a2c6afd03dff168fed24fce76e6c46b3dd2ecc256c4d3b1e02a396721", 0xc3}, {&(0x7f00000006c0)="377b1f1e49f26ef48d4675c8f06f309cd7c4acaa0d427cb92715399ac0d393d9f6a7712566eff3e93112d2a5053dbc6d32b9db6ce3da24e2f9444f2f89fcbacee2506c627566437d9314264b9bd787eba96ea846ec518451b176c0c2021968848e9baceaae4d08f47541d6f4dbb71ca1", 0x70}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="d577314b7a40edc0547a324ea0bc8821e4f68fff3f7e721e60d317a0df91a8ff724d83c15fd5509f94b26344ea4dde4a8df6662869dd2ba9529ef9bef2f3f3fd9a25ce9f8e59764d8fb131f9df8eed049d47348f49daa43f9b3b8a768a959792b26378b089566d9ab1c94b950a5ba5ce7d625ad18d0780ae124b269509489dee22cfeea859808760863cae16e320b5596311634f7786b6e899a519c72b5dc5c1c770", 0xa2}, {&(0x7f0000001800)="5498ab599337e5b4d8091d0af029a8dab320f93d40c54e63a5073c99681d1528d743ff2fbbf1a18674aabe2a7647d00ee272ce9da3cc3655c2dd69603bfb8be781910d86a469b5eec3cf600f2692a337934c66dadfcc502e7804e0f6dd0bf22411865e42984bf68d7cec4e8fab0687b6ef9966af0b202c9fa2c8decca9d8cfc26f7ddba4419f0c58ed12e8f87ae231c8f5d1570e", 0x94}], 0x6, &(0x7f0000001900)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@generic={0x89, 0xb, "324eb5a580b02f52ac"}, @lsrr={0x83, 0x13, 0xd5, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010101, @multicast2]}, @noop, @lsrr={0x83, 0xb, 0x4a, [@multicast2, @multicast1]}, @timestamp={0x44, 0x28, 0x45, 0x0, 0xc, [0x80000001, 0x8, 0x2, 0x1, 0xff, 0x80, 0xfffffffe, 0xfffffffa, 0x5]}, @generic={0x94, 0x8, "00da8e01e787"}, @timestamp_prespec={0x44, 0x3c, 0x49, 0x3, 0x5, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@broadcast, 0x10000}, {@multicast2, 0x8}, {@remote, 0x2}, {@broadcast}, {@private=0xa010101, 0x8}]}]}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp_addr={0x44, 0x2c, 0xc2, 0x1, 0xf, [{@loopback, 0xfffffffb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@local, 0x6}, {@private=0xa010102, 0x8}]}, @end, @timestamp={0x44, 0xc, 0x38, 0x0, 0x6, [0x3, 0x5]}, @timestamp={0x44, 0xc, 0x86, 0x0, 0xc, [0x4, 0xbf]}, @ssrr={0x89, 0x7, 0xff, [@rand_addr=0x64010101]}, @timestamp={0x44, 0x28, 0x44, 0x0, 0x6, [0x0, 0x9, 0x6, 0x1, 0x7fffffff, 0x81, 0x7, 0x2, 0xbd74]}, @generic={0x82, 0x6, "6835a481"}]}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@cipso={0x86, 0x4b, 0x1, [{0x1, 0x7, "56d4ced5da"}, {0x5, 0x2}, {0x5, 0x12, "60d73288c7ba48e0e798cdd3a112ead5"}, {0x5, 0x3, "fd"}, {0x6, 0x12, "f39d978f0e067d7b6a90c0f1956a751b"}, {0x2, 0x9, "dff683f591153f"}, {0x6, 0x5, "2d2faa"}, {0x5, 0x7, "e5dcea17d9"}]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x7e}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x11}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r2, @loopback, @rand_addr=0x64010100}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x5bb}}, @ip_retopts={{0x10, 0x0, 0x7, {[@end, @lsrr={0x83, 0x3, 0xf1}]}}}], 0x1f0}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000001b00)="796e8df9091d9bd6d4cf31764e0976b24f947f704caac94b745645e8a5cc78f5c0ca30567ab2992dd5b4d1be1a6507485c7a6c0858a6b2d20d0d5eccac09c355cc1f68903979d497f517f1fedbce1b5cd4fc9abba962460d221ec8114cadf951e2f1c617b4000bfad6ca4879fd29ca5423c1267d8b583b1549e1c8950e8bb6e215d5d8fabd7f5873e35ad623e05c6f055f5da11aa8c4fd4b19bf5798bb075ab68c1f5d21b149336987", 0xa9}, {&(0x7f0000001bc0)="dc544c347975ca805d4bc1696756a946fba869888a73269a1639beefc8d7b6ff58b16463d7e00a23a8f60941cbb082ae5ec60f1b7759a38b1d276f800520e98f2c87cc804e8a0ac72269c9dfd90b4bfe371cf82c780a27316841e479e5c9acb32112e68f2e6609bc31d939bee8f458cb8bc0c2f0005c80cf7267b219c4e80e7eb03fa892e52755f9995e30c04243c9015ce250c64d98f8296fff6e95ef4361d1bfd6d05d6b932b40e02735183cbb1ecdb23292b5fd5ba0f9f59724c21c58de02cd1f4a9e3820fccf7c927fcfb38fdfdcd68ecff0810c1c8fd4494ec22ca0ed54ef", 0xe1}, {&(0x7f0000001cc0)="9dc18a17b4c66e49d6bab245e3a309f071486d447e25d61141817beae288f7a0aba9b493faf6130a67a960f6af26081f0cce924042b81cf5d73bc2d30497fc50be0185a5dfa0741cbd8312c19bf37181faf3d82ec9aebd36fe6efbca2d57666897b4fdc4101631fb9de1096480b02c", 0x6f}, {&(0x7f0000001d40)="d8575a4fc33b657502d2738a7124fd14045281a0392339184d072f5d2097667ad75863e0fd44323e30649c9484622eb46fc6e25611f18fd22304a5587b50d5d2c6314e", 0x43}, {&(0x7f0000001dc0)="76dca744abf154f2ec0467add0237ed1e1f5a7f669707f49ccf88d345d7bfe0ae86e326cd628e4e14a7ccbeda3bee39819614083ce46150a696976778116bf5484854dfa42ddd72c6bed157536861c5bd08a6d9a5db279e68f0652c490885d6460c8b98e13ff00deec", 0x69}, {&(0x7f0000001e40)="a7c533f9300992c797dcdad99171c1699405f0e9d4af23", 0x17}, {&(0x7f0000001e80)="7b2be0334b1d997dcd66d79fd0d05ebb7a112597fb43253814587694a7f31d0af8d0df9b0d81f3c6fad7f55506b7d2870df388f5d6ae0e4380b83e1fc2e5b9cde4a647a2c435a21bb92a910fbcfd7adc13fc9723ae1b8b3f9002faf018a5b993c0f777709d7f4f6c21c8f4b5ec8f2aabaffcbcd1408ced52d616", 0x7a}, {&(0x7f0000001f00)="4f8c72d8c9dbdf99e89b177c5174c1dbde60a31dccfd1336cfefb59c649b8ea9c90850ffadb0d5b4be0e963ae6fe4039bd2d9919e43ecb4c3e5555d8a78028e0f1c376d8fb32be6210d5b2d701974d87a9dc92a425c463178474a41c0c9e315c2c", 0x61}, {&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000002f80)="c088e814c30c7404f27da497514204d32921fcbe9358d95289dcb947e688932f403f27ad07dae67c0bc96ef06bd97a8f51422e05af87", 0x36}], 0xa}}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000003040)="24640d1a31ead6acf42a7d4b7d49c192fe3b5e38d5bc64a8314a74d5d3a2502d5db8ad01cec1dd1664243da1cbb62c8fe8bfd33e6feca882335602e7043bf0e86d79b0f1fb46cddd0fd5a17ba7e0c8838e81728cb91f9836beebf543ca32749b594de8357b69ff88724353025b1872dcb94eb50056f924fdce1227af1645738a37472cde550b81ec7aff13183008c52f6289a997d4384e951e3197a91eb3706e6f94", 0xa2}, {&(0x7f0000003100)="5ff43d7fe4b8942401505da9963e625b5195912813403bfe5dd94d863e431c5138bf52ce989d033c0ad417799ab5429f68e5b4db", 0x34}], 0x2}}, {{&(0x7f0000003180)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000004240)=[{&(0x7f00000031c0)="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", 0x1000}, {&(0x7f00000041c0)}, {&(0x7f0000004200)="c7b181bd3fa1af994f4ebe6b2e5a5b491049aa59b25165d113a702c288307339e3d233654ec4eeb09fc8037ccaaac9d1f3a420", 0x33}], 0x3, &(0x7f0000004280)=[@ip_retopts={{0x60, 0x0, 0x7, {[@noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @generic={0x89, 0x9, "b5f80a72ddfcb3"}, @generic={0x82, 0x10, "8265918fbc6c9d8c4e2b4e62ac14"}, @timestamp_prespec={0x44, 0x24, 0x99, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x10000}, {@multicast2, 0x2}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x7fff}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x100}}], 0x80}}], 0x6, 0x40001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x0, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5c}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r3], 0x0) [ 1080.308063][T21954] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 15:54:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) write$binfmt_misc(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r1, 0x1) [ 1080.612220][T21963] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1080.807832][T21968] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1080.952263][ T9581] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 1081.083272][T18633] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1081.267349][ T9581] usb 5-1: device descriptor read/64, error 18 15:54:18 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000000706f16402fac11d00000500006372a80c00010006"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x207fff, 0x0) 15:54:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30}, 0x25) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) 15:54:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x3}, 0x1c) [ 1081.487476][T21969] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:54:18 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005a00010a"], 0x14}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r4 = socket(0x10, 0x3, 0x0) splice(r0, 0x0, r4, 0x0, 0x4ffdb, 0x0) [ 1081.668444][ T9581] usb 5-1: device descriptor read/64, error 18 [ 1081.788916][T18633] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1081.798526][T18633] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1081.807338][T18633] usb 6-1: Product: syz [ 1081.811659][T18633] usb 6-1: Manufacturer: syz [ 1081.848994][T21989] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1081.857501][T21989] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1081.866885][T21989] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1081.887798][T18633] usb 6-1: config 0 descriptor?? [ 1081.948713][ T9581] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 1081.961250][T18633] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input191 15:54:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30}, 0x25) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) [ 1082.257716][ T9581] usb 5-1: device descriptor read/64, error 18 [ 1082.258949][T18633] usb 6-1: USB disconnect, device number 9 [ 1082.700108][ T9581] usb 5-1: device descriptor read/64, error 18 [ 1082.819439][ T9581] usb usb5-port1: attempt power cycle [ 1083.037326][T18633] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1083.052545][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1083.063707][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1083.071566][ T4874] loop3: p2 < > [ 1083.459663][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1083.470108][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1083.477633][ T4874] loop3: p2 < > 15:54:20 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x32401) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000080)={0x9, 0x0, 0x5}) 15:54:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x4}, 0x1c) 15:54:20 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) 15:54:20 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x5450, 0x0) 15:54:20 executing program 3: r0 = eventfd(0xfbfffff8) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RATTACH(r1, &(0x7f0000000100)={0x14}, 0x14) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e5e, @dev}, 0x10) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 1083.531867][T18633] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1083.541576][T18633] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1083.550513][T18633] usb 6-1: Product: syz [ 1083.554835][T18633] usb 6-1: Manufacturer: syz [ 1083.567509][ T9581] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 1083.609969][T18633] usb 6-1: config 0 descriptor?? [ 1083.656012][T18633] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input192 15:54:21 executing program 5: setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040), 0x4) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001100000000000000000"], 0x0) [ 1083.902304][T18633] usb 6-1: USB disconnect, device number 10 [ 1084.047394][ T9581] usb 5-1: device not accepting address 122, error -71 15:54:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGPGRP(r1, 0x5450, 0x0) 15:54:21 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 15:54:21 executing program 3: sync() openat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', 0xffffffffffffffff, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00') socketpair(0x1, 0x80803, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind(r0, &(0x7f0000000080)=@ethernet={0x1, @remote}, 0x66) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) [ 1084.757905][ T9581] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 1084.788565][T18633] usb 6-1: new full-speed USB device number 11 using dummy_hcd 15:54:21 executing program 2: syz_read_part_table(0x0, 0x2, 0x0) 15:54:21 executing program 0: 15:54:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x5}, 0x1c) [ 1085.148090][ T9581] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1085.148779][T18633] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.157454][ T9581] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1085.157560][ T9581] usb 5-1: Product: syz [ 1085.157680][ T9581] usb 5-1: Manufacturer: syz [ 1085.168052][T18633] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1085.288724][T18633] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1085.298195][T18633] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1085.306755][T18633] usb 6-1: Product: syz [ 1085.311382][T18633] usb 6-1: Manufacturer: syz [ 1085.349812][ T9581] usb 5-1: config 0 descriptor?? [ 1085.407153][ T9581] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input193 [ 1085.494582][T18633] usb 6-1: config 0 descriptor?? [ 1085.600111][T18633] pegasus_notetaker 6-1:0.0: Invalid number of endpoints [ 1085.607654][T18633] pegasus_notetaker: probe of 6-1:0.0 failed with error -22 [ 1085.614775][ T9581] usb 5-1: USB disconnect, device number 123 [ 1085.872050][T18633] usb 6-1: USB disconnect, device number 11 [ 1086.388133][T10251] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 1086.937513][T10251] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1086.946764][T10251] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1086.956272][T10251] usb 5-1: Product: syz [ 1086.960685][T10251] usb 5-1: Manufacturer: syz [ 1087.090402][T10251] usb 5-1: config 0 descriptor?? 15:54:24 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000080)={{0xfd, 0x1}, {0xff, 0xa9}, 0x5, 0x2, 0x3f}) 15:54:24 executing program 3: 15:54:24 executing program 0: 15:54:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010", @ANYRES64, @ANYRES16=r0, @ANYBLOB="e78cb3b50c241c0308dd97fb17d4ff84d2de4496bc6c63165edf8e765db58b0eb117d4c814230c1d65b26ebcb34c7e78d300d400b8bbbca3f71407d2f956e9fbd9c6098a04ee27a60ace06281a11125602717e04f03e44feecdf6b82891177cc66c1c88361"], 0x0) 15:54:24 executing program 2: 15:54:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x7}, 0x1c) [ 1087.307581][T10251] usb 5-1: can't set config #0, error -71 [ 1087.377508][T10251] usb 5-1: USB disconnect, device number 124 15:54:24 executing program 2: 15:54:24 executing program 3: 15:54:25 executing program 0: [ 1087.987521][ T3821] usb 6-1: new full-speed USB device number 12 using dummy_hcd 15:54:25 executing program 3: [ 1088.349002][ T3821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1808, setting to 64 [ 1088.397468][ T9581] usb 5-1: new full-speed USB device number 125 using dummy_hcd 15:54:25 executing program 2: [ 1088.511948][ T3821] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1088.521305][ T3821] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1088.530048][ T3821] usb 6-1: Product: syz [ 1088.534415][ T3821] usb 6-1: Manufacturer: syz [ 1088.557091][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1088.567536][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1088.574834][ T4874] loop3: p2 < > [ 1088.640882][ T3821] usb 6-1: config 0 descriptor?? 15:54:25 executing program 0: [ 1088.686298][ T3821] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input194 [ 1088.882942][ T3821] usb 6-1: USB disconnect, device number 12 [ 1088.968952][ T9581] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1088.979271][ T9581] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1088.987928][ T9581] usb 5-1: Product: syz [ 1088.992234][ T9581] usb 5-1: Manufacturer: syz [ 1089.122155][ T9581] usb 5-1: config 0 descriptor?? [ 1089.180699][ T9581] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input195 [ 1089.376820][T10251] usb 5-1: USB disconnect, device number 125 [ 1089.739369][ T9581] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1090.138822][ T9581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1808, setting to 64 [ 1090.168953][T10251] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 1090.319015][ T9581] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1090.328546][ T9581] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1090.337244][ T9581] usb 6-1: Product: syz [ 1090.341548][ T9581] usb 6-1: Manufacturer: syz [ 1090.545020][ T9581] usb 6-1: config 0 descriptor?? [ 1090.758042][T10251] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1090.767361][T10251] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1090.775841][T10251] usb 5-1: Product: syz [ 1090.780271][T10251] usb 5-1: Manufacturer: syz [ 1090.788057][ T9581] usb 6-1: can't set config #0, error -71 [ 1090.812072][ T9581] usb 6-1: USB disconnect, device number 13 [ 1091.014357][T10251] usb 5-1: config 0 descriptor?? 15:54:28 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010d9c5c872d0399833f633b6a3ec62436dbed17b8d9d432e5f76167492a8ed8caa1460d023e4e27392187cc11fd735b0cefaefec"], 0x0) 15:54:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x8}, 0x1c) 15:54:28 executing program 2: 15:54:28 executing program 3: 15:54:28 executing program 0: 15:54:28 executing program 5: syz_usb_connect(0x4, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe700017027b209fa1a0001000000000904000001ab2551000905c142a2e131d3134d9ca0f45a2e0eb3e90b5bb00e992aee27c98ca76cdd8baee2e2fa73950240f8a3c0681bcbcd3bad6fa27887ca5f44b259388fccc5a8ba1d74e3686aa649e0c94e40eb8ba7bdb0709e09c09679f24a825df46bc63f58f27d8ca5e57bb961188634437fb01f925c1981e21f4c3e6f70860107bd666b492e554e21d98d6fe6553377d177e56deb88264ce87d54860acdfe0b39e4af13143d725e52416c0a3004568aab367d0d8dfd20edef4a2b04367abd95baf0830bdfe178ec43e6ba6dcc853488442a"], 0x0) r0 = gettid() r1 = gettid() capget(&(0x7f0000000080)={0x19980330, r1}, &(0x7f0000000200)) ptrace$cont(0x20, r1, 0x8, 0x6) capget(&(0x7f0000000080)={0x19980330, r0}, &(0x7f0000000200)) sched_setscheduler(r0, 0x0, &(0x7f0000000000)=0x9) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) [ 1091.218800][T10251] usb 5-1: can't set config #0, error -71 [ 1091.238593][T10251] usb 5-1: USB disconnect, device number 126 15:54:28 executing program 3: 15:54:28 executing program 2: 15:54:28 executing program 0: [ 1092.087230][T18633] usb 5-1: new full-speed USB device number 127 using dummy_hcd 15:54:29 executing program 2: 15:54:29 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200000, 0x0) 15:54:29 executing program 3: [ 1092.448209][T18633] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 272, setting to 64 [ 1092.578338][T18633] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1092.587873][T18633] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1092.596417][T18633] usb 5-1: Product: syz [ 1092.600960][T18633] usb 5-1: Manufacturer: syz [ 1092.745831][T18633] usb 5-1: config 0 descriptor?? [ 1092.880413][T18633] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input196 [ 1093.137644][T18633] usb 5-1: USB disconnect, device number 127 [ 1093.197358][ T26] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1093.398188][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1093.408857][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1093.416057][ T4874] loop3: p2 < > [ 1093.738308][ T26] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1093.747848][ T26] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1093.756344][ T26] usb 6-1: Product: syz [ 1093.761192][ T26] usb 6-1: Manufacturer: syz [ 1093.797664][T12789] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 1093.885657][ T26] usb 6-1: config 0 descriptor?? [ 1093.947392][ T26] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input197 [ 1094.042365][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1094.052638][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1094.061305][ T4874] loop3: p2 < > [ 1094.143115][ T26] usb 6-1: USB disconnect, device number 14 [ 1094.188101][T12789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 272, setting to 64 [ 1094.328357][T12789] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1094.339270][T12789] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1094.348826][T12789] usb 5-1: Product: syz [ 1094.353205][T12789] usb 5-1: Manufacturer: syz [ 1094.455829][T12789] usb 5-1: config 0 descriptor?? [ 1094.527288][T12789] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input198 15:54:32 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x66f, 0x6, 0x5, 0x4a, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r0, 0x80000001}, &(0x7f0000000100)=0x8) 15:54:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x9}, 0x1c) 15:54:32 executing program 0: 15:54:32 executing program 2: 15:54:32 executing program 3: [ 1094.944700][ T12] usb 5-1: USB disconnect, device number 2 [ 1094.958138][T10251] usb 6-1: new full-speed USB device number 15 using dummy_hcd 15:54:32 executing program 2: 15:54:32 executing program 0: 15:54:32 executing program 3: [ 1095.529747][T10251] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1095.539192][T10251] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1095.548104][T10251] usb 6-1: Product: syz [ 1095.552418][T10251] usb 6-1: Manufacturer: syz [ 1095.614400][T10251] usb 6-1: config 0 descriptor?? 15:54:32 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) [ 1095.809832][T10251] usb 6-1: can't set config #0, error -71 [ 1095.860244][T10251] usb 6-1: USB disconnect, device number 15 [ 1096.057940][ T12] usb 5-1: new full-speed USB device number 3 using dummy_hcd 15:54:33 executing program 2: r0 = socket(0x11, 0xa, 0x0) sendmmsg$unix(r0, &(0x7f0000005000)=[{&(0x7f00000000c0)=@abs, 0x6e, 0x0}], 0x1, 0x0) 15:54:33 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_GETFLAGS(r0, 0x541b, &(0x7f0000000100)) 15:54:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0xa}, 0x1c) [ 1096.560732][ T12] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1096.570212][ T12] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1096.579097][ T12] usb 5-1: Product: syz [ 1096.583446][ T12] usb 5-1: Manufacturer: syz [ 1096.677375][T18633] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1096.729286][ T12] usb 5-1: config 0 descriptor?? [ 1096.802124][ T12] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input199 [ 1096.976096][ T12] usb 5-1: USB disconnect, device number 3 [ 1097.050297][T18633] usb 6-1: config 0 has an invalid descriptor of length 205, skipping remainder of the config [ 1097.061188][T18633] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1097.249626][T18633] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1097.259187][T18633] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1097.267934][T18633] usb 6-1: Product: syz [ 1097.272255][T18633] usb 6-1: Manufacturer: syz [ 1097.316353][T18633] usb 6-1: config 0 descriptor?? [ 1097.366577][T18633] pegasus_notetaker 6-1:0.0: Invalid number of endpoints [ 1097.374183][T18633] pegasus_notetaker: probe of 6-1:0.0 failed with error -22 [ 1097.565921][ T8711] usb 6-1: USB disconnect, device number 16 [ 1097.767948][T18633] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 1098.248735][T18633] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1098.258110][T18633] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1098.266667][T18633] usb 5-1: Product: syz [ 1098.271211][T18633] usb 5-1: Manufacturer: syz [ 1098.290906][T18633] usb 5-1: config 0 descriptor?? [ 1098.336532][T18633] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input200 [ 1098.353600][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1098.359949][ T12] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1098.363955][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1098.378581][ T4874] loop3: p2 < > [ 1098.558400][T18633] usb 5-1: USB disconnect, device number 4 15:54:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000340)=0x80) dup2(r0, r1) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x4b, 0x0, &(0x7f0000000280)) 15:54:35 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x181282) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 15:54:35 executing program 4: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x4000044) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) 15:54:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x11}, 0x1c) 15:54:35 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) [ 1098.732052][ T12] usb 6-1: config 0 has an invalid descriptor of length 205, skipping remainder of the config [ 1098.742647][ T12] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1099.022292][ T12] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1099.032003][ T12] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1099.041116][ T12] usb 6-1: Product: syz [ 1099.045493][ T12] usb 6-1: Manufacturer: syz [ 1099.199590][ T12] usb 6-1: config 0 descriptor?? 15:54:36 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) 15:54:36 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$VT_DISALLOCATE(r2, 0x5608) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 15:54:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000002140), 0x8, 0x0) dup2(r0, r1) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 15:54:36 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c942b810200e010191220000000009021b009d9b77ec5fed4501000000e50804000001ab25510009058200109ccadae5418b00"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ftruncate(r0, 0x40) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x1, {0xe, 0x32, 0x8, 0xc, 0x2, 0x4, 0x3, 0x12c, 0x1}}) [ 1099.448301][ T12] usb 6-1: can't set config #0, error -71 [ 1099.510715][ T12] usb 6-1: USB disconnect, device number 17 [ 1099.687685][T18633] usb 5-1: new full-speed USB device number 5 using dummy_hcd 15:54:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x21}, 0x1c) 15:54:37 executing program 0: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() r2 = dup(r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000013) [ 1100.168287][T18633] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1100.177746][T18633] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1100.186377][T18633] usb 5-1: Product: syz [ 1100.191035][T18633] usb 5-1: Manufacturer: syz [ 1100.277527][ T12] usb 6-1: new full-speed USB device number 18 using dummy_hcd 15:54:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000240)=@hopopts={0x0, 0x1, [], [@jumbo, @ra]}, 0x18) write(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getpeername(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000000)=0x80) dup2(r1, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x1c, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000280)={0x1}, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') r3 = dup(r0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NET_DM_CMD_START(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 1100.418959][T18633] usb 5-1: config 0 descriptor?? [ 1100.468431][T18633] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input201 [ 1100.569589][ T12] usb 6-1: no configurations [ 1100.574545][ T12] usb 6-1: can't read configurations, error -22 15:54:37 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) [ 1100.662098][T18633] usb 5-1: USB disconnect, device number 5 [ 1100.829805][ T12] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1101.117698][ T12] usb 6-1: no configurations [ 1101.122760][ T12] usb 6-1: can't read configurations, error -22 15:54:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDADDIO(r0, 0x540b, 0x0) [ 1101.223199][ T12] usb usb6-port1: attempt power cycle 15:54:38 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x7643, 0x7fffffff]}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000240)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/199, 0xc7, 0x1, 0x3d}, @flat=@handle={0x73682a85, 0xb, 0x2}, @flat=@weak_handle={0x77682a85, 0xb}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}], 0xf6, 0x0, &(0x7f00000002c0)="0d7d9a63c92e2316f9c8f3da8b0267e323920f696ee0bccd62e5c5469c4331d54dff76f3446c0f82a3c1729b9e14550a54a1c63ec9d28c6f2679af2b3c2c08bb7072ba6dfbe4ce49a72f73ff8fd703db84d0bc179a3aaf05c20f3806876854527512fdf8f0002853f46320a2c3d5fcf21ab0399b2eb7d97cff3a636abc441353e02f99467adb2fa922f639ab0582dbc6fd4fb40f9a6214f58f36256fa975dfe3768139e8e36799c1ac98c3f94a956f5023cc131c1e3674e263c1ebd8cd5dece1020c1785daac1c7fa64fc005fd54c49be5b645a4c29ca448fa08e6c30193e6520a9373978f9724b4836e0f617c99da278e955c3cbd86"}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) 15:54:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x2b}, 0x1c) 15:54:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = dup2(r0, r1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0xb, 0x4) [ 1101.954038][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1101.964480][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1101.972016][ T4874] loop3: p2 < > 15:54:39 executing program 3: sched_setscheduler(0x0, 0x5, &(0x7f0000000240)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x38800, 0x0) [ 1101.997719][ T12] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1102.130383][ T12] usb 6-1: no configurations [ 1102.135236][ T12] usb 6-1: can't read configurations, error -22 [ 1102.187411][ T26] usb 5-1: new full-speed USB device number 6 using dummy_hcd 15:54:39 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) [ 1102.347507][ T12] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1102.482259][ T12] usb 6-1: no configurations [ 1102.487270][ T12] usb 6-1: can't read configurations, error -22 [ 1102.523376][ T12] usb usb6-port1: unable to enumerate USB device [ 1102.678518][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1102.689073][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1102.696350][ T4874] loop3: p2 < > [ 1102.729794][ T26] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1102.739182][ T26] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1102.748158][ T26] usb 5-1: Product: syz [ 1102.752470][ T26] usb 5-1: Manufacturer: syz [ 1102.843262][ T26] usb 5-1: config 0 descriptor?? [ 1102.911291][ T26] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input202 15:54:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x2c}, 0x1c) [ 1103.092393][ T26] usb 5-1: USB disconnect, device number 6 15:54:40 executing program 5: syz_usb_connect(0x6, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) 15:54:40 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) fdatasync(0xffffffffffffffff) [ 1103.887216][ T26] usb 5-1: new full-speed USB device number 7 using dummy_hcd 15:54:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x2f}, 0x1c) 15:54:41 executing program 5: syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000080)={0x0, 0x7, 0x180000}) [ 1104.410452][ T26] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1104.420053][ T26] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1104.431627][ T26] usb 5-1: Product: syz [ 1104.435960][ T26] usb 5-1: Manufacturer: syz [ 1104.549903][ T26] usb 5-1: config 0 descriptor?? [ 1104.606752][ T26] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input203 [ 1104.763822][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1104.774490][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1104.782040][ T4874] loop3: p2 < > 15:54:42 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) socket$key(0xf, 0x3, 0x2) r0 = userfaultfd(0x800) open_by_handle_at(r0, &(0x7f0000000000)={0xf7, 0x400, "7853cdada4ccc9c0dfb7494abcb1a072f59b531ef0f3c427bac5ab56fae3f87a17321ba42dea9a59384fbeabdf53b205813f93dc4fa5c33536a5384cc36fbed903234b66236139a0616f0614082e9fc54a19f3ad91d8ae5bb0d808dd9ef6299d919aafc2e5778e3856a5cec2f066b8bb8bf23e76b7300942f3dfa9171cb88ff906c7b6d10b88bdd9275bd6ff8c96fde233656312e021c40b3e2bd3cb11cabfabc1ae8acf0cf518800db5bb8130602dca153614026ff0ad9ba976c78d10c4285a528b1c70063211acc91f252667abaee27aa2cd3d765d8f4d03be44ad1c52c9b5a4b37a43d680ce901cad1e8878468b"}, 0x200000) [ 1104.946073][T18633] usb 5-1: USB disconnect, device number 7 15:54:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r0, 0x4b36) [ 1105.507366][T18633] usb 5-1: new full-speed USB device number 8 using dummy_hcd 15:54:42 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e010191000000000109021b0001000000000904000001ab2551000905820010"], 0x0) [ 1105.797438][T18633] usb 5-1: device descriptor read/64, error 18 15:54:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x33}, 0x1c) 15:54:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x8084) 15:54:43 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) recvmmsg(r0, &(0x7f0000001940), 0x173, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001940)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x64}}, 0x0) r1 = dup(r0) r2 = gettid() write$P9_RCLUNK(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401004000000016) 15:54:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r0, r1) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000003bc0), &(0x7f0000003c00)=0x4) [ 1106.188004][T18633] usb 5-1: device descriptor read/64, error 18 [ 1106.203032][ T26] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1106.457333][T18633] usb 5-1: new full-speed USB device number 9 using dummy_hcd 15:54:43 executing program 3: r0 = socket$nl_generic(0x2, 0x2, 0x88) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x400460c1) 15:54:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCEXCL(r0, 0x540c) [ 1106.610058][ T26] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.91 [ 1106.619443][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.710706][ T26] usb 6-1: config 0 descriptor?? [ 1106.730447][T18633] usb 5-1: device descriptor read/64, error 18 [ 1106.775095][ T26] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input204 [ 1106.972866][ T26] usb 6-1: USB disconnect, device number 22 15:54:44 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x110) [ 1107.117554][T18633] usb 5-1: device descriptor read/64, error 18 [ 1107.239879][T18633] usb usb5-port1: attempt power cycle 15:54:44 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)) sendto$inet6(r0, &(0x7f0000000040)="a4241d2e1de8548ccf0073ffeb8b6f48b5116b73c623f95f1717d86e32f2ba8a93122eb0b6a8cf7f6105620211cda2154ef0469b96eb6ddfb47f4079dded3d889862b8a1e61104cb97fe1fa483cc757688d9ad341606baff682bc682659bc01ce41a9f50c434e28e5a45a77d692fc250e213bae805b7178fcacd50c5bed429ef58d9ce471a03713a5595ac54a95c050655", 0x0, 0x4000, 0x0, 0xffffffffffffff46) 15:54:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x3a}, 0x1c) [ 1107.768353][ T26] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1107.970388][T18633] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1108.163418][ T26] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.91 [ 1108.172935][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:54:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) fstat(r2, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000001300)=ANY=[@ANYRES64, @ANYRESDEC=r0, @ANYBLOB="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", @ANYBLOB="967c753b7335cb94ea43042d864eefbd0beb333d43eaf6b22e21c1810b7187d453aa5c9ba629d3464d6352b63f20b4831cabfb23e8ce3645b2fab3bf7c3c73b5b369f9848d637d49fb584aae7e880c94e2ff32eeab83ba6d5e6797d38f676c1e8efcd2665d0f74f0fc4c7feb883e29a69fe7c5767cba40745b3e098edddfed9cebe2406f13e4363003bf0dd43fb090b06a6414f2f9279990a4644a915b5315a9f3baadc6abbdb3285f8019458c2229001a564a4de2a73b1f4bec08550d327a838ccbd06182c7cf0ab4af6da8e47b427201ff1e59ac4e4f51e3d95735b446a8101a6aa6538ec92a8dfbab9f3037", @ANYRESHEX=r0, @ANYRES32=r1, @ANYRES32], 0x0) [ 1108.223322][ T26] usb 6-1: config 0 descriptor?? 15:54:45 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$F_GET_RW_HINT(r0, 0xf, &(0x7f0000000140)) [ 1108.248501][T18633] usb 5-1: device descriptor read/8, error -71 [ 1108.309593][ T26] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input205 [ 1108.458560][T18633] usb 5-1: device descriptor read/8, error -71 [ 1108.484135][ T26] usb 6-1: USB disconnect, device number 23 15:54:45 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x5451) 15:54:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) r2 = accept4$inet6(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 15:54:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg(r0, &(0x7f0000001540)={0x0, 0x3d, 0x0}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) close(r0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r1, 0x1000000000016) 15:54:45 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120122ffe7000109021b0001000000000904001aae8cced2a1af0f710001ab255100090582001000"/49], 0x0) semctl$SEM_INFO(0xffffffffffffffff, 0x3, 0x13, &(0x7f0000000040)=""/163) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x10}]}]}]}, 0x38}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@private, @initdev, 0x0}, &(0x7f00000001c0)=0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000006b00)=[{{&(0x7f0000000200)=@qipcrtr, 0x80, &(0x7f0000001440)=[{&(0x7f0000000280)=""/50, 0x32}, {&(0x7f00000002c0)=""/220, 0xdc}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/31, 0x1f}, {&(0x7f0000001400)=""/12, 0xc}], 0x5, &(0x7f0000001480)=""/97, 0x61}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001500)=""/201, 0xc9}, {&(0x7f0000001600)=""/13, 0xd}, {&(0x7f0000001640)}, {&(0x7f0000001680)=""/50, 0x32}, {&(0x7f00000016c0)=""/60, 0x3c}, {&(0x7f0000001700)=""/183, 0xb7}], 0x6, &(0x7f0000001800)=""/90, 0x5a}, 0x45}, {{&(0x7f0000001880)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000003980)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/70, 0x46}], 0x3}, 0x2}, {{&(0x7f00000039c0)=@rc, 0x80, &(0x7f0000004080)=[{&(0x7f0000003a40)=""/38, 0x26}, {&(0x7f0000003a80)=""/250, 0xfa}, {&(0x7f0000003b80)=""/96, 0x60}, {&(0x7f0000003c00)=""/45, 0x2d}, {&(0x7f0000003c40)=""/231, 0xe7}, {&(0x7f0000003d40)=""/25, 0x19}, {&(0x7f0000003d80)=""/166, 0xa6}, {&(0x7f0000003e40)=""/169, 0xa9}, {&(0x7f0000003f00)=""/110, 0x6e}, {&(0x7f0000003f80)=""/254, 0xfe}], 0xa, &(0x7f0000004100)=""/146, 0x92}, 0x3}, {{0x0, 0x0, &(0x7f0000005800)=[{&(0x7f00000041c0)=""/210, 0xd2}, {&(0x7f00000042c0)=""/144, 0x90}, {&(0x7f0000004380)=""/244, 0xf4}, {&(0x7f0000004480)=""/106, 0x6a}, {&(0x7f0000004500)=""/4, 0x4}, {&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000005540)=""/4, 0x4}, {&(0x7f0000005580)=""/154, 0x9a}, {&(0x7f0000005640)=""/212, 0xd4}, {&(0x7f0000005740)=""/134, 0x86}], 0xa, &(0x7f0000005880)=""/27, 0x1b}, 0x3}, {{&(0x7f00000058c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005940)=""/115, 0x73}, {&(0x7f00000059c0)=""/8, 0x8}, {&(0x7f0000005a00)=""/136, 0x88}], 0x3, &(0x7f0000005b00)=""/4096, 0x1000}, 0xca0}], 0x6, 0x21, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r10}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x10}]}]}]}, 0x38}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000006bc0)={0x0, @multicast1}, &(0x7f0000006c00)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000070c0)={&(0x7f0000006c40)={0x464, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r7}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r10}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xfffeffff}}, {0x8}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x5499}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xffff7fff}}}]}}]}, 0x464}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000100)={0x5, 0x6}) 15:54:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x3b}, 0x1c) [ 1108.965193][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1108.975601][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1108.983145][ T4874] loop3: p2 < > 15:54:46 executing program 3: r0 = inotify_init() close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) recvfrom$inet6(r2, 0x0, 0x0, 0x160, 0x0, 0x0) [ 1109.251083][T18633] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1109.428331][T18633] usb 5-1: device descriptor read/8, error -61 [ 1109.447544][ T8711] usb 6-1: new full-speed USB device number 24 using dummy_hcd 15:54:46 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x5411, &(0x7f0000000100)={0x2, 'gre0\x00'}) 15:54:46 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) [ 1109.700273][T18633] usb 5-1: device descriptor read/8, error -61 [ 1109.718123][ T8711] usb 6-1: device descriptor read/64, error 18 [ 1109.818904][T18633] usb usb5-port1: unable to enumerate USB device 15:54:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 15:54:47 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x181100, 0x0) [ 1110.107775][ T8711] usb 6-1: device descriptor read/64, error 18 [ 1110.377599][ T8711] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1110.648676][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1110.659041][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1110.666325][ T4874] loop3: p2 < > [ 1110.677310][ T8711] usb 6-1: device descriptor read/64, error 18 [ 1110.981962][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1110.992274][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1111.000221][ T4874] loop3: p2 < > [ 1111.067858][ T8711] usb 6-1: device descriptor read/64, error 18 [ 1111.187667][ T8711] usb usb6-port1: attempt power cycle [ 1111.414677][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1111.425130][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1111.432877][ T4874] loop3: p2 < > 15:54:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x3c}, 0x1c) 15:54:48 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) 15:54:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) fchownat(r0, &(0x7f0000001280)='\x00', 0x0, 0x0, 0x1000) 15:54:48 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 1111.928255][ T8711] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1112.017756][ T8711] usb 6-1: Invalid ep0 maxpacket: 9 [ 1112.177252][ T8711] usb 6-1: new full-speed USB device number 27 using dummy_hcd 15:54:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 15:54:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000864) 15:54:49 executing program 0: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 15:54:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="34069158", @ANYRES16=r1, @ANYRES32=r1], 0x34}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r1, 0x6, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x100420c5) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000140)={0x0, 0x5, 0x7e}) [ 1112.349163][ T8711] usb 6-1: device descriptor read/8, error -71 [ 1112.557854][ T8711] usb 6-1: device descriptor read/8, error -71 [ 1112.678597][ T8711] usb usb6-port1: unable to enumerate USB device 15:54:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RLERROR(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) tkill(r2, 0x1000000000016) 15:54:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x3d}, 0x1c) 15:54:50 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsa\x00', 0x0, 0x0) dup2(r0, r1) getdents64(r1, &(0x7f0000000380)=""/4096, 0x1000) 15:54:50 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x5450, 0x0) [ 1113.278319][ T8711] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1113.613820][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1113.624430][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1113.632314][ T4874] loop3: p2 < > 15:54:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 1113.809376][ T8711] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1113.819040][ T8711] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1113.827903][ T8711] usb 6-1: Product: syz [ 1113.832228][ T8711] usb 6-1: Manufacturer: syz 15:54:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r0, r1) syz_open_pts(r1, 0x0) [ 1113.989011][ T8711] usb 6-1: config 0 descriptor?? [ 1114.068489][ T8711] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input206 [ 1114.299672][ T8711] usb 6-1: USB disconnect, device number 28 15:54:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x53}, 0x1c) 15:54:51 executing program 0: r0 = epoll_create1(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 15:54:51 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000480)='/dev/urandom\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) 15:54:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 15:54:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ftruncate(r1, 0x40) write$P9_RATTACH(r1, &(0x7f0000000040)={0x14, 0x69, 0x2, {0x8, 0x1}}, 0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ftruncate(r0, 0x40) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) 15:54:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x23, &(0x7f0000000080), 0x4) [ 1115.204654][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1115.215870][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1115.223429][ T4874] loop3: p2 < > 15:54:52 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x113460, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 15:54:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 15:54:52 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x0, 0x0) 15:54:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0xfe80003e}, 0x1c) [ 1115.817451][T12789] usb 6-1: new full-speed USB device number 29 using dummy_hcd 15:54:53 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socketpair(0x1, 0x80803, 0x0, &(0x7f0000000000)) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 15:54:53 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) [ 1116.114753][T12789] usb 6-1: device descriptor read/64, error 18 [ 1116.538671][T12789] usb 6-1: device descriptor read/64, error 18 15:54:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet6(r0, &(0x7f00000001c0), 0x1c) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4) [ 1116.817282][T12789] usb 6-1: new full-speed USB device number 30 using dummy_hcd 15:54:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getrandom(&(0x7f0000000080)=""/4121, 0x1019, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0) [ 1117.090898][T12789] usb 6-1: device descriptor read/64, error 18 [ 1117.338778][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1117.349193][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1117.356480][ T4874] loop3: p2 < > 15:54:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000100)=0x34) close(r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)) 15:54:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0xffffff84}, 0x1c) [ 1117.497364][T12789] usb 6-1: device descriptor read/64, error 18 [ 1117.623666][T12789] usb usb6-port1: attempt power cycle [ 1118.357545][T12789] usb 6-1: new full-speed USB device number 31 using dummy_hcd 15:54:55 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) read$eventfd(r0, 0x0, 0x0) 15:54:55 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 1118.657793][T12789] usb 6-1: device descriptor read/8, error -71 15:54:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000b00)='/dev/loop#\x00', 0x0, 0x0) close(r0) inotify_init1(0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 15:54:55 executing program 0: r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000), 0x4) [ 1118.867503][T12789] usb 6-1: device descriptor read/8, error -71 15:54:56 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sync() sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) 15:54:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0xffffff88}, 0x1c) 15:54:56 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 15:54:56 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EVIOCGMTSLOTS(r0, 0x5421, &(0x7f0000000000)=""/173) 15:54:56 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) r1 = socket$unix(0x1, 0x200000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept4$inet(r0, 0x0, 0x0, 0x0) 15:54:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 1119.690798][T12789] usb 6-1: new full-speed USB device number 32 using dummy_hcd 15:54:57 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) [ 1120.002050][T12789] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1120.010010][T12789] usb 6-1: can't read configurations, error -61 15:54:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1120.098304][T12789] usb usb6-port1: unable to enumerate USB device 15:54:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:54:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) writev(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)='B', 0x1}], 0x1) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r1 = gettid() r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000500), 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) tkill(r1, 0x1000000000016) 15:54:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 15:54:57 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000480)=@dstopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @ipv4={[], [], @loopback}}, @calipso={0x7, 0x8}]}, 0x28) write(r1, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={0x0}}, 0x0) [ 1122.074987][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1122.087224][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1122.094212][ T4874] loop3: p2 < > 15:54:59 executing program 2: r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x80441, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:54:59 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f0000000040)={0x745, 0x3, 0x4, 0x1, 0x20, {0x77359400}, {0x3, 0x2, 0x3, 0x6, 0x3, 0x20, "0c2e53db"}, 0x3, 0x4, @userptr=0x3, 0xf1a, 0x0, 0xffffffffffffffff}) r1 = openat$pfkey(0xffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x242000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000200000000001000"}) r3 = syz_open_pts(r2, 0x4000000040042) r4 = fcntl$dupfd(r2, 0x0, r3) dup3(r3, r2, 0x0) write(r2, &(0x7f0000000280)="84225af5012e10c806731d620b72cbbc030c5df6a9faf4a399637449e277aee80d8c6b2ec451e77e322fc8b2ab92a0e47c4d00"/64, 0xfffffffffffffe8c) openat$ttyS3(0xffffff9c, &(0x7f0000001480)='/dev/ttyS3\x00', 0x0, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x381000) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000340)={{r2}, r6, 0xc, @inherit={0x60, &(0x7f00000002c0)={0x1, 0x3, 0x5, 0x9, {0x10, 0x8, 0x3, 0x7, 0xff}, [0x5, 0xcf4, 0x7e]}}, @subvolid=0x1f}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000180)={{r1}, r6, 0x1e, @inherit={0x50, &(0x7f0000001340)={0x0, 0x1, 0x5, 0xaa, {0x20, 0x4, 0x7d, 0x1, 0x100}, [0xffff]}}, @name="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"}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) ftruncate(r7, 0x40) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f00000013c0)=""/159) 15:54:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x8, &(0x7f0000000100)=@gcm_256={{}, "60fad506f5721559", "a9e62c3ea2dbc472e972dd69af8bf939670291905997ae0a46fc7444f16ee551", "401835a2"}, 0x38) 15:54:59 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, 0x0) 15:54:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x2}, 0x1c) 15:54:59 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$vsock(0xffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f00000000c0)={r5}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r5}) 15:54:59 executing program 0: r0 = socket(0x2, 0x3, 0xfe) sendto$unix(r0, 0x0, 0x14, 0x24048094, &(0x7f0000000000)=@abs, 0x6e) 15:54:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b36, 0x0) [ 1122.669706][ T9581] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1122.968906][ T26] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1123.086120][T22833] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 1123.178663][ T9581] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1123.188252][ T9581] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1123.196757][ T9581] usb 5-1: Product: syz [ 1123.201309][ T9581] usb 5-1: Manufacturer: syz [ 1123.262452][ T9581] usb 5-1: config 0 descriptor?? [ 1123.333657][ T9581] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input207 [ 1123.389744][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1123.400262][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1123.407828][ T4874] loop3: p2 < > 15:55:00 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 15:55:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x3}, 0x1c) 15:55:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) [ 1123.539654][ T26] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1123.549372][ T26] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1123.558003][ T26] usb 6-1: Product: syz [ 1123.562325][ T26] usb 6-1: Manufacturer: syz [ 1123.632874][ T26] usb 6-1: config 0 descriptor?? [ 1123.776631][ T26] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input208 [ 1123.888774][T22829] Unknown ioctl 19462 [ 1123.963999][ T26] usb 6-1: USB disconnect, device number 33 15:55:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x2, &(0x7f0000000080)={'netdevsim0\x00', @link_local}) 15:55:01 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000002600)) [ 1124.743488][ T26] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 1125.133121][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1125.143664][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1125.151206][ T4874] loop3: p2 < > [ 1125.292143][ T26] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1125.301975][ T26] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1125.310673][ T26] usb 6-1: Product: syz [ 1125.315179][ T26] usb 6-1: Manufacturer: syz [ 1125.348861][ T26] usb 6-1: config 0 descriptor?? [ 1125.409043][ T26] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input209 15:55:02 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) 15:55:02 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200800000000013, &(0x7f0000000340)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000280), 0x4) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1125.502537][T18633] usb 5-1: USB disconnect, device number 12 [ 1125.745989][ T3821] usb 6-1: USB disconnect, device number 34 [ 1126.147267][T18633] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1126.195363][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1126.205746][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1126.213586][ T4874] loop3: p2 < > [ 1126.628839][T18633] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1126.638346][T18633] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1126.646898][T18633] usb 5-1: Product: syz [ 1126.651483][T18633] usb 5-1: Manufacturer: syz [ 1126.699942][T18633] usb 5-1: config 0 descriptor?? [ 1126.746618][T18633] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input210 [ 1126.942900][T18633] usb 5-1: USB disconnect, device number 13 [ 1127.727579][T18633] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1128.228471][T18633] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1128.237972][T18633] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1128.246567][T18633] usb 5-1: Product: syz [ 1128.251190][T18633] usb 5-1: Manufacturer: syz [ 1128.264007][T18633] usb 5-1: config 0 descriptor?? [ 1128.316809][T18633] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input211 [ 1128.549532][T18633] usb 5-1: USB disconnect, device number 14 15:55:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) ioctl$TCSETS(r1, 0x5402, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x8001004000000016) 15:55:20 executing program 0: r0 = inotify_init1(0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000000c0)) 15:55:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x4}, 0x1c) 15:55:20 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, 0x3, 0x1, 0x1, 0x4}}, 0x2e) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x3c, 0x0, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x4000000}]}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}]}, 0x3c}}, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x8, &(0x7f0000001540)=[{&(0x7f0000001680)="439f9021c375930e5b809e8f0374922713d83d8ae6f5feddf208a6b6855551a82647e433c2d1632fddae58229350091c2606261cc1d4db180545b88c9a0e8215cc1c41e405f4d5be7f44d2bf7dab", 0x4e}, {&(0x7f00000001c0)="dcb0ae569ef375ec1dd3980f35d4080cd4c7c228e7fa9e0ba88ed05cb90a5848479f19f4b2b1b3400fe81f1236ef392db305eba584f9553d2ee1d243c3067465e4f5a5d757ba11e348decfd2a7a5fbcf370cbe351f1721d9fe19ecd8aa", 0x5d, 0x7ff}, {&(0x7f0000000240)="bf4fa18ca2be686ec150b3b67851451f2eaf1d7594a788c80bc76302052d2ee6a14752e1c912dc1059de59918d2e86fda977a3daab3fb078f12efe866df755d4ac330c4ae77655592a516cd43e4cf8935d1be6d3f7256a4c7c17770a11a1b21a370da103d5679231d84c18dea1fffca6f205d3cc1956e332161bb8099d37", 0x7e, 0x8}, {&(0x7f00000002c0)="11e4a9198093ea8a1867e07a81a1c5377315d3c964ecea25144e249aae948b705b5af4dc4ae3e355a6bfd8815bcc480b090a3cce818e03bf88a6f0e57fe7dbd2ebb16abff12fdc87afd67260f7b3a634753d17a40032804de4533b26ba02c10dea058739a871a9efe5c8f3cf9d1757cc4a32b53f2feab12917907448a5233bdde0d6def574842133128f24dd9d3ab35990f725c48f59e28ed5a817c9732f95f13a9566ccbae03850b4f8", 0xaa, 0x80000000}, {&(0x7f0000000380)="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", 0x1000, 0x8}, {&(0x7f0000001380)="f007575cbc337bfa8d2969d28e8376da7b291f2964e4f2ed381f95e0d85c7b13f769805f2c75eb71564057a1b34f111cf10f22d8d84283edd9719f598fbb1b63a8f8ba2e08fc070b71205c9f213684640489b5e4affd09d47ff69d3f6d0cbe288426ee36179a0122c1178c", 0x6b, 0x6}, {&(0x7f0000001400)="10dee3e7d4a1695c72ceda88861ef3945271dbd033e2f379151fc8fafe93f1f7d00a22cce7db0293e250b621a84dcedd58a65b5cf9b45dc4176b803c6bda4d02acd3efe097d735e220653ee9aaa504595c31e3a3356d7a73d7f4fb25943b", 0x5e, 0x800}, {&(0x7f0000001480)="4550d031327e40c72a695b5dbec9188f77870bafda1495e7755a073ffdbd0047cff4d5ac98995b65882968efc9eddc3279dd22b4194fa827203209f506981617a927b8ac687d6a85b78d798f32dd3b121477a7f16d79c2e0a19ded6a1dfbf891cd90dc3525650295cd70b79931d05c36e8fe8f370e4277e671d8290d3faf1033e8a8a93e873e34bf84c7519f69aef3d7a146c7", 0x93, 0x8}], 0x800000, &(0x7f00000015c0)={[{@nodots='nodots'}, {@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@fat=@tz_utc='tz=UTC'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@obj_role={'obj_role', 0x3d, ')]'}}, {@fsname={'fsname', 0x3d, 'syz1\x00'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@dont_hash='dont_hash'}]}) r4 = dup2(r2, r3) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) 15:55:20 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000400), 0x8, 0x0) ioctl$EVIOCGABS20(r0, 0x5450, 0x0) 15:55:20 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010", @ANYRES32=0x0, @ANYBLOB="2f50362303102b762385b4b7ac872b0a7da2c2ea074ce11fec8182680b183e8b3428c19e93a9f0f9c2727d2d7eaead1f5dfcf595e4c9577b515d1981a282be7a4f17213bee7cfc96fd85525940be234dde6ec36e7097b6df2de765436bd1ceb3c8eba23ae7db24a518ee8f4ff9c2830d32db2c4ecb061af3d725d2c913fa8fd6a21293df22cbeb60b48b282ab8f3bb182522468f9fc0cc3f524c77f371c690acbfdf92f43d6890c4817e", @ANYRES32=0x0], 0x0) [ 1144.349367][ T26] usb 5-1: new full-speed USB device number 15 using dummy_hcd 15:55:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VT_RESIZE(r0, 0x5451, 0x0) 15:55:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x24049040) [ 1144.508882][T18633] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1144.858288][ T26] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1144.867631][ T26] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1144.876141][ T26] usb 5-1: Product: syz [ 1144.880788][ T26] usb 5-1: Manufacturer: syz [ 1144.978682][ T26] usb 5-1: config 0 descriptor?? [ 1144.999218][T18633] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1145.009904][T18633] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1145.018925][T18633] usb 6-1: Product: syz [ 1145.023303][T18633] usb 6-1: Manufacturer: syz [ 1145.038790][ T26] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input212 [ 1145.232828][ T8711] usb 5-1: USB disconnect, device number 15 [ 1145.301812][T18633] usb 6-1: config 0 descriptor?? [ 1145.454105][T18633] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input213 15:55:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x5}, 0x1c) 15:55:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') close(r0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = dup(r1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r1, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r2, &(0x7f0000000200)="96", 0x1, 0x0, 0x0, 0x0) recvfrom$packet(r2, 0x0, 0x0, 0x12160, 0x0, 0x114) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) [ 1145.715478][ T26] usb 6-1: USB disconnect, device number 35 [ 1146.019154][T18633] usb 5-1: new full-speed USB device number 16 using dummy_hcd 15:55:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x400000000000013, &(0x7f0000000480)=0x100000001, 0x6c64f6956a8bc116) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) write(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 1146.497422][ T26] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1146.531716][T18633] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1146.541587][T18633] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1146.550804][T18633] usb 5-1: Product: syz [ 1146.555217][T18633] usb 5-1: Manufacturer: syz 15:55:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x20000440) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) [ 1146.789557][T18633] usb 5-1: config 0 descriptor?? [ 1146.836359][T18633] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input214 [ 1147.759849][ T26] usb 6-1: device descriptor read/all, error -71 [ 1147.814946][T18351] usb 5-1: USB disconnect, device number 16 15:55:36 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r0, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x72) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 15:55:36 executing program 5: ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0x9}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) 15:55:36 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000240)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000280)=0x28) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040081}, 0x8000) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x80) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000180)) 15:55:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x6}, 0x1c) 15:55:36 executing program 0: r0 = msgget$private(0x0, 0x0) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/86) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setfsuid(r1) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) semctl$IPC_INFO(r2, 0x0, 0x3, &(0x7f00000002c0)=""/252) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000040)=""/121) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000140)) shmctl$SHM_LOCK(r2, 0xb) 15:55:36 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000680)='fd/3\x00') ioctl$KDADDIO(r0, 0x540b, 0x0) 15:55:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0\x00', 0x8000000000001011}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2}, 0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000100), 0x14) r4 = dup(r3) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 15:55:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) dup3(r0, r1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x13, &(0x7f0000000000)={0x0, @multicast2, 0x0, 0x0, 'fo\x00'}, 0x2c) [ 1159.797358][T18633] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 1159.808551][ T8711] usb 6-1: new full-speed USB device number 38 using dummy_hcd 15:55:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000040)={@empty, @remote}, 0x8) [ 1160.199653][ T8711] usb 6-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 1160.210701][ T8711] usb 6-1: too many endpoints for config 0 interface 0 altsetting 171: 37, using maximum allowed: 30 [ 1160.222599][ T8711] usb 6-1: config 0 interface 0 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1160.236007][ T8711] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1160.320101][T18633] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1160.329944][T18633] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1160.338985][T18633] usb 5-1: Product: syz [ 1160.343487][T18633] usb 5-1: Manufacturer: syz [ 1160.412301][ T8711] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1160.421842][ T8711] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1160.431313][ T8711] usb 6-1: Product: syz [ 1160.435672][ T8711] usb 6-1: Manufacturer: syz [ 1160.478191][T18633] usb 5-1: config 0 descriptor?? 15:55:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x7}, 0x1c) [ 1160.532840][T18633] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input215 15:55:37 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = dup2(r1, r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) tkill(r0, 0x1000000000016) [ 1160.640576][ T8711] usb 6-1: config 0 descriptor?? [ 1160.725085][T23062] tipc: Started in network mode [ 1160.730658][T23062] tipc: Own node identity aaaaaaaaaa29, cluster identity 4711 [ 1160.739731][T23062] tipc: Enabled bearer , priority 0 15:55:37 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000080)=""/115) [ 1160.823767][T18633] usb 5-1: USB disconnect, device number 17 [ 1160.923956][ T8711] pegasus_notetaker 6-1:0.0: Invalid number of endpoints [ 1160.933016][ T8711] pegasus_notetaker: probe of 6-1:0.0 failed with error -22 [ 1161.083946][ T8711] usb 6-1: USB disconnect, device number 38 15:55:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x89) close(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) tkill(r2, 0x1000000000016) [ 1161.617284][T18633] usb 5-1: new full-speed USB device number 18 using dummy_hcd 15:55:38 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000200)) [ 1161.859142][ T8711] tipc: 32-bit node address hash set to aaaa8300 [ 1162.098459][T18633] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1162.108934][T18633] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1162.117807][T18633] usb 5-1: Product: syz [ 1162.122153][T18633] usb 5-1: Manufacturer: syz [ 1162.180209][T18633] usb 5-1: config 0 descriptor?? [ 1162.228253][T18633] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input216 [ 1162.354230][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1162.366014][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1162.373500][ T4874] loop3: p2 < > 15:55:39 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000040)=0xffffffff) 15:55:39 executing program 2: r0 = inotify_init1(0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)) 15:55:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ftruncate(r0, 0x40) read$snapshot(r0, &(0x7f0000000100)=""/21, 0xffffffffffffff96) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201ff7fc9427210200e01019122ffe7000109021b0001000000000904000001ab25510009058200102777cef250a68f46734e9c488a7bf627bab3f301c093d41fc9c36e9fc7c1a4bb77bea69e6ecb46a75869a800b020d16e83f3f0abc152a590def9de44e8b14833856394d0540f5786be1c0406022925081bb6adef96ee2a2b1b78297c24d9e03721fbe8549e09b8b8145fc2c1f10618e59f84dd240191b59526558465d9ad8c36261e02d972ba65658a478e456ffdb8a03bdf7e6b73fb1146a2c795a06e3d894d3230e509e156bc0298affdfa1c78c1d8244df228"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = open(&(0x7f0000001900)='./file0\x00', 0x8000, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000001940)={0x31}, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}]}, 0x34}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000140)=@v2={0x2, @aes256, 0x6a82644e31520220, [], "6cb086148b8bc23e6c12f32c870b1391"}) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e23, @broadcast}}) 15:55:39 executing program 3: r0 = inotify_init1(0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 15:55:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x8}, 0x1c) 15:55:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) [ 1162.416535][ T9581] usb 5-1: USB disconnect, device number 18 15:55:39 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000980)={&(0x7f0000000800), 0xc, &(0x7f0000000940)={0x0}}, 0x0) 15:55:39 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 15:55:40 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4}, 0x1c) write$evdev(r1, &(0x7f0000000d80)=[{}], 0x18) [ 1162.989270][T18633] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1163.137338][T18351] usb 5-1: new full-speed USB device number 19 using dummy_hcd 15:55:40 executing program 0: r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f000000a080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 1163.377397][T18633] usb 6-1: unable to get BOS descriptor or descriptor too short 15:55:40 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2001, 0x0) ioctl$BLKBSZSET(r0, 0x5452, &(0x7f00000024c0)=0x1) [ 1163.499987][T18633] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1163.507956][T18633] usb 6-1: can't read configurations, error -71 15:55:40 executing program 2: r0 = eventfd(0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 1163.658728][T18351] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1163.673889][T18351] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1163.683038][T18351] usb 5-1: Product: syz [ 1163.687466][T18351] usb 5-1: Manufacturer: syz [ 1163.802748][T18351] usb 5-1: config 0 descriptor?? [ 1163.877938][T18351] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input217 [ 1164.069156][T18351] usb 5-1: USB disconnect, device number 19 [ 1164.218112][T18633] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1164.388679][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1164.399159][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1164.406430][ T4874] loop3: p2 < > [ 1164.487367][T18633] usb 6-1: device descriptor read/64, error 18 [ 1164.877634][T18633] usb 6-1: device descriptor read/64, error 18 [ 1164.877884][T18351] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1164.997571][T18633] usb usb6-port1: attempt power cycle [ 1165.383986][T18351] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1165.393416][T18351] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1165.402238][T18351] usb 5-1: Product: syz [ 1165.406596][T18351] usb 5-1: Manufacturer: syz [ 1165.443336][T18351] usb 5-1: config 0 descriptor?? [ 1165.497243][T18351] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input218 [ 1165.717499][T18633] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1165.827673][T18633] usb 6-1: device descriptor read/8, error -71 15:55:43 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b00010000000000ffffffffffff5100890582001072abf062dccf2a6e715289"], 0x0) 15:55:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x9}, 0x1c) 15:55:43 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNATTACHFILTER(r0, 0x5452, &(0x7f0000000000)={0x0, 0x0}) 15:55:43 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) r1 = dup(r0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xf4}}, 0x0) 15:55:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r2, 0x1000000000016) 15:55:43 executing program 5: sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x2d8, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xab4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x468}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_ID={0x61, 0x3, "3cb945e53d581f8462976dd0127e14c716a151fead5cc959615096096822cc56e4bca964bf5c744b15505838c1d3d6376835d1edb4340924e3bfb1963a443e9d7d6fb2f1a19e4a3b076c3ff695bb37e984f4edf7ccdd6240dc457012a2"}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf89}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x27}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xbe}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffc01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@private2, @in=@loopback}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe4) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000ffe0140060400001020301090224000101015008090400ba02030100a809210001e60122ca0009058103000405831f"], &(0x7f0000000280)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x4, 0xff, 0x20, 0xff, 0x80}, 0x3f, &(0x7f0000000200)={0x5, 0xf, 0x3f, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x7ff, 0xf, 0x52, [0x3f00, 0x3fcf]}, @ss_container_id={0x14, 0x10, 0x4, 0x47, "2ddc54ed978f7895ee588a130a48b5ff"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x3, 0x8, 0x3, 0x32}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x3}]}, 0x1, [{0x2, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00']}]}) [ 1165.915106][T18351] usb 5-1: USB disconnect, device number 20 [ 1166.037715][T18633] usb 6-1: device descriptor read/8, error -71 15:55:43 executing program 3: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000001900)={0x0, "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"}) 15:55:43 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x800, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = gettid() ioctl$KDFONTOP_COPY(r2, 0x4b72, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xc, 0x19, &(0x7f0000000180)}) ioctl$sock_proto_private(r2, 0x0, 0x0) tkill(r3, 0xb) 15:55:43 executing program 2: r0 = epoll_create(0x40000acf) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1166.887688][ T3821] usb 5-1: new full-speed USB device number 21 using dummy_hcd 15:55:44 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x1b, &(0x7f0000000040)={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}}, {0xa, 0x0, 0x0, @remote}}, 0x5c) 15:55:44 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$KDSETMODE(r0, 0x5452, 0x2071dffe) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000000)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) 15:55:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xa}, 0x1c) [ 1167.258451][ T3821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.269378][ T3821] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1167.428389][ T3821] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1167.438037][ T3821] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1167.446714][ T3821] usb 5-1: Product: syz [ 1167.451282][ T3821] usb 5-1: Manufacturer: syz [ 1167.576808][ T3821] usb 5-1: config 0 descriptor?? [ 1167.775345][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1167.788306][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1167.795724][ T4874] loop3: p2 < > [ 1167.827734][T18351] usb 5-1: USB disconnect, device number 21 [ 1168.610228][ T3821] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1168.979396][ T3821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.989827][ T3821] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1169.177778][ T3821] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1169.188065][ T3821] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1169.197569][ T3821] usb 5-1: Product: syz [ 1169.201897][ T3821] usb 5-1: Manufacturer: syz [ 1169.250200][ T3821] usb 5-1: config 0 descriptor?? 15:55:46 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x8000) syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 15:55:46 executing program 5: r0 = openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x30301, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) 15:55:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 15:55:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x42) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = dup(r0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:55:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xf}, 0x1c) 15:55:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200800000000013, &(0x7f0000000340)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x31, 0x0, &(0x7f00000000c0)) [ 1169.614170][ T26] usb 5-1: USB disconnect, device number 22 15:55:47 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 15:55:47 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$BLKRRPART(r0, 0x5450, 0x0) 15:55:47 executing program 3: r0 = eventfd2(0x0, 0x0) write$P9_RAUTH(r0, &(0x7f0000000100)={0x14}, 0x14) 15:55:47 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 15:55:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x24}, 0x1c) 15:55:48 executing program 4: ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x7, 0xb4, 0x3, 0x1}) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="97010000c9427210000e01019122ffe700012802a209021b0001000000000904000001ab2551000905"], 0x0) 15:55:48 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6d9f}, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 15:55:48 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 1171.387453][ T8711] usb 6-1: new full-speed USB device number 43 using dummy_hcd 15:55:48 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81d36bb3019c13bd2321af3cf1a54f26fb0b71d0e6adfefcf1d8f7faf75e0f226bd917487960717142fa9ea43123751c0a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b32a83438810720a159cda903634e369a9e152ddca64057ff3c4744aeaccd0300000000000000a0c8055bbfc3a96d2e8910c2c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e3888ee5c867ddd58211d6ece1ccb0cd2b6d3cffd963218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa0000000000000000000000000000000000000000ddffffff020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f0300f41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b540500a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec309baed0495f06d058a73651d6fe048ba6866adebab53168770a71ad901ace383e418ef96c15b9a914dd1f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad380a447483cac394c7bbdcd0e3b1c39b6e0c410ade7a36b2635d60916de48a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73755539280b064bdaba71f897144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06dddeb61799257ab55ff413c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972ea3b77641467c89fa0f82e8440105051e5510a33dcda5e143fbf221fff161c12ca389cbe4c51b3fa00675cc175067d2a214f8c9d9b2ecf63016c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931ba3552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2af79b8d4c2bf0f7a2cb032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf7f9fe0bc9f2a1a7506d35e5eb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c010000000000000048a9dea00000b91d2309dc7ae49e4d5f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca165cbbbaa2935f602327484386b21b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67aedc00"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000a80)={0x0, 0x4000, &(0x7f0000000a00)=[{&(0x7f0000000280)="04", 0x140000}], 0x1}, 0x24002) [ 1171.672151][ T8711] usb 6-1: device descriptor read/64, error 18 [ 1171.773139][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1171.783567][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1171.791327][ T4874] loop3: p2 < > [ 1172.037620][ T26] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1172.068822][ T8711] usb 6-1: device descriptor read/64, error 18 15:55:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:55:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, &(0x7f0000000000), &(0x7f000089b000)}, 0x20) [ 1172.361286][ T8711] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 1172.428329][ T26] usb 5-1: config index 0 descriptor too short (expected 2466, got 27) [ 1172.436804][ T26] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 40 [ 1172.446046][ T26] usb 5-1: can't read configurations, error -22 15:55:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x54}, 0x1c) [ 1172.637467][ T8711] usb 6-1: device descriptor read/64, error 18 [ 1172.697492][ T26] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 1173.037658][ T8711] usb 6-1: device descriptor read/64, error 18 [ 1173.108231][ T26] usb 5-1: config index 0 descriptor too short (expected 2466, got 27) [ 1173.116699][ T26] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 40 [ 1173.125750][ T26] usb 5-1: can't read configurations, error -22 [ 1173.160802][ T8711] usb usb6-port1: attempt power cycle [ 1173.221200][ T26] usb usb5-port1: attempt power cycle [ 1173.453433][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1173.463683][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1173.471441][ T4874] loop3: p2 < > [ 1173.669243][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1173.680182][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1173.687683][ T4874] loop3: p2 < > [ 1173.897705][ T8711] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1173.977703][ T26] usb 5-1: new full-speed USB device number 25 using dummy_hcd 15:55:51 executing program 5: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x2, &(0x7f0000000040)=0x1) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0x12) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f00000000c0)={0x6, 0x1}) 15:55:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:55:51 executing program 0: 15:55:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x58}, 0x1c) 15:55:51 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x396, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x148) unlink(&(0x7f0000000280)='./file0\x00') [ 1174.208179][ T8711] usb 6-1: device descriptor read/8, error -71 [ 1174.213274][ T26] usb 5-1: config index 0 descriptor too short (expected 2466, got 27) [ 1174.223122][ T26] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 40 [ 1174.231903][ T26] usb 5-1: can't read configurations, error -22 [ 1174.417553][ T8711] usb 6-1: device descriptor read/8, error -71 [ 1174.487264][ T26] usb 5-1: new full-speed USB device number 26 using dummy_hcd 15:55:51 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000040)) r0 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="00010000", @ANYRES16=r0, @ANYBLOB="000426bd7000fcdbdf250200000014000200626f6e645f736c6176655f3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) geteuid() 15:55:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:55:51 executing program 2: 15:55:51 executing program 0: [ 1174.871712][ T26] usb 5-1: device descriptor read/8, error -71 15:55:52 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000040)={0x0, 0x1000, 0x8000}) r2 = openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x1412, 0x2, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) [ 1175.097685][ T26] usb 5-1: device descriptor read/8, error -71 [ 1175.221284][ T26] usb usb5-port1: unable to enumerate USB device 15:55:52 executing program 0: 15:55:52 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:55:52 executing program 2: 15:55:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xfc}, 0x1c) 15:55:52 executing program 0: [ 1175.851582][ T8711] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 1175.928138][ T26] usb 6-1: new full-speed USB device number 47 using dummy_hcd 15:55:53 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 15:55:53 executing program 2: [ 1176.350024][ T8711] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1176.359737][ T8711] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1176.369110][ T8711] usb 5-1: Product: syz [ 1176.373439][ T8711] usb 5-1: Manufacturer: syz [ 1176.418256][ T26] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1176.427984][ T26] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1176.436688][ T26] usb 6-1: Product: syz [ 1176.441351][ T26] usb 6-1: Manufacturer: syz [ 1176.538367][ T26] usb 6-1: config 0 descriptor?? [ 1176.569566][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1176.581330][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1176.588811][ T4874] loop3: p2 < > [ 1176.595899][ T26] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input219 [ 1176.601697][ T8711] usb 5-1: config 0 descriptor?? [ 1176.718731][ T8711] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input220 [ 1176.822571][ T26] usb 6-1: USB disconnect, device number 47 [ 1176.894465][ T8711] usb 5-1: USB disconnect, device number 27 [ 1177.526215][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1177.537516][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1177.544992][ T4874] loop3: p2 < > [ 1177.628376][ T26] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1177.641580][ T8711] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1177.900439][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1177.913699][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1177.921740][ T4874] loop3: p2 < > [ 1178.128013][ T8711] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1178.137627][ T8711] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1178.146649][ T8711] usb 5-1: Product: syz [ 1178.149023][ T26] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1178.151450][ T8711] usb 5-1: Manufacturer: syz [ 1178.161004][ T26] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1178.174616][ T26] usb 6-1: Product: syz [ 1178.179540][ T26] usb 6-1: Manufacturer: syz [ 1178.248920][ T8711] usb 5-1: config 0 descriptor?? [ 1178.252037][ T26] usb 6-1: config 0 descriptor?? [ 1178.316248][ T26] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input221 15:55:55 executing program 4: syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x103, 0x0) 15:55:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 15:55:55 executing program 0: 15:55:55 executing program 2: [ 1178.371697][ T8711] usb 5-1: can't set config #0, error -71 [ 1178.421761][ T8711] usb 5-1: USB disconnect, device number 28 15:55:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x218}, 0x1c) [ 1178.653890][ T12] usb 6-1: USB disconnect, device number 48 15:55:55 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ftruncate(r0, 0x40) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000040)={0x8, 0x2, 0x6}) 15:55:55 executing program 2: 15:55:55 executing program 0: 15:55:56 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) [ 1178.993046][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1179.004661][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1179.012112][ T4874] loop3: p2 < > [ 1179.237304][ T8711] usb 5-1: new low-speed USB device number 29 using dummy_hcd 15:55:56 executing program 2: [ 1179.477487][T18351] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 1179.478963][ T8711] usb 5-1: Invalid ep0 maxpacket: 16 15:55:56 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:55:56 executing program 0: [ 1179.667675][ T8711] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 1179.907555][ T8711] usb 5-1: Invalid ep0 maxpacket: 16 [ 1179.913828][ T8711] usb usb5-port1: attempt power cycle [ 1180.018631][T18351] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1180.028248][T18351] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1180.036776][T18351] usb 6-1: Product: syz [ 1180.041985][T18351] usb 6-1: Manufacturer: syz [ 1180.074424][T18351] usb 6-1: config 0 descriptor?? [ 1180.128596][T18351] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input222 [ 1180.342447][T18351] usb 6-1: USB disconnect, device number 49 [ 1180.687273][ T8711] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 1180.778026][ T8711] usb 5-1: Invalid ep0 maxpacket: 16 [ 1180.938126][ T8711] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 1181.028558][ T8711] usb 5-1: Invalid ep0 maxpacket: 16 [ 1181.041748][ T8711] usb usb5-port1: unable to enumerate USB device [ 1181.154787][T18351] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 1181.438739][T18351] usb 6-1: device descriptor read/64, error 18 [ 1181.847522][T18351] usb 6-1: device descriptor read/64, error 18 15:55:59 executing program 4: r0 = openat$mice(0xffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0xc80) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000280)={0xa, 0x2ad, 0x2, 0x9, 0x0, 0x2}) sendto$ax25(0xffffffffffffffff, &(0x7f0000000080)="3a5cba115305cea9d085000000000000dbc08328d74c93da01cf9f5405bc05caa62018936119c5c3d2adce6e8b3da6cb65eb6e317a7d3f230ebe27979ce72ec76d8fde7a70a120b9d4a76074788e6fceb2129f428d288d7ad858dbbb5ad5bbf058dcac59589acf57da17153afe9cc1970be52eb2c4a92580f8d785ac82c65d905916eaa5643c55bcd16588e32d39ee0ce49de3a8a59c808a217cf127fc706e6c0300000085e6916dc0922437435bef83b9a0a4b679f8b985b7806f7974766f78b16c274bd35d106f1194f26dedd4e742a26c0a699de03a1d6ac6876ff76f62f5705c3838208c29568eca320e864684", 0xef, 0x4000050, &(0x7f0000000000)={{0x3, @bcast, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000240)={0x0, 0x57, &(0x7f00000001c0)="1f89d287897aba323c0084b3b1bd58db4b589c99a914d5c8b55a98a22ebe225f38f901b937ae7362d13a36f9f39d663e324e9bb751160d1660a3238411885cb23fdf25f11f5942d5f57ab6d55bfa680350a2f069ae66c8"}) 15:55:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x241}, 0x1c) 15:55:59 executing program 2: 15:55:59 executing program 0: 15:55:59 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) [ 1182.137812][T18351] usb 6-1: new full-speed USB device number 51 using dummy_hcd 15:55:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYRES32=0x0], 0x0) 15:55:59 executing program 0: 15:55:59 executing program 2: 15:55:59 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:56:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) syz_mount_image$f2fs(&(0x7f0000000080)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x7, &(0x7f0000001580)=[{&(0x7f0000000100)="9186f82316d6ac4460d2d5008984508946174aa197b2747365ed176c8be8ce905273e5b25ce287738b1ee90c3f48c20a1d1c4b143f1f939bc6d6ed9fc07f40ace1b8df06beaddd82d69c47", 0x4b, 0x1}, {&(0x7f00000001c0)="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", 0x1000, 0x6}, {&(0x7f00000011c0)="e1d4720c538b3153125acea65c5604424efc7423d21dd222306de4cdf2f37c54f6cd9e9763bee344132b69092922f901880164f8b725e2dec9571c50d63d2d95c2c656a63909f169e8eb", 0x4a, 0x5}, {&(0x7f0000001240)="d160a8c7faee94c1c71a54fc1d3af44b6458cd5487c080a14c69b7148a856575056566b3e1ddd286619d162ad3443024d957940717b6fc016669cc96a199aaa909db5c061368ed03740b633cd3f400f4d8d9", 0x52, 0xcbc1}, {&(0x7f00000012c0)="115fefe7dd6a51bc5753e505ccade3e8d6257431a4287fe83b302988d8d0b7cabe5667201688f0714780be0340fac8db0ec31e0cf643129a9b7c802153105f9a06ef7bef2c65792011a97ba0cc068653ebf83fdc05fa0c6097a19998aecaf47efb034256af426fa38a04fe72f21183b3443c7a59b2e4bca4fa12480c9052dbf8c162ba5e521e516f7ddb251cadc26f7f4208d59ad1d7f949af92c93d3d5e7056be4062ec1a3d63dd00c55503ffb21608fa5f2c05875a879f5c0643c325caca0d8c586570aed0ef78d605b29108bfaee9a1fb15a10d57e4ad7f88d698455fd63fab973953d1baa6b8da1e6f6044692b10", 0xf0, 0xfffffff7}, {&(0x7f00000013c0)="f8c19e8d95a7d6e5087cf2fcaca1e838f7f63cb684b78cbd7e260733116924069a7b5ec15b78e3eb20f9170b2a1bf2527b064e59096711851dc54b5e690f562c3f7298c751921baec1d8ba97ecb63c2264df6927f46abd096d8b21eb5a96b68b9fdcf84aed36ae941cae67c00b46641eac76b5697c1256a3598c25284942293ef69aa23cc928a54c0a24c51fbdc144a84eb29ac1ab92d40d53f8e6f39d5c1ae044cc413a02a66a555bf7b688067a51837d82810f1ab8a92ea0a015d4f86dc99531122023a95b081b4a485ca1285a7859c28d73279118bd466182260307128fd2bde9311b9a32e2a8", 0xe8}, {&(0x7f00000014c0)="48e0f2e81b9c03d56d5e8ffa0ac49822c30ae3492330bbf067cafdcad14e687dba89b8e192c510d953e04bca0029a8b99943a56e99411223f32c6c99c44b02d920ddfbd8854c281c45d36f9f3133a84f7d6db826a009aa2fc7cf26bb6f23be1a43e7a42a8d660faeb6b19320b0179311bc821d79925acf685d73ff56ab530edf84e1c5f8d01e84ba91df0ce8", 0x8c, 0x9}], 0x1824, &(0x7f0000001600)={[{@data_flush='data_flush'}], [{@measure='measure'}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x65, 0x62, 0x66, 0x36, 0x66, 0x38, 0x62], 0x2d, [0xacd26a82d32cb333, 0x37, 0x66, 0x36], 0x2d, [0x66, 0x64, 0x34, 0x35], 0x2d, [0x61, 0x30, 0x30, 0x31], 0x2d, [0x66, 0x98, 0x38, 0x37, 0x64, 0x37, 0x66, 0x64]}}}]}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000001640)=0x1f, 0x4) [ 1183.217924][T18351] usb usb6-port1: attempt power cycle 15:56:00 executing program 2: 15:56:00 executing program 0: perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) 15:56:00 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:56:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x300}, 0x1c) 15:56:01 executing program 2: 15:56:01 executing program 0: [ 1183.967249][T18351] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1184.028072][ T8711] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 1184.159304][T18351] usb 6-1: device descriptor read/8, error -61 15:56:01 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) [ 1184.297942][ T8711] usb 5-1: device descriptor read/64, error 18 [ 1184.439255][T18351] usb 6-1: device descriptor read/8, error -61 [ 1184.583003][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1184.593478][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1184.602394][ T4874] loop3: p2 < > [ 1184.707443][ T8711] usb 5-1: device descriptor read/64, error 18 [ 1184.707544][T18351] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1184.928937][T18351] usb 6-1: device descriptor read/8, error -61 [ 1184.977493][ T8711] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1185.208996][T18351] usb 6-1: device descriptor read/8, error -61 [ 1185.247257][ T8711] usb 5-1: device descriptor read/64, error 18 [ 1185.257945][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1185.269503][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1185.277534][ T4874] loop3: p2 < > [ 1185.331446][T18351] usb usb6-port1: unable to enumerate USB device [ 1185.647227][ T8711] usb 5-1: device descriptor read/64, error 18 15:56:02 executing program 0: 15:56:02 executing program 2: 15:56:02 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:56:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x4b8}, 0x1c) [ 1185.768719][ T8711] usb usb5-port1: attempt power cycle [ 1185.802528][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1185.814066][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1185.822310][ T4874] loop3: p2 < > [ 1186.385084][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1186.397732][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1186.405552][ T4874] loop3: p2 < > 15:56:03 executing program 2: 15:56:03 executing program 5: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x6, 0x7, 0xfffffffffffff800, 0x0, 0x7, 0x80000001, 0x5, 0xfffffffd, 0x1, 0x2f, 0xffffffffffffffe1, 0x28be, 0x9e, 0x400000004000}}) syz_usb_connect(0x2, 0x2d, &(0x7f0000001000)=ANY=[@ANYRES16=r0], 0x0) 15:56:03 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:56:03 executing program 0: 15:56:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x88, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x6130}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e22, 0x0, @mcast1, 0xc7}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e24, @broadcast}]}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={r2, 0x7fffffff, 0x10}, &(0x7f0000000280)=0xc) [ 1186.548036][ T8711] usb 5-1: new full-speed USB device number 35 using dummy_hcd 15:56:03 executing program 2: 15:56:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x500}, 0x1c) [ 1186.978198][ T12] usb 6-1: new full-speed USB device number 54 using dummy_hcd 15:56:04 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) [ 1187.072370][ T8711] usb 5-1: device not accepting address 35, error -71 15:56:04 executing program 0: [ 1187.247995][ T12] usb 6-1: device descriptor read/64, error 18 15:56:04 executing program 2: [ 1187.649330][ T12] usb 6-1: device descriptor read/64, error 18 15:56:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000000801030000000000000000000000000900010073797a3100000000040004800500030000000000060002401200000029c6ba5f8aa29708ff570d74ee19ff561de77c3c4b1aed30ca32f0f5989fbee74ca038261e906ec21326b936e4794a1cd4cc095833778a3a263055e561478a2bb21a3ae1eb3bf02d7676d7085428c439afd9c6e3f37495d3836e391d1bc66c317048f820a8f001f20154b22fecc66b4334f539664e7335118c67c800bbd6b0933fdaf60405adf8b65bc6654faf4f73fd8edd40e66976d6a5d973c46ae8533f2ba3f04455bd49a4ee3887f5528207"], 0x34}}, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000100)={0xfffffffffffffffa, 0x0, 0xe86}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) r3 = openat$full(0xffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x103000, 0x0) write$FUSE_LSEEK(r3, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xfffffffffffffffc}}, 0x18) syz_usb_connect(0x4, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYRES16=r0, @ANYRESOCT, @ANYRES64=r0, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRESOCT=r2], 0x0) 15:56:04 executing program 0: 15:56:04 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) [ 1187.928123][ T12] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 1188.199827][ T12] usb 6-1: device descriptor read/64, error 18 [ 1188.597771][ T12] usb 6-1: device descriptor read/64, error 18 [ 1188.721369][ T12] usb usb6-port1: attempt power cycle [ 1189.298524][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1189.309465][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1189.316752][ T4874] loop3: p2 < > [ 1189.437693][ T12] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 1189.479749][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1189.490377][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1189.500329][ T4874] loop3: p2 < > [ 1189.628804][ T12] usb 6-1: device descriptor read/8, error -61 15:56:06 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:56:06 executing program 2: 15:56:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x58c}, 0x1c) 15:56:06 executing program 0: 15:56:06 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1f000, 0x4103) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x10}]}]}]}, 0x38}}, 0x0) sendmsg$xdp(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x2c, 0x0, r3, 0xa}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)="c594a5939554224d7cf6f5b83f4e1a690436f7125b8ecc8533120a46aca8f7ae916cf6b66cc48994f74f35fd756f", 0x2e}, {&(0x7f0000000140)}, {&(0x7f0000000180)="feb8b9d25fcdf8df277a4df7040289d6cc2022c3c2bd19cd16279267307839e501277e541d5743a547c2a45ba9c2d7a60a56ce62c06c9a20352d50db4f5fe2befd5a74f01c15bebb7b31e451240153f59e8cd29a6909f5b2ada4271b83451ba0fa7016a957f88e02689bdd5bf99b4c396a3acaec5e74d2cda681961748d190b8a1d502d7d821d3da4a7fc775e4a4863d17527510c808e7e909a85edb94a7ef6ab4c2b4b8ce34f8a70c47ab175d3fc0083d949bd28439d0807da335647a55419543326f90c4c0fa1aaf609fd6c3468a089375a0ef2ccf3a38694f226c098a16aa5dd6a979bcbe019390c369dc826a5b7ad3c9097b", 0xf4}], 0x3}, 0x8000000) [ 1189.837590][ T12] usb 6-1: device descriptor read/8, error -71 15:56:07 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0x40000, 0x0, [0x1, 0x277e, 0xff, 0x4, 0xff, 0x10001, 0x7fffffff, 0x346]}) r0 = openat$vsock(0xffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x404000, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x168, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x416f1889}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62973b61}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xddc7}]}, {0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9d36d2}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7cbd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38d68cf}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x11ca72246d0595e7}, @NLBL_CIPSOV4_A_MLSCATLST={0xcc, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd91cef8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe1be}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25c51cde}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62c85d75}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b7c76c3}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x88f0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12d7eb3a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x10b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc82c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x295913a}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28f36331}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbab7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d7fe4b8}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ee1e02b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3be5fa6e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf77792}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x786f918b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x50ae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8bf7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a9a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad07}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8f2ae37}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000004}, 0x5) 15:56:07 executing program 2: 15:56:07 executing program 0: 15:56:07 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:56:07 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000002c219e0000000000000019122ffe700e609021b00012000001d5c6ec580bc2895976b235c9aef4431f304000001ab2551000905"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000)) ftruncate(r0, 0x40) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) 15:56:07 executing program 0: [ 1190.629127][ T12] usb 6-1: new full-speed USB device number 57 using dummy_hcd 15:56:07 executing program 2: 15:56:07 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:56:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x600}, 0x1c) [ 1190.978057][ T12] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1190.987680][ T12] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1191.000320][ T12] usb 6-1: Product: syz [ 1191.007548][ T12] usb 6-1: Manufacturer: syz [ 1191.013984][T18633] usb 5-1: new full-speed USB device number 37 using dummy_hcd 15:56:08 executing program 0: [ 1191.285852][ T12] usb 6-1: config 0 descriptor?? [ 1191.291925][T18633] usb 5-1: device descriptor read/64, error 18 [ 1191.365562][ T12] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input223 15:56:08 executing program 2: [ 1191.584229][ T12] usb 6-1: USB disconnect, device number 57 15:56:08 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) [ 1191.687507][T18633] usb 5-1: device descriptor read/64, error 18 [ 1191.961244][T18633] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 1192.237755][T18633] usb 5-1: device descriptor read/64, error 18 [ 1192.312693][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1192.323093][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1192.330366][T18351] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 1192.330589][ T4874] loop3: p2 < > [ 1192.627382][T18633] usb 5-1: device descriptor read/64, error 18 [ 1192.747764][T18633] usb usb5-port1: attempt power cycle [ 1192.809966][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1192.820539][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1192.828141][ T4874] loop3: p2 < > [ 1192.877702][T18351] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1192.887144][T18351] usb 6-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1192.895633][T18351] usb 6-1: Product: syz [ 1192.900166][T18351] usb 6-1: Manufacturer: syz [ 1192.916791][T18351] usb 6-1: config 0 descriptor?? [ 1192.969429][T18351] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input224 15:56:10 executing program 5: syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x0) 15:56:10 executing program 2: 15:56:10 executing program 0: 15:56:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) [ 1193.243947][T18351] usb 6-1: USB disconnect, device number 58 [ 1193.497781][T18633] usb 5-1: new full-speed USB device number 39 using dummy_hcd 15:56:11 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x7, 0x0, 0x9, 0x0, "2cb25d012013950dfd7f3c4396a966f25d006fef7e1175e0b3b30a783c0300"}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffad7cc9b1744bd1543f344b9fe7002551000905820010"], 0x0) 15:56:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x700}, 0x1c) [ 1194.038568][T18633] usb 5-1: device descriptor read/8, error -71 15:56:11 executing program 2: 15:56:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:56:11 executing program 0: [ 1194.247867][T18633] usb 5-1: device descriptor read/8, error -71 15:56:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:56:11 executing program 0: 15:56:12 executing program 2: 15:56:12 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0) [ 1195.040188][T18633] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 1195.177536][T18633] usb 5-1: too many configurations: 201, using maximum allowed: 8 [ 1195.298167][T18633] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1195.306203][T18633] usb 5-1: can't read configurations, error -61 15:56:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x900}, 0x1c) 15:56:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) [ 1195.420214][T18633] usb usb5-port1: unable to enumerate USB device 15:56:12 executing program 0: [ 1195.797359][T18633] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 1195.886457][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1195.897331][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1195.904781][ T4874] loop3: p2 < > [ 1196.067759][T18633] usb 6-1: device descriptor read/64, error 18 [ 1196.460300][T18633] usb 6-1: device descriptor read/64, error 18 [ 1196.469367][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1196.480106][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1196.487712][ T4874] loop3: p2 < > [ 1196.727757][T18633] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 1196.997466][T18633] usb 6-1: device descriptor read/64, error 18 [ 1197.387437][T18633] usb 6-1: device descriptor read/64, error 18 [ 1197.508494][T18633] usb usb6-port1: attempt power cycle 15:56:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:56:14 executing program 2: 15:56:14 executing program 0: 15:56:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xa00}, 0x1c) 15:56:14 executing program 4: r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) sendto$inet(r0, &(0x7f0000000180)="a44c8fc2106992bcb0d6b47bc1eaaf0739b823a688010ed841d605291298045473a543cbe0cbbd52c866f8fc3e0edc6757c6194bc311582a21495ae386d72b25aaea6bca9eb3c4287cf486c3936c819785f04021d9843167d53ade49ed542b6a6d81c40ea9d81301d4e607d4ecb8b2e5b0a8b71dab081efd", 0x78, 0x800, &(0x7f0000000200)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ftruncate(r1, 0x40) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000140)) 15:56:15 executing program 2: [ 1198.238323][T18633] usb 6-1: new full-speed USB device number 61 using dummy_hcd 15:56:15 executing program 0: 15:56:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:56:15 executing program 5: accept4$tipc(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="10010000c9427210200e01019122ffe7c3d665021b0001000000000904000001ab25510009058200108515bfedafe890e728310706d6803fff0722952875d9d52a800972a087920ae70d2f7957c5d8965e6dd97cf784d8336531e845d486b14ab96acb49396d4b716aeec4a1089e65f7d40d2897dc87e743f908c70fc3fc752fb7908935b1175d94685efedf9554a3475e75b245ba05f23da9165b6da99fd4cbe09bc3c722329d39fb38e7844982158c259342ca38afdeae42340fe2f7c939b0d661d92eb9a66046530f11bc238c02e7139ddcd3d64d12c4cca6"], 0x0) r0 = gettid() capget(&(0x7f0000000080)={0x19980330, r0}, &(0x7f0000000200)) sched_getscheduler(r0) [ 1198.487486][T18633] usb 6-1: device descriptor read/8, error -71 [ 1198.630454][T18351] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1198.697645][T18633] usb 6-1: device descriptor read/8, error -71 15:56:15 executing program 2: [ 1198.887558][T18351] usb 5-1: Using ep0 maxpacket: 16 15:56:16 executing program 0: 15:56:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xf00}, 0x1c) [ 1199.148765][T18351] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1199.158172][T18351] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1199.166687][T18351] usb 5-1: Product: syz [ 1199.171296][T18351] usb 5-1: Manufacturer: syz 15:56:16 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) [ 1199.310759][T18351] usb 5-1: config 0 descriptor?? [ 1199.356161][T18351] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input225 [ 1199.487429][T18633] usb 6-1: new full-speed USB device number 62 using dummy_hcd 15:56:16 executing program 2: [ 1199.585846][T18351] usb 5-1: USB disconnect, device number 41 [ 1199.620413][T18633] usb 6-1: too many configurations: 214, using maximum allowed: 8 [ 1199.709262][T18633] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 101 [ 1199.718357][T18633] usb 6-1: can't read configurations, error -22 [ 1199.774893][T18633] usb usb6-port1: unable to enumerate USB device 15:56:16 executing program 0: 15:56:17 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:56:17 executing program 4: r0 = socket(0x2b, 0xa, 0x8) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000040)={@fixed={[], 0x10}, 0x24}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x0) 15:56:17 executing program 2: 15:56:17 executing program 0: 15:56:17 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) [ 1201.188036][T12789] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1201.457845][T12789] usb 5-1: device descriptor read/64, error 18 [ 1201.917746][T12789] usb 5-1: device descriptor read/64, error 18 15:56:19 executing program 5: 15:56:19 executing program 0: 15:56:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x1802}, 0x1c) 15:56:19 executing program 2: 15:56:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) [ 1202.217149][T12789] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1202.518532][T12789] usb 5-1: device descriptor read/64, error 18 15:56:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:56:19 executing program 0: 15:56:19 executing program 5: [ 1202.907521][T12789] usb 5-1: device descriptor read/64, error 18 [ 1203.028323][T12789] usb usb5-port1: attempt power cycle [ 1203.094400][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1203.104929][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1203.112405][ T4874] loop3: p2 < > [ 1203.747319][T12789] usb 5-1: new full-speed USB device number 44 using dummy_hcd 15:56:20 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) 15:56:20 executing program 2: 15:56:20 executing program 5: 15:56:20 executing program 0: 15:56:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:56:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x2000}, 0x1c) [ 1203.898784][T12789] usb 5-1: device descriptor read/8, error -71 [ 1204.127570][T12789] usb 5-1: device descriptor read/8, error -71 15:56:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:56:21 executing program 5: 15:56:21 executing program 0: 15:56:21 executing program 2: 15:56:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x0, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) [ 1204.630553][T12789] usb 5-1: new full-speed USB device number 45 using dummy_hcd 15:56:22 executing program 0: [ 1205.009820][T12789] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1205.019386][T12789] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1205.028157][T12789] usb 5-1: Product: syz [ 1205.032477][T12789] usb 5-1: Manufacturer: syz [ 1205.202548][T12789] usb 5-1: config 0 descriptor?? [ 1205.264351][T12789] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input226 [ 1205.453330][ T8711] usb 5-1: USB disconnect, device number 45 [ 1205.593805][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1205.604187][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1205.611736][ T4874] loop3: p2 < > [ 1205.841799][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1205.852669][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1205.860122][ T4874] loop3: p2 < > [ 1206.158054][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1206.168469][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1206.175745][ T4874] loop3: p2 < > [ 1206.247640][T18633] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 1206.738496][T18633] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1206.748019][T18633] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1206.756547][T18633] usb 5-1: Product: syz [ 1206.761583][T18633] usb 5-1: Manufacturer: syz [ 1206.806723][T18633] usb 5-1: config 0 descriptor?? [ 1206.937950][T18633] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input227 15:56:24 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) 15:56:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x2400}, 0x1c) 15:56:24 executing program 5: 15:56:24 executing program 2: 15:56:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x0, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:56:24 executing program 0: [ 1207.211486][ T9581] usb 5-1: USB disconnect, device number 46 15:56:24 executing program 5: 15:56:24 executing program 0: 15:56:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x0, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:56:24 executing program 2: [ 1208.077226][ T9581] usb 5-1: new full-speed USB device number 47 using dummy_hcd 15:56:25 executing program 0: 15:56:25 executing program 2: [ 1208.378507][ T9581] usb 5-1: device descriptor read/64, error 18 [ 1208.777657][ T9581] usb 5-1: device descriptor read/64, error 18 [ 1208.962839][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1208.973399][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1208.980911][ T4874] loop3: p2 < > [ 1209.057280][ T9581] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1209.367964][ T9581] usb 5-1: device descriptor read/64, error 18 [ 1209.767232][ T9581] usb 5-1: device descriptor read/64, error 18 [ 1209.887609][ T9581] usb usb5-port1: attempt power cycle [ 1210.598228][ T9581] usb 5-1: new full-speed USB device number 49 using dummy_hcd 15:56:27 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b000100000000097522864117ae7fff11798a4804000001ab2551000905820010"], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) socket$netlink(0x10, 0x3, 0xb) 15:56:27 executing program 5: 15:56:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x28ff}, 0x1c) 15:56:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:56:27 executing program 2: 15:56:27 executing program 0: [ 1210.837254][ T9581] usb 5-1: device descriptor read/8, error -71 [ 1211.057434][ T9581] usb 5-1: device descriptor read/8, error -71 15:56:28 executing program 2: 15:56:28 executing program 5: 15:56:28 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:56:28 executing program 0: [ 1211.638272][ T9581] usb 5-1: new full-speed USB device number 50 using dummy_hcd 15:56:29 executing program 2: [ 1211.921380][ T9581] usb 5-1: config 0 has an invalid descriptor of length 17, skipping remainder of the config [ 1211.932038][ T9581] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 15:56:29 executing program 5: [ 1212.091741][ T9581] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1212.101201][ T9581] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1212.109878][ T9581] usb 5-1: Product: syz [ 1212.114185][ T9581] usb 5-1: Manufacturer: syz [ 1212.154444][ T9581] usb 5-1: config 0 descriptor?? [ 1212.418098][ T9581] usb 5-1: USB disconnect, device number 50 [ 1212.651132][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1212.661838][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1212.669176][ T4874] loop3: p2 < > [ 1213.207445][ T9581] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1213.597925][ T9581] usb 5-1: config 0 has an invalid descriptor of length 17, skipping remainder of the config [ 1213.608488][ T9581] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1213.747563][ T9581] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1213.756737][ T9581] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1213.765413][ T9581] usb 5-1: Product: syz [ 1213.769876][ T9581] usb 5-1: Manufacturer: syz [ 1213.814331][ T9581] usb 5-1: config 0 descriptor?? 15:56:31 executing program 4: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e010100010000000051000905820010"], 0x0) 15:56:31 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:56:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x2ee0}, 0x1c) 15:56:31 executing program 0: 15:56:31 executing program 5: 15:56:31 executing program 2: [ 1214.097697][T18633] usb 5-1: USB disconnect, device number 51 15:56:31 executing program 5: 15:56:31 executing program 2: 15:56:31 executing program 0: 15:56:31 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x0, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) [ 1215.000797][T18633] usb 5-1: new full-speed USB device number 52 using dummy_hcd 15:56:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x3f00}, 0x1c) [ 1215.289600][T18633] usb 5-1: no configurations [ 1215.294432][T18633] usb 5-1: can't read configurations, error -22 [ 1215.488274][T18633] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 1215.769087][T18633] usb 5-1: no configurations [ 1215.773907][T18633] usb 5-1: can't read configurations, error -22 [ 1215.831755][T18633] usb usb5-port1: attempt power cycle 15:56:33 executing program 5: [ 1216.591992][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1216.602328][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1216.609842][ T4874] loop3: p2 < > [ 1216.615214][T18633] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1216.758748][T18633] usb 5-1: no configurations [ 1216.763583][T18633] usb 5-1: can't read configurations, error -22 [ 1216.932213][T18633] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1217.067931][T18633] usb 5-1: no configurations [ 1217.072719][T18633] usb 5-1: can't read configurations, error -22 [ 1217.107185][T18633] usb usb5-port1: unable to enumerate USB device 15:56:34 executing program 4: prctl$PR_SET_TIMERSLACK(0x1d, 0x5) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9427210200e01019122ffe7000109021b0001000000000904000001ab2551000905820010"], 0x0) 15:56:34 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x0, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:56:34 executing program 0: 15:56:34 executing program 2: 15:56:34 executing program 5: 15:56:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x4000}, 0x1c) 15:56:35 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x0, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, &(0x7f000089b000)}, 0x20) 15:56:35 executing program 5: 15:56:35 executing program 0: 15:56:35 executing program 2: [ 1218.596539][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1218.607200][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1218.614533][ T4874] loop3: p2 < > 15:56:35 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) [ 1218.697554][ T8711] usb 5-1: new full-speed USB device number 56 using dummy_hcd 15:56:35 executing program 0: [ 1219.178232][ T8711] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=22.91 [ 1219.187772][ T8711] usb 5-1: New USB device strings: Mfr=255, Product=231, SerialNumber=0 [ 1219.196320][ T8711] usb 5-1: Product: syz [ 1219.200898][ T8711] usb 5-1: Manufacturer: syz [ 1219.328780][ T8711] usb 5-1: config 0 descriptor?? [ 1219.385757][ T8711] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input228 [ 1219.573144][T12789] usb 5-1: USB disconnect, device number 56 15:56:37 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@sndrcv={0x2c}], 0x2c}, 0x0) 15:56:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x4102}, 0x1c) 15:56:37 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) socket$inet6_sctp(0x1c, 0x0, 0x84) 15:56:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) 15:56:37 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002300)=[@dstaddrv6={0x1c, 0x84, 0xa, @mcast2}, @sndinfo={0x1c}], 0x38}, 0x0) 15:56:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x823, 0x0, 0x0, {0xa, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x10}]}]}]}, 0x38}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @multicast1}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6}}, &(0x7f00000002c0)=0xe4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x10}]}]}]}, 0x38}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000250800000000000000000a000000", @ANYRES32=r11, @ANYBLOB='\x00'/32], 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x120, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000001) 15:56:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) 15:56:37 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="1c1c4e2107000000000000000000000000000000000000010300"/125, @ANYRES32], &(0x7f00000003c0)=0x98) [ 1220.857332][ T8711] usb 5-1: new low-speed USB device number 57 using dummy_hcd 15:56:37 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000040), 0x8) 15:56:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/103, 0x67}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/176, 0xb0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r3, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x101) shutdown(r4, 0x0) 15:56:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={0xffffffffffffffff, 0x0, &(0x7f000089b000)}, 0x20) [ 1221.127466][ T8711] usb 5-1: device descriptor read/64, error 18 15:56:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x5400}, 0x1c) [ 1221.519589][ T8711] usb 5-1: device descriptor read/64, error 18 15:56:38 executing program 5: utimensat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) 15:56:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={0xffffffffffffffff, 0x0, &(0x7f000089b000)}, 0x20) [ 1221.785752][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1221.788568][ T8711] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 1221.797379][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1221.812048][ T4874] loop3: p2 < > 15:56:38 executing program 0: linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 15:56:39 executing program 5: r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x27, 0x0, 0x0) [ 1222.067615][ T8711] usb 5-1: device descriptor read/64, error 18 15:56:39 executing program 0: r0 = socket(0x2, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000000)={0x0, 0x2, "9386"}, &(0x7f0000000040)=0xa) [ 1222.457819][ T8711] usb 5-1: device descriptor read/64, error 18 [ 1222.577674][ T8711] usb usb5-port1: attempt power cycle [ 1223.121964][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1223.132221][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1223.140292][ T4874] loop3: p2 < > [ 1223.307475][ T8711] usb 5-1: new low-speed USB device number 59 using dummy_hcd [ 1223.393937][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1223.404212][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1223.411685][ T4874] loop3: p2 < > 15:56:40 executing program 4: ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0684113, &(0x7f0000000000)={0x0, 0x7, 0x6, 0xfffffffa, 0x2, 0x3, 0x8001, 0x23a6, 0x6, 0x7, 0xa01, 0x3}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='(:---\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24004810) 15:56:40 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={0xffffffffffffffff, 0x0, &(0x7f000089b000)}, 0x20) 15:56:40 executing program 5: r0 = socket(0x1c, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f00000000c0), &(0x7f0000000100)=0x18) 15:56:40 executing program 2: r0 = socket(0x1c, 0x1, 0x0) socket$inet6_sctp(0x1c, 0x5, 0x84) socket$inet6_sctp(0x1c, 0x5, 0x84) select(0x40, &(0x7f0000000040)={0x2c}, 0x0, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 15:56:40 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x1}, 0x1c) 15:56:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x5800}, 0x1c) [ 1223.537471][ T8711] usb 5-1: device descriptor read/8, error -71 [ 1223.747908][ T8711] usb 5-1: device descriptor read/8, error -71 15:56:40 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, 0x0}, 0x1c) 15:56:41 executing program 0: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/244, 0xf4}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000040)=""/198, 0xc6}, {0x0}], 0x2) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xffc2, 0x0, 0x0, 0x800e00778) shutdown(r2, 0x0) shutdown(r3, 0x0) [ 1224.231335][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1224.242180][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1224.249793][ T4874] loop3: p2 < > 15:56:41 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[{0x10}, {0x10}], 0x20}, 0x0) 15:56:41 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f0000000080), &(0x7f00000000c0)=0x18) 15:56:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000200)=""/63, 0x3f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xb}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f0000001700)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) shutdown(r3, 0x0) 15:56:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x80fe}, 0x1c) 15:56:41 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, 0x0}, 0x1c) 15:56:42 executing program 5: r0 = socket(0x2, 0x10000001, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) 15:56:42 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) writev(r0, 0x0, 0x0) 15:56:42 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, 0x0, 0x0}, 0x1c) 15:56:42 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r2) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x5b56, 0x6}, 0x10) 15:56:42 executing program 5: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x1c, &(0x7f0000000280)=""/98, &(0x7f0000000140)=0x62) 15:56:42 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000280), &(0x7f0000000240)=0xa0) 15:56:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000200)=""/63, 0x3f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xc}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f0000001700)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) shutdown(r3, 0x0) 15:56:43 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 15:56:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x8c05}, 0x1c) 15:56:43 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000280), 0x10) 15:56:43 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="230000008400000007000000000000000010"], 0x23}, 0x0) 15:56:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f0000000000), &(0x7f0000000080)=0x6) 15:56:44 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) 15:56:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000019840)=""/4075, 0xfeb}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/73, 0x49}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x40002) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) shutdown(0xffffffffffffffff, 0x0) shutdown(r3, 0x0) 15:56:44 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000040), 0x8) 15:56:44 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) sendmsg$unix(r1, &(0x7f0000000a00)={&(0x7f0000000240)=@abs={0x8}, 0x8, 0x0, 0x0, 0x0, 0x20}, 0x0) 15:56:44 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f00000001c0), &(0x7f0000001200)=0x8) 15:56:44 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000000), &(0x7f0000000080)=0x8) 15:56:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xb804}, 0x1c) 15:56:45 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000001a40)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000001b00)=ANY=[], 0x198}, 0x0) 15:56:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000040)=0x84) 15:56:45 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000280), 0x8) 15:56:45 executing program 4: execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000540), 0x0) chroot(&(0x7f0000000680)='./file0\x00') 15:56:45 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockname$inet(r0, 0x0, &(0x7f00000001c0)) 15:56:45 executing program 5: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c) 15:56:45 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x9, 0x7}, 0x14) 15:56:45 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000000), &(0x7f00000000c0)=0x98) 15:56:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)=""/258, 0x102}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xd051, 0x0, 0x0, 0x800e0053d) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/133, 0x85}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) shutdown(r2, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000001c00)="b426652889b178ebce91f988753e32ee65525659197452117a5d2e962fc3608386fdb450862af17c3dcaf2915a4dd93bd6511cbc9c8eaba240e3552a13f588442d8d86f43f6698bab04a9dd0503a28ee335547ff56d057ee9bd5377565bf8d35f5dff40081979e93c4cbbe6a0c73313e0797c044a695f619908341e1988996ddd4c642f8320484605a4a2a081a9b907cc1d63fc29d83b86a44395d7a35288ca69487fc6b50518510c94174ef5838474a0d8747a8b8f4adfcecb58315a07b4cf827011a8fe65afa7a30a2527acde3cfee5907eb37cb922de747cf6acf7a5f375e5807d1145b6a7c", 0xfec0}], 0x1) r5 = dup(r3) shutdown(r5, 0x0) 15:56:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xe02e}, 0x1c) 15:56:46 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000023c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000002300)=[@dstaddrv6={0x1c, 0x84, 0xa, @mcast2}, @authinfo={0x10}], 0x2c}, 0x0) 15:56:46 executing program 4: r0 = socket(0x2, 0x5, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, 0x0, 0x0) 15:56:46 executing program 5: r0 = socket(0x2, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000180), 0x10) 15:56:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="e4", 0x1}], 0x1, &(0x7f0000000600)=ANY=[], 0x78}, 0x0) 15:56:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000200)=""/63, 0x3f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f0000001700)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) shutdown(r3, 0x0) 15:56:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f00000005c0), 0xc) 15:56:47 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000000)=0x2) 15:56:47 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) 15:56:47 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x14) 15:56:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xfc00}, 0x1c) 15:56:47 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, &(0x7f0000000000)='$', 0x1, 0x20100, &(0x7f0000000100)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 15:56:48 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000280), 0x8) 15:56:48 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1c, 0x1c, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x2}, 0x1c) 15:56:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/5, 0x5}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xcf1c, 0x0, 0x0, 0x800e00551) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/1, 0x1}], 0x1}, 0x2) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000840)=[{&(0x7f0000000040)=""/224, 0xe0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) shutdown(r4, 0x0) [ 1231.425443][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1231.435882][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1231.443463][ T4874] loop3: p2 < > 15:56:48 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x11, &(0x7f0000000500), 0x4) 15:56:48 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000000000000ac0c09f6f95be81d137ec37ceac9fb999bf91a4ecd123cd90b638ac8841a54f794b59bd69f7c898a57cdb9ddbb3bf56ac74c0693b23711d5f2166a0335567bff5ff5b6221f2abd427dca882db736e0df332ebfae083f1c591c96a13d17c85d3ec80f00379cde45fd369d6c6f023932edbc712d3508d49cc9f7490a7528dfbcb387e2071dbfe9735cf4c7016db6a3954de86db939d2b219d247a11fb2dc1d231810c9c0a20348f6f53ec97cc0215d8572140eebbb00a697acdd03f14db19ab03418a35c36495c107c5215f16e44a8d6c3d9e27bcbc6a92479cb87"], 0x81, 0x800) 15:56:49 executing program 4: r0 = socket(0x2, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xc4}, 0x14) 15:56:49 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) recvfrom$inet6(r0, 0x0, 0x0, 0x40042, 0x0, 0x0) 15:56:49 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@sndinfo={0x1c}], 0x1c}, 0x0) 15:56:49 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000140), 0x8) 15:56:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xfe80}, 0x1c) [ 1232.476313][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1232.487479][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1232.494829][ T4874] loop3: p2 < > 15:56:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/5, 0x5}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xcf1c, 0x0, 0x0, 0x800e00551) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/1, 0x1}, {0x0}], 0x2}, 0x2) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000840)=[{&(0x7f0000000040)=""/224, 0xe0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) shutdown(r4, 0x0) 15:56:49 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) connect$inet6(r1, &(0x7f0000000040)={0x1c, 0x1c, 0x1}, 0x1c) 15:56:50 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x20100, &(0x7f0000000100)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 15:56:50 executing program 3: r0 = socket(0x1c, 0x5, 0x0) listen(r0, 0x0) 15:56:50 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x172}, 0x14) 15:56:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x800}, 0x14) 15:56:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x901, &(0x7f0000000000)={r4}, 0x8) [ 1233.630588][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1233.641080][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1233.648585][ T4874] loop3: p2 < > 15:56:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xff00}, 0x1c) 15:56:51 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000140), &(0x7f0000000240)=0x98) 15:56:51 executing program 4: r0 = socket(0x2, 0x10000001, 0x84) sendto(r0, &(0x7f00000000c0)="b1", 0x1, 0x10c, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 15:56:51 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x18, &(0x7f0000000540), &(0x7f0000000580)=0x4) 15:56:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x20, 0x3, 0x4}, 0x10) 15:56:51 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) 15:56:51 executing program 5: r0 = socket(0x2, 0x10000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001340)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@dstaddrv4={0x10, 0x84, 0x9, @multicast1}, @sndrcv={0x2c}], 0x3c}, 0x0) 15:56:51 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) 15:56:51 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) 15:56:52 executing program 0: r0 = socket(0x2, 0x10000001, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000340), &(0x7f0000000380)=0x8) [ 1235.084047][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1235.094498][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1235.102523][ T4874] loop3: p2 < > 15:56:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f00000001c0), 0x8) 15:56:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xff0f}, 0x1c) 15:56:52 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f00000005c0), &(0x7f0000000600)=0x10) 15:56:52 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, &(0x7f0000000040)="18", 0x1, 0x0, &(0x7f0000001040)=@in={0x10, 0x2}, 0x10) 15:56:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x5d74}, 0x14) 15:56:52 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 15:56:53 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000), 0x8c) 15:56:53 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f00000002c0)={0x10, 0x2}, 0x10) 15:56:53 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c) 15:56:53 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x27, &(0x7f0000000340), &(0x7f0000000380)=0x8) 15:56:53 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) 15:56:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xff28}, 0x1c) 15:56:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x903, &(0x7f0000000240), 0x8) 15:56:53 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000140), 0x8) 15:56:54 executing program 4: r0 = socket$inet_sctp(0x2, 0x400000000005, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 15:56:54 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xb, &(0x7f0000000340), &(0x7f0000000380)=0x20) [ 1237.224837][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1237.235422][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1237.242973][ T4874] loop3: p2 < > 15:56:54 executing program 2: open$dir(&(0x7f0000000640)='./file0\x00', 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 15:56:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xb, &(0x7f0000000080), 0x20) 15:56:54 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000280), 0x10) 15:56:54 executing program 4: r0 = socket(0x2, 0x10000001, 0x84) connect(r0, &(0x7f0000000180)=@un=@abs={0x8}, 0x8) 15:56:54 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000140), &(0x7f0000000180)=0x8) 15:56:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)=""/258, 0x102}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xd051, 0x0, 0x0, 0x800e0053d) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/133, 0x85}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) shutdown(r2, 0x0) r4 = dup(r3) shutdown(r4, 0x0) 15:56:55 executing program 2: r0 = socket(0x1c, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x107, &(0x7f0000000080), &(0x7f00000000c0)=0x18) 15:56:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x50000}, 0x1c) 15:56:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)=""/258, 0x102}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xd051, 0x0, 0x0, 0x800e0053d) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/133, 0x85}, {0x0}, {0x0}], 0x3}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) shutdown(r2, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000001c00)="b426652889b178ebce91f988753e32ee65525659197452117a5d2e962fc3608386fdb450862af17c3dcaf2915a4dd93bd6511cbc9c8eaba240e3552a13f588442d8d86f43f6698bab04a9dd0503a28ee335547ff56d057ee9bd5377565bf8d35f5dff40081979e93c4cbbe6a0c73313e0797c044a695f619908341e1988996ddd4c642f8320484605a4a2a081a9b907cc1d63fc29d83b86a44395d7a35288ca69487fc6b50518510c94174ef5838474a0d8747a8b8f4adfcecb58315a07b4cf827011a8fe65afa7a30a2527acde3cfee5907eb37cb922de747cf6acf7a5f375e5807d1145b6a7c", 0xfec0}], 0x1) r5 = dup(r3) shutdown(r5, 0x0) 15:56:55 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) 15:56:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/5, 0x5}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xcf1c, 0x0, 0x0, 0x800e00551) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/1, 0x1}, {0x0}], 0x2}, 0x2) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000840)=[{&(0x7f0000000040)=""/224, 0xe0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) shutdown(r4, 0x0) 15:56:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0x20) 15:56:56 executing program 0: r0 = socket(0x2, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000000040)={0x0, 0x80}, 0x8) 15:56:56 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x104, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 15:56:56 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@un=@abs={0x8}, 0x8) 15:56:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xf0ff7f}, 0x1c) 15:56:56 executing program 2: r0 = socket(0x2, 0x10000001, 0x84) sendto(r0, &(0x7f00000000c0)="b1", 0x1, 0x0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000040), &(0x7f0000000080)=0x8) 15:56:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)=""/258, 0x102}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xd051, 0x0, 0x0, 0x800e0053d) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/133, 0x85}, {0x0}, {0x0}], 0x3}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) shutdown(r2, 0x0) r4 = dup(r3) shutdown(r4, 0x0) 15:56:57 executing program 0: r0 = socket(0x1c, 0x5, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000040), 0x8) 15:56:57 executing program 4: r0 = socket(0x2, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@dstaddrv6={0x1c, 0x84, 0xa, @empty}, @prinfo={0x14}], 0x30}, 0x0) 15:56:57 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, &(0x7f00000001c0)="bc", 0x1, 0x0, &(0x7f0000000300)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 15:56:58 executing program 5: r0 = socket(0x2, 0x10000001, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 15:56:58 executing program 4: r0 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x8, &(0x7f0000000100), 0x4) 15:56:58 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 15:56:58 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) 15:56:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x1000000}, 0x1c) 15:56:58 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1c, 0x1c, 0x1}, 0x1c) listen(r0, 0x0) 15:56:58 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x105) 15:56:59 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x1}, 0x1c) 15:56:59 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r0, 0x0, 0x1, 0x0, &(0x7f0000001080)) 15:56:59 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 15:56:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000040), 0xc) 15:56:59 executing program 5: semget(0x1, 0x3, 0x0) 15:57:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x10) 15:57:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x2000000}, 0x1c) 15:57:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 15:57:00 executing program 2: r0 = socket(0x2, 0x10000001, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) 15:57:00 executing program 3: r0 = socket(0x2, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 15:57:00 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0xf, &(0x7f0000000040), 0xc) 15:57:00 executing program 4: r0 = socket(0x2, 0x10000001, 0x84) sendto(r0, &(0x7f00000000c0)="b1212ce5266779cb3672bede1a356caced9c1d463a9a2af872596ba99dbd8fbb614ce5ea54b571e14c7c78bf70235b0810e1c64b1d5d83f6ad1b8ee930d59b02e35f634b442c67d8d43928f2561d187487d26f67d1888b0cfb25ba1bf3b6a24abaffb7826c04562815b326e351c157e24335a5a46b6fd163ec72eddaf67fef0725f5ecd361fd6a13382d68b72d169549363dd997e3984c2bb72e838e41323243e130f8aa81b54774e6189e9aa6ab334c559ea4f9c4d28d60a2b1b1ffca1d7de5ac457bb2b098af3fba1d19604c6dbb1606f08c3de71ed82684d781513a31bd4ad3fc5b04da63c8627b80f4f722fa17ef1d5d0c0f4c", 0xf5, 0x10c, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 15:57:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f00000001c0), 0x8) 15:57:01 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x0, 0x1, "a7"}, 0x9) 15:57:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000200)=""/63, 0x3f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xc}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f0000001840)=[{&(0x7f0000000580)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) shutdown(r3, 0x0) 15:57:01 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, &(0x7f0000000040)="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", 0xff1, 0x0, &(0x7f0000001040)=@in={0x10, 0x2}, 0x10) 15:57:01 executing program 5: r0 = socket$inet_sctp(0x2, 0x400000000005, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 15:57:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r2, r0, 0x0, 0x4000002) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 15:57:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x3000000}, 0x1c) 15:57:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x301}, 0x14}}, 0x0) 15:57:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 15:57:02 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x1a7, 0x0, 0x0) [ 1246.071964][ T28] audit: type=1400 audit(1598975823.132:81): avc: denied { set_context_mgr } for pid=24717 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=binder permissive=1 15:57:03 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 15:57:03 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001600)=@raw={'raw\x00', 0x8, 0x3, 0x1268, 0x10c8, 0xa, 0xd0e0000, 0x0, 0x100, 0x11d0, 0x1d8, 0x1d8, 0x11d0, 0x1d8, 0x3, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'vlan0\x00', 'vcan0\x00'}, 0x0, 0x10a0, 0x10c8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x1, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg2\x00', 'netdevsim0\x00'}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "38d8"}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "16e87c2c56f4643a63b0f10ff0f5ae3985303fca4c93d93ca3d3f9c9ad36"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x12c8) 15:57:03 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002}) r2 = dup(r0) pipe2(&(0x7f0000000140), 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 15:57:03 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0x140, 0x140, 0x0, 0x140, 0x268, 0x258, 0x258, 0x268, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x130, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}, @common=@unspec=@state={{0x28, 'state\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ipv6={@ipv4={[], [], @private}, @private1, [], [], 'veth0_to_bridge\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {')K'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 15:57:04 executing program 5: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 15:57:04 executing program 3: socket$netlink(0x10, 0x3, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x1000000c8) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) 15:57:04 executing program 2: socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) 15:57:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x4000000}, 0x1c) 15:57:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000002f000511d25a80648c63940d0124fc60100035400141db43001200170000001f01000080743a0200d1bd", 0x2e}], 0x1}, 0x0) [ 1248.023599][T24751] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1248.305245][T24751] device bond2 entered promiscuous mode [ 1248.311895][T24751] 8021q: adding VLAN 0 to HW filter on device bond2 15:57:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454ca, 0x404f05) [ 1248.673785][T24755] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1248.767611][T24806] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1248.772396][T24755] device bond3 entered promiscuous mode [ 1248.787994][T24755] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1248.804386][T24816] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 15:57:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454ca, 0x400000) 15:57:06 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r1, r0, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040), &(0x7f0000000100)=0x4) 15:57:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0xee00) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x400454ca, 0x73f000) 15:57:06 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) tkill(0x0, 0x0) r1 = dup(r0) pipe2(&(0x7f0000000140), 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1249.317286][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1249.327732][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1249.335089][ T4874] loop3: p2 < > 15:57:06 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) dup2(r1, r0) 15:57:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x5000000}, 0x1c) 15:57:06 executing program 0: 15:57:06 executing program 2: 15:57:07 executing program 4: 15:57:07 executing program 5: 15:57:07 executing program 3: 15:57:07 executing program 2: 15:57:08 executing program 0: 15:57:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x6000000}, 0x1c) 15:57:08 executing program 4: 15:57:08 executing program 5: 15:57:08 executing program 2: 15:57:08 executing program 0: 15:57:08 executing program 3: 15:57:09 executing program 5: 15:57:09 executing program 4: 15:57:09 executing program 2: 15:57:09 executing program 3: 15:57:09 executing program 0: 15:57:09 executing program 4: 15:57:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x7000000}, 0x1c) 15:57:09 executing program 5: 15:57:09 executing program 2: 15:57:09 executing program 3: 15:57:10 executing program 0: 15:57:10 executing program 4: 15:57:10 executing program 5: 15:57:10 executing program 3: 15:57:10 executing program 2: 15:57:10 executing program 3: 15:57:10 executing program 5: 15:57:10 executing program 0: 15:57:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x8000000}, 0x1c) 15:57:11 executing program 4: 15:57:11 executing program 2: 15:57:11 executing program 3: 15:57:11 executing program 0: 15:57:11 executing program 5: 15:57:11 executing program 4: 15:57:11 executing program 2: 15:57:12 executing program 5: 15:57:12 executing program 0: 15:57:12 executing program 4: 15:57:12 executing program 3: 15:57:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x9000000}, 0x1c) 15:57:12 executing program 2: 15:57:12 executing program 3: 15:57:12 executing program 4: 15:57:12 executing program 5: 15:57:12 executing program 0: 15:57:13 executing program 2: 15:57:13 executing program 0: [ 1256.410340][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1256.420829][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1256.429079][ T4874] loop3: p2 < > 15:57:13 executing program 2: 15:57:13 executing program 4: 15:57:13 executing program 3: 15:57:13 executing program 5: 15:57:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xa000000}, 0x1c) 15:57:14 executing program 0: 15:57:14 executing program 2: 15:57:14 executing program 4: 15:57:14 executing program 3: 15:57:14 executing program 5: 15:57:14 executing program 0: 15:57:14 executing program 2: 15:57:15 executing program 4: 15:57:15 executing program 0: 15:57:15 executing program 3: 15:57:15 executing program 5: 15:57:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xb0080fe}, 0x1c) 15:57:15 executing program 2: 15:57:15 executing program 4: 15:57:15 executing program 3: 15:57:15 executing program 2: 15:57:16 executing program 0: 15:57:16 executing program 4: 15:57:16 executing program 5: 15:57:16 executing program 3: 15:57:16 executing program 2: 15:57:16 executing program 0: 15:57:16 executing program 5: 15:57:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xf000000}, 0x1c) 15:57:17 executing program 4: 15:57:17 executing program 5: 15:57:17 executing program 3: 15:57:17 executing program 2: 15:57:17 executing program 0: 15:57:17 executing program 4: 15:57:17 executing program 5: 15:57:17 executing program 3: 15:57:17 executing program 2: 15:57:18 executing program 0: 15:57:18 executing program 5: 15:57:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x10000120}, 0x1c) 15:57:18 executing program 4: 15:57:18 executing program 3: 15:57:18 executing program 0: 15:57:18 executing program 2: [ 1261.667378][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1261.678140][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1261.685636][ T4874] loop3: p2 < > 15:57:19 executing program 4: 15:57:19 executing program 5: 15:57:19 executing program 0: 15:57:19 executing program 3: 15:57:19 executing program 2: 15:57:19 executing program 4: 15:57:19 executing program 5: 15:57:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x18020000}, 0x1c) 15:57:20 executing program 3: 15:57:20 executing program 0: 15:57:20 executing program 2: 15:57:20 executing program 5: 15:57:20 executing program 4: 15:57:20 executing program 3: 15:57:20 executing program 5: 15:57:20 executing program 0: 15:57:20 executing program 2: 15:57:21 executing program 5: 15:57:21 executing program 3: 15:57:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x20000000}, 0x1c) 15:57:21 executing program 4: 15:57:21 executing program 2: 15:57:21 executing program 0: 15:57:21 executing program 3: 15:57:21 executing program 4: 15:57:21 executing program 5: 15:57:22 executing program 2: 15:57:22 executing program 0: 15:57:22 executing program 3: 15:57:22 executing program 5: 15:57:22 executing program 2: 15:57:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x20010010}, 0x1c) 15:57:23 executing program 4: 15:57:23 executing program 3: 15:57:23 executing program 5: 15:57:23 executing program 0: 15:57:23 executing program 2: 15:57:23 executing program 4: 15:57:23 executing program 3: 15:57:24 executing program 5: 15:57:24 executing program 0: 15:57:24 executing program 2: 15:57:24 executing program 4: 15:57:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x24000000}, 0x1c) 15:57:24 executing program 5: 15:57:24 executing program 0: 15:57:24 executing program 3: 15:57:24 executing program 2: 15:57:25 executing program 4: 15:57:25 executing program 5: 15:57:25 executing program 3: 15:57:25 executing program 0: 15:57:25 executing program 4: 15:57:25 executing program 2: 15:57:25 executing program 5: 15:57:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x28ff0000}, 0x1c) 15:57:26 executing program 3: 15:57:26 executing program 0: 15:57:26 executing program 2: 15:57:26 executing program 4: 15:57:26 executing program 5: 15:57:26 executing program 3: 15:57:26 executing program 0: 15:57:27 executing program 2: 15:57:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x34c45de5}, 0x1c) 15:57:28 executing program 3: 15:57:29 executing program 4: 15:57:29 executing program 5: 15:57:29 executing program 2: 15:57:29 executing program 0: 15:57:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x3f000000}, 0x1c) 15:57:29 executing program 4: 15:57:29 executing program 3: 15:57:29 executing program 0: 15:57:29 executing program 2: 15:57:29 executing program 5: 15:57:30 executing program 4: 15:57:30 executing program 3: 15:57:30 executing program 5: 15:57:30 executing program 0: 15:57:30 executing program 2: 15:57:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x40000000}, 0x1c) 15:57:31 executing program 4: 15:57:31 executing program 3: 15:57:31 executing program 0: 15:57:31 executing program 5: 15:57:31 executing program 2: 15:57:31 executing program 3: 15:57:31 executing program 4: 15:57:32 executing program 2: 15:57:32 executing program 5: 15:57:32 executing program 0: [ 1275.117398][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1275.128180][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1275.135457][ T4874] loop3: p2 < > 15:57:32 executing program 3: 15:57:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x41020000}, 0x1c) 15:57:32 executing program 0: 15:57:32 executing program 4: 15:57:32 executing program 2: 15:57:33 executing program 5: 15:57:33 executing program 3: 15:57:33 executing program 4: 15:57:33 executing program 0: [ 1276.527855][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1276.538379][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1276.545656][ T4874] loop3: p2 < > 15:57:33 executing program 2: 15:57:33 executing program 3: 15:57:33 executing program 5: 15:57:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x54000000}, 0x1c) 15:57:34 executing program 0: 15:57:34 executing program 2: 15:57:34 executing program 4: 15:57:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2}, 0x80) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003c80)=[{0x0}], 0x1) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40000002) 15:57:34 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) 15:57:34 executing program 0: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r1) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0) 15:57:35 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000200)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @broadcast}, 0x10, {0x2, 0x4e24, @empty}, 'nr0\x00'}) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) 15:57:35 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) io_submit(0x0, 0x0, 0x0) 15:57:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x1c, 0xffffffff}]}}}]}, 0x3c}}, 0x0) [ 1278.381377][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1278.391848][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1278.399384][ T4874] loop3: p2 < > 15:57:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 1278.705356][ T28] audit: type=1804 audit(1598975855.762:82): pid=25182 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir108514295/syzkaller.2jk5BN/315/bus" dev="sda1" ino=15724 res=1 15:57:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x58000000}, 0x1c) [ 1278.965382][ T28] audit: type=1804 audit(1598975855.872:83): pid=25184 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir108514295/syzkaller.2jk5BN/315/bus" dev="sda1" ino=15724 res=1 15:57:36 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x12, r0, 0x82000000) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000000)) [ 1278.990624][ T28] audit: type=1804 audit(1598975855.972:84): pid=25184 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir108514295/syzkaller.2jk5BN/315/bus" dev="sda1" ino=15724 res=1 [ 1279.072329][T25190] (unnamed net_device) (uninitialized): option peer_notif_delay: invalid value (18446744073709551615) [ 1279.083973][T25190] (unnamed net_device) (uninitialized): option peer_notif_delay: allowed values 0 - 2147483647 15:57:36 executing program 2: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselOnu\xac\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) read$hidraw(r2, 0x0, 0x0) 15:57:36 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) io_setup(0x0, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002}) tkill(0x0, 0x0) r2 = dup(r0) pipe2(&(0x7f0000000140), 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) [ 1279.926091][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1279.937854][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1279.945194][ T4874] loop3: p2 < > 15:57:37 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) 15:57:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2}, 0x80) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003c80)=[{0x0}], 0x1) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40000002) 15:57:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000100)={0x0, 0x1000000, &(0x7f00000000c0)={&(0x7f0000000400)={0x14, r1, 0x729, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x40) 15:57:37 executing program 0: r0 = open(0x0, 0x1031fe, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) 15:57:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x7ffff000}, 0x1c) 15:57:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a00000001a00f9ffff7f0000000000001c"], 0xa0}}, 0x0) [ 1281.468127][ T28] audit: type=1804 audit(1598975858.522:85): pid=25231 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir243624575/syzkaller.zc0BKc/275/bus" dev="sda1" ino=15909 res=1 [ 1281.756376][ T28] audit: type=1804 audit(1598975858.592:86): pid=25233 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir243624575/syzkaller.zc0BKc/275/bus" dev="sda1" ino=15909 res=1 15:57:38 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x9c}, {0x6}]}, 0x10) 15:57:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') copy_file_range(r1, &(0x7f0000000080)=0xffffffff80000000, r0, 0x0, 0x0, 0x0) [ 1282.344964][T25242] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1282.437536][T25243] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. 15:57:39 executing program 2: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x6, 0x0, 0xb}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xf4, &(0x7f0000000300)=""/244, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:57:39 executing program 4: r0 = socket(0x2b, 0x1, 0x0) bind$can_j1939(r0, &(0x7f0000000000)={0xa}, 0x18) 15:57:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000001c0)) 15:57:40 executing program 0: creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14113e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) mprotect(&(0x7f000023d000/0x3000)=nil, 0x3000, 0x2) 15:57:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0x10003}) [ 1283.361893][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1283.373021][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1283.380593][ T4874] loop3: p2 < > 15:57:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x8c050000}, 0x1c) 15:57:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000fdffff17"]) 15:57:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') close(r0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={r2}, 0x8) 15:57:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000fdffffb7000040"]) 15:57:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000fdffffcd"]) 15:57:41 executing program 3: r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380), 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 15:57:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c"], 0xa0}}, 0x0) 15:57:41 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) io_setup(0x5f, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) io_submit(0x0, 0x0, 0x0) tkill(0x0, 0x0) r2 = dup(r0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 15:57:41 executing program 5: r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/140, 0x8c}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x97d}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x21c}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 15:57:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x8dffffff}, 0x1c) 15:57:42 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) io_setup(0x5f, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002}) io_submit(0x0, 0x0, 0x0) tkill(0x0, 0x0) r2 = dup(r0) ptrace$peeksig(0x4209, 0x0, 0x0, &(0x7f0000001240)=[{}]) pipe2(&(0x7f0000000140), 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 15:57:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, 0x0, 0x18, 0x2) [ 1285.835239][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1285.845794][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1285.853327][ T4874] loop3: p2 < > 15:57:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x24, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6}]}, 0x24}}, 0x0) 15:57:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a00000001a00f9ffff7f0000000000001c14"], 0xa0}}, 0x0) 15:57:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) 15:57:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0x81}}) 15:57:43 executing program 0: pipe(&(0x7f0000000500)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 15:57:44 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003000), 0x0, 0x0, 0x0) mkdir(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000400)=@sco={0x1f, @fixed={[], 0x12}}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') setregid(0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1287.232584][ T28] audit: type=1804 audit(1598975864.292:87): pid=25363 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir256196524/syzkaller.oGSRxF/328/bus" dev="sda1" ino=16377 res=1 15:57:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x91ffffff}, 0x1c) 15:57:44 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000040)={[{@mode={'mode', 0x3d, 0xfffffffffffffffd}}], [{@dont_appraise='dont_appraise'}]}) 15:57:44 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) io_setup(0x5f, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002}) io_submit(0x0, 0x0, 0x0) tkill(0x0, 0x0) r2 = dup(r0) ptrace$peeksig(0x4209, 0x0, 0x0, &(0x7f0000001240)=[{}]) pipe2(&(0x7f0000000140), 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) [ 1287.490489][ T28] audit: type=1804 audit(1598975864.552:88): pid=25361 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir256196524/syzkaller.oGSRxF/328/bus" dev="sda1" ino=16377 res=1 15:57:44 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000000)='0', 0x1}], 0x1) 15:57:45 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) [ 1287.939193][T25374] tmpfs: Bad value for 'mode' 15:57:45 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 1288.409042][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1288.419787][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1288.427795][ T4874] loop3: p2 < > 15:57:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xb8040000}, 0x1c) 15:57:45 executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x0, 0x0) r1 = io_uring_setup(0x3cab, &(0x7f0000000180)={0x0, 0x14f6, 0x0, 0x0, 0x149}) dup3(r0, r1, 0x80000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 15:57:45 executing program 5: syz_emit_ethernet(0x52, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, 'z3\t', 0x1c, 0x3a, 0x1, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @remote}}}}}}, 0x0) 15:57:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) fstat(r0, &(0x7f0000000400)) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$UHID_CREATE2(r1, &(0x7f0000000480)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x5d, 0x0, 0x8001, 0x0, 0x1663, 0x6, "da20387547e1b97967037e8d9c21d1eb7fe487d5f87f8ed7986ac7119d2c07d831b0c0f16c00af0b239f14683027576fdb9d8ed6e3cc89f294b119313a360cf706d485a2fc0297b9456196c9ce591696ee7ea6ecadf9ef26da4f3adb05"}}, 0x175) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0x4]}, 0x8, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="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"]}) poll(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x268, 0x268, 0x0, 0x268, 0x268, 0x460, 0x460, 0x460, 0x460, 0x460, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x220, 0x268, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 15:57:46 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) [ 1290.682463][T25368] bridge0: port 3(erspan0) entered disabled state [ 1290.844734][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1290.855705][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1290.863364][ T4874] loop3: p2 < > [ 1292.672108][T25368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.680088][T25368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.472523][T25368] tipc: Resetting bearer [ 1299.049388][T25368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1299.477039][T25368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1306.648185][T25369] bridge0: port 3(erspan0) entered blocking state [ 1306.656029][T25369] bridge0: port 3(erspan0) entered forwarding state [ 1306.671990][T25369] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1306.679713][T25369] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1306.693851][T25369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1306.708963][T25369] 8021q: adding VLAN 0 to HW filter on device team0 [ 1306.730123][T25369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1307.382948][T25388] bridge0: port 3(erspan0) entered disabled state [ 1308.795644][T25390] bridge0: port 3(erspan0) entered blocking state [ 1308.802320][T25390] bridge0: port 3(erspan0) entered forwarding state [ 1308.818048][T25390] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1308.825473][T25390] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1308.839782][T25390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1308.853372][T25390] 8021q: adding VLAN 0 to HW filter on device team0 [ 1308.868989][T25390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 15:58:06 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x1, &(0x7f00000004c0)=[{0x0}], 0x0, &(0x7f0000000580)) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @le_set_scan_param={{0x200b, 0x7}, {0x3f, 0x4, 0x0, 0x0, 0x9}}}, 0xb) r0 = socket$inet6(0xa, 0x400000000001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x200fff) 15:58:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xe02e0000}, 0x1c) 15:58:06 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0xe00) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) [ 1308.906179][T25400] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1308.924610][T25400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1308.932737][T25400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1309.034989][T25418] A link change request failed with some changes committed already. Interface Y­4`Ò˜ may have been left with an inconsistent configuration, please check. [ 1309.245273][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1309.256359][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1309.263892][ T4874] loop3: p2 < > [ 1309.359828][T25458] not chained 30000 origins [ 1309.364499][T25458] CPU: 0 PID: 25458 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1309.373192][T25458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1309.383298][T25458] Call Trace: [ 1309.386641][T25458] dump_stack+0x21c/0x280 [ 1309.391036][T25458] kmsan_internal_chain_origin+0x6f/0x130 [ 1309.396865][T25458] ? sched_clock_cpu+0x65/0x8e0 [ 1309.401760][T25458] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1309.407874][T25458] ? sched_clock_cpu+0x65/0x8e0 [ 1309.412772][T25458] ? kmsan_get_metadata+0x116/0x180 [ 1309.418054][T25458] ? kmsan_get_metadata+0x116/0x180 [ 1309.423301][T25458] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1309.429148][T25458] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1309.435325][T25458] ? idle_cpu+0x9a/0x1d0 [ 1309.439621][T25458] ? __msan_get_context_state+0x9/0x20 [ 1309.445124][T25458] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1309.450540][T25458] ? sysvec_apic_timer_interrupt+0x11e/0x130 [ 1309.456577][T25458] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1309.462783][T25458] ? kmsan_get_metadata+0x8/0x180 [ 1309.467844][T25458] ? kmsan_get_metadata+0x116/0x180 [ 1309.473095][T25458] __msan_chain_origin+0x50/0x90 [ 1309.478166][T25458] __get_compat_msghdr+0x6db/0x9d0 [ 1309.483349][T25458] get_compat_msghdr+0x108/0x2b0 [ 1309.488366][T25458] __sys_sendmmsg+0x755/0xf70 [ 1309.493119][T25458] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1309.499155][T25458] ? __msan_poison_alloca+0xf0/0x120 [ 1309.504493][T25458] ? kmsan_copy_to_user+0x81/0x90 [ 1309.509582][T25458] ? _copy_to_user+0x1bf/0x260 [ 1309.514398][T25458] ? put_old_timespec32+0x231/0x2d0 [ 1309.519640][T25458] ? kmsan_get_metadata+0x116/0x180 [ 1309.524873][T25458] ? kmsan_get_metadata+0x116/0x180 [ 1309.530112][T25458] ? kmsan_get_metadata+0x116/0x180 [ 1309.535358][T25458] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1309.541550][T25458] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1309.547129][T25458] __do_fast_syscall_32+0x2af/0x480 [ 1309.552378][T25458] do_fast_syscall_32+0x6b/0xd0 [ 1309.557263][T25458] do_SYSENTER_32+0x73/0x90 [ 1309.561927][T25458] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1309.568288][T25458] RIP: 0023:0xf7fd6549 [ 1309.572367][T25458] Code: Bad RIP value. [ 1309.576454][T25458] RSP: 002b:00000000f55d00cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1309.584894][T25458] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200002c0 [ 1309.592894][T25458] RDX: 00000000000000d7 RSI: 0000000000000e00 RDI: 0000000000000000 [ 1309.600887][T25458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1309.608899][T25458] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1309.616901][T25458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1309.624926][T25458] Uninit was stored to memory at: [ 1309.629986][T25458] kmsan_internal_chain_origin+0xad/0x130 [ 1309.635873][T25458] __msan_chain_origin+0x50/0x90 [ 1309.640952][T25458] __get_compat_msghdr+0x6db/0x9d0 [ 1309.646092][T25458] get_compat_msghdr+0x108/0x2b0 [ 1309.651062][T25458] __sys_sendmmsg+0x755/0xf70 [ 1309.655782][T25458] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1309.661185][T25458] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1309.666757][T25458] __do_fast_syscall_32+0x2af/0x480 [ 1309.671984][T25458] do_fast_syscall_32+0x6b/0xd0 [ 1309.676865][T25458] do_SYSENTER_32+0x73/0x90 [ 1309.681415][T25458] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1309.687748][T25458] [ 1309.690080][T25458] Uninit was stored to memory at: [ 1309.695126][T25458] kmsan_internal_chain_origin+0xad/0x130 [ 1309.700882][T25458] __msan_chain_origin+0x50/0x90 [ 1309.705860][T25458] __get_compat_msghdr+0x6db/0x9d0 [ 1309.711004][T25458] get_compat_msghdr+0x108/0x2b0 [ 1309.715982][T25458] __sys_sendmmsg+0x755/0xf70 [ 1309.720788][T25458] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1309.726188][T25458] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1309.731765][T25458] __do_fast_syscall_32+0x2af/0x480 [ 1309.736991][T25458] do_fast_syscall_32+0x6b/0xd0 [ 1309.741867][T25458] do_SYSENTER_32+0x73/0x90 [ 1309.746395][T25458] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1309.752722][T25458] [ 1309.755063][T25458] Uninit was stored to memory at: [ 1309.760116][T25458] kmsan_internal_chain_origin+0xad/0x130 [ 1309.765863][T25458] __msan_chain_origin+0x50/0x90 [ 1309.770833][T25458] __get_compat_msghdr+0x6db/0x9d0 [ 1309.775969][T25458] get_compat_msghdr+0x108/0x2b0 [ 1309.780924][T25458] __sys_sendmmsg+0x755/0xf70 [ 1309.785768][T25458] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1309.791273][T25458] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1309.796857][T25458] __do_fast_syscall_32+0x2af/0x480 [ 1309.802191][T25458] do_fast_syscall_32+0x6b/0xd0 [ 1309.807071][T25458] do_SYSENTER_32+0x73/0x90 [ 1309.811605][T25458] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1309.817941][T25458] [ 1309.820281][T25458] Uninit was stored to memory at: [ 1309.825348][T25458] kmsan_internal_chain_origin+0xad/0x130 [ 1309.831208][T25458] __msan_chain_origin+0x50/0x90 [ 1309.836175][T25458] __get_compat_msghdr+0x6db/0x9d0 [ 1309.841314][T25458] get_compat_msghdr+0x108/0x2b0 [ 1309.846288][T25458] __sys_sendmmsg+0x755/0xf70 [ 1309.850993][T25458] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1309.856406][T25458] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1309.861986][T25458] __do_fast_syscall_32+0x2af/0x480 [ 1309.867217][T25458] do_fast_syscall_32+0x6b/0xd0 [ 1309.872731][T25458] do_SYSENTER_32+0x73/0x90 [ 1309.877280][T25458] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1309.883610][T25458] [ 1309.885949][T25458] Uninit was stored to memory at: [ 1309.891091][T25458] kmsan_internal_chain_origin+0xad/0x130 [ 1309.896841][T25458] __msan_chain_origin+0x50/0x90 [ 1309.901808][T25458] __get_compat_msghdr+0x6db/0x9d0 [ 1309.906948][T25458] get_compat_msghdr+0x108/0x2b0 [ 1309.911917][T25458] __sys_sendmmsg+0x755/0xf70 [ 1309.916622][T25458] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1309.922033][T25458] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1309.927610][T25458] __do_fast_syscall_32+0x2af/0x480 [ 1309.932843][T25458] do_fast_syscall_32+0x6b/0xd0 [ 1309.937741][T25458] do_SYSENTER_32+0x73/0x90 [ 1309.942271][T25458] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1309.948598][T25458] [ 1309.950933][T25458] Uninit was stored to memory at: [ 1309.955987][T25458] kmsan_internal_chain_origin+0xad/0x130 [ 1309.961741][T25458] __msan_chain_origin+0x50/0x90 [ 1309.966707][T25458] __get_compat_msghdr+0x6db/0x9d0 [ 1309.971849][T25458] get_compat_msghdr+0x108/0x2b0 [ 1309.976815][T25458] __sys_sendmmsg+0x755/0xf70 [ 1309.981523][T25458] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1309.986920][T25458] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1309.992507][T25458] __do_fast_syscall_32+0x2af/0x480 [ 1309.997728][T25458] do_fast_syscall_32+0x6b/0xd0 [ 1310.011742][T25458] do_SYSENTER_32+0x73/0x90 [ 1310.016278][T25458] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1310.022608][T25458] [ 1310.024945][T25458] Uninit was stored to memory at: [ 1310.029994][T25458] kmsan_internal_chain_origin+0xad/0x130 [ 1310.035742][T25458] __msan_chain_origin+0x50/0x90 [ 1310.040734][T25458] __get_compat_msghdr+0x6db/0x9d0 [ 1310.045870][T25458] get_compat_msghdr+0x108/0x2b0 [ 1310.050838][T25458] __sys_sendmmsg+0x755/0xf70 [ 1310.055552][T25458] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1310.060970][T25458] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1310.066548][T25458] __do_fast_syscall_32+0x2af/0x480 [ 1310.071776][T25458] do_fast_syscall_32+0x6b/0xd0 [ 1310.076653][T25458] do_SYSENTER_32+0x73/0x90 [ 1310.081202][T25458] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1310.087534][T25458] [ 1310.089875][T25458] Local variable ----msg_sys@__sys_sendmmsg created at: [ 1310.096848][T25458] __sys_sendmmsg+0xbb/0xf70 [ 1310.101482][T25458] __sys_sendmmsg+0xbb/0xf70 15:58:07 executing program 2: 15:58:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r0, &(0x7f0000000000)=@rc={0x1f, @any=[0x1d], 0x1}, 0x80) shutdown(r0, 0x0) 15:58:07 executing program 4: 15:58:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xe0ffffff}, 0x1c) 15:58:07 executing program 5: 15:58:08 executing program 4: 15:58:08 executing program 2: [ 1311.450185][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1311.460862][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1311.468339][ T4874] loop3: p2 < > 15:58:08 executing program 5: 15:58:08 executing program 4: 15:58:08 executing program 3: 15:58:08 executing program 2: 15:58:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f00000000c0)) 15:58:09 executing program 4: 15:58:09 executing program 5: 15:58:09 executing program 3: 15:58:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xe55dc434}, 0x1c) 15:58:09 executing program 2: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) [ 1312.587485][ T12] Bluetooth: hci0: command 0x0405 tx timeout 15:58:09 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x7, 0x0, 0x0) 15:58:09 executing program 5: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) 15:58:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x890b, &(0x7f0000000040)={'vcan0\x00'}) [ 1312.943830][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1312.954219][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1312.961751][ T4874] loop3: p2 < > 15:58:10 executing program 2: r0 = socket(0x18, 0x0, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x111, 0xb, 0x0, 0x0) 15:58:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x3, &(0x7f0000000000)="d6eb17a9", 0x4) 15:58:10 executing program 4: pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)="ec", 0x1}], 0x20000101, 0xe) 15:58:10 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0, 0xf0ff7f}}, 0x0) 15:58:10 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) close(r1) 15:58:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8932, &(0x7f0000000040)={'vcan0\x00'}) 15:58:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xf5ffffff}, 0x1c) 15:58:10 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_buf(r0, 0x84, 0x9, 0x0, &(0x7f0000000180)=0xf00) 15:58:11 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x80045113, &(0x7f0000000040)) 15:58:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7}, 0x0) r1 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsa\x00', 0x408802, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x80600, 0x0) getpid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) 15:58:11 executing program 3: r0 = socket(0x15, 0x5, 0x0) setsockopt$packet_buf(r0, 0x114, 0x2, 0x0, 0x0) 15:58:11 executing program 2: r0 = socket(0x2, 0x3, 0x2) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x13, &(0x7f0000000140), 0x4) 15:58:11 executing program 4: socketpair(0x27, 0x0, 0x0, &(0x7f00000009c0)) 15:58:11 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') setns(r0, 0x0) 15:58:11 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_buf(r0, 0x84, 0x1a, 0x0, &(0x7f0000000180)) 15:58:11 executing program 3: r0 = socket(0xa, 0x3, 0x8) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x29, 0x7, 0x0, 0x960000) 15:58:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) ioctl$USBDEVFS_SUBMITURB(r0, 0x4004551e, &(0x7f0000000440)=@urb_type_interrupt={0x1, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:58:12 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000080)=0x8) 15:58:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xfc000000}, 0x1c) 15:58:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 15:58:12 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x80184947, 0x0) 15:58:12 executing program 5: r0 = socket(0x1e, 0x4, 0x0) bind$netrom(r0, 0x0, 0x3) 15:58:12 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000001c0)) 15:58:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x3c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6}]}, 0x3c}}, 0x0) 15:58:12 executing program 0: r0 = socket(0x2c, 0x3, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x11b, 0x5, 0x0, 0x0) 15:58:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b62, &(0x7f0000000680)={0x0, "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"}) 15:58:13 executing program 5: r0 = socket(0xa, 0x2, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0xf, 0x0, 0x0) [ 1316.246668][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1316.257452][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1316.264693][ T4874] loop3: p2 < > 15:58:13 executing program 2: r0 = socket(0x2a, 0x2, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x2a}, 0xc) 15:58:13 executing program 4: prctl$PR_SET_MM_AUXV(0x21, 0xc, &(0x7f0000000340)="04", 0x1) 15:58:13 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x5111, 0x0) 15:58:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xfe800000}, 0x1c) 15:58:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b4d, 0x0) 15:58:13 executing program 3: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x8901, &(0x7f0000000000)) 15:58:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x7}, 0x10) sendmmsg(r0, &(0x7f00000001c0), 0x3fffffffffffd53, 0x0) 15:58:14 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x1263, 0x0) 15:58:14 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x14, 0x1, 0x0, 0x0, {0x60}}, 0x14}}, 0x0) 15:58:14 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_buf(r0, 0x84, 0xf, 0x0, &(0x7f0000000180)=0xf00) 15:58:14 executing program 5: prctl$PR_GET_TID_ADDRESS(0x24, 0x0) 15:58:14 executing program 0: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001080), 0x0}, 0x40) 15:58:14 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000002c0)={0x0, 0xfffffffd, 0x0, 0x14, 0x0, 0xa1eb}) 15:58:14 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x2, 0x2102) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000100)) 15:58:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0xd0, 0x140, 0x140, 0xd0, 0x140, 0x2a8, 0x258, 0x258, 0x2a8, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 15:58:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xfe80000b}, 0x1c) 15:58:15 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3ff}, 0x8) 15:58:15 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 15:58:15 executing program 2: r0 = socket(0x11, 0x2, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x107, 0x11, 0x0, 0x0) 15:58:15 executing program 4: socketpair(0xf, 0x0, 0x0, &(0x7f00000001c0)) 15:58:15 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) [ 1318.535048][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1318.545461][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1318.552995][ T4874] loop3: p2 < > 15:58:15 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000500}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x7) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000002280)='/dev/video0\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000280)={0x0, 0x0, "f5c56bef90663da8a5743d1b49a9ff047ad01b75d2ab3f9303095bdbbc33f49f5bd82cfca016250bd795522dff56f8eb0967989a1abaed047c43f044640a49077b6f5116095071e0878a70157a8210f9ceff5fe3654c88ff214cb279f5ded2ea4d4144e14156ec03cb4ef6e56c876eb0c26947470ae4ebb39c55602f83c0455b7b2a6f48782fbafc883ca78b15ed0bf3ccaf89af3f3bfee7a52072d63bffe03502f946a748604eb2c112206e7639f0d6836f5262777d45b1580b07f7fc65d23f3299e7d17879478850bb98b45ceb73eaffffa89f75d1f40ad10ec98f6c1d7716c7892f866759bed1e8f3731f149ce51a5a5223ba5426a25831486a636db9f848", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001280)={r3, r4, "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", "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"}) 15:58:15 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89b0, &(0x7f0000000580)={'ip6tnl0\x00', 0x0}) 15:58:16 executing program 4: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8946, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 15:58:16 executing program 2: r0 = socket$inet(0x2, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8901, &(0x7f00000000c0)={'wg0\x00'}) 15:58:16 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, 0x0) 15:58:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) 15:58:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xfe80ffff}, 0x1c) [ 1319.790550][ T4874] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1319.801071][ T4874] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1319.809009][ T4874] loop3: p2 < > 15:58:17 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCDELRT(r0, 0x5411, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @dev}, @tipc, @rc={0x1f, @none}}) 15:58:17 executing program 3: socket(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) setrlimit(0x7, &(0x7f0000000240)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 15:58:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00'}, 0x45c) ioctl$UI_ABS_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000)) 15:58:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0205647, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c9ee9db0"}, 0x0, 0x0, @fd}) 15:58:17 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8936, 0x0) 15:58:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xc208ae62, 0x0) [ 1320.891226][T25672] input: syz0 as /devices/virtual/input/input229 [ 1320.961152][T25680] input: syz0 as /devices/virtual/input/input230 15:58:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xfec0ffff}, 0x1c) 15:58:18 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f00000003c0)={0x6, @dev={0xac, 0x14, 0x14, 0x1f}, 0x4e20, 0x0, 'dh\x00'}, 0x2c) 15:58:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae00, 0x0) 15:58:18 executing program 0: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x80047437, 0x0) 15:58:18 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setuid(0xee00) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in, @ipx={0x4, 0x0, 0x0, "38d36f05321c"}, @ethernet={0x0, @dev}}) 15:58:18 executing program 5: prctl$PR_GET_TID_ADDRESS(0x35, &(0x7f0000000000)) 15:58:19 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x40d4) 15:58:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b72, &(0x7f0000000680)={0x0, "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"}) 15:58:19 executing program 0: pipe2(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$USERIO_CMD_REGISTER(r1, 0x0, 0xeffdffff) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)='\v', 0x1}], 0x1, 0x0) 15:58:19 executing program 5: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @remote}, @l2tp={0x2, 0x0, @loopback=0x7f00000b}, @ipx={0x4, 0x0, 0x0, "a2ce92b909ad"}}) bpf$BPF_PROG_GET_FD_BY_ID(0xe, &(0x7f00000000c0), 0x7c) 15:58:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x5}, @ipx={0x4, 0x45f, 0x8, "914b08af9662", 0x5}, @isdn={0x22, 0x3, 0xff, 0x0, 0x40}, 0x4, 0x0, 0x0, 0x0, 0x275, &(0x7f0000000000)='hsr0\x00', 0x3ff, 0x6, 0x1}) 15:58:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xff000000}, 0x1c) 15:58:19 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0x5421, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 15:58:19 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0xd, &(0x7f00000003c0)={0x6, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) 15:58:20 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0xf0, 0xa, 0xd0e0000, 0x0, 0x100, 0x1f8, 0x1d8, 0x1d8, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'vlan0\x00', 'batadv0\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'veth0_macvtap\x00', {0x0, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x2f, 0x8, 0x8}, {0x6}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x800}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@icmp={{0x28, 'icmp\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 15:58:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)="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"}) 15:58:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) 15:58:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454ca, 0x404f00) ioctl$TUNSETFILTEREBPF(r0, 0x8927, &(0x7f0000000000)) 15:58:20 executing program 2: msgsnd(0x0, &(0x7f0000000140), 0x8, 0x0) 15:58:20 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0xc0844123, &(0x7f0000000000)=0x4) 15:58:20 executing program 4: pkey_mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3000009, 0xffffffffffffffff) 15:58:20 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 15:58:20 executing program 2: prctl$PR_SET_PTRACER(0x1b, 0x0) 15:58:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xff0f0000}, 0x1c) 15:58:21 executing program 5: r0 = userfaultfd(0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0x541b, 0x0) 15:58:21 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x894c, 0x0) 15:58:21 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0xc8, 0xa, 0xd0e0000, 0x0, 0x100, 0x1f0, 0x1d8, 0x1d8, 0x1f0, 0x1d8, 0x3, 0x0, {[{{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'batadv0\x00'}, 0x0, 0xa8, 0xc8, 0x0, {}, [@common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg2\x00', 'team_slave_0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}, @common=@inet=@ecn={{0x28, 'ecn\x00'}, {0x0, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) 15:58:21 executing program 4: r0 = socket(0x2a, 0x2, 0x0) bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @hyper}, 0x10) 15:58:21 executing program 2: socketpair(0x18, 0x0, 0xfffffffa, &(0x7f0000000000)) 15:58:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_ABS_SETUP(r0, 0x5502, 0x0) 15:58:21 executing program 0: r0 = socket(0xa, 0x3, 0x8) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x29, 0x1, 0x0, 0x7fffffffefff) 15:58:21 executing program 3: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8915, 0x0) 15:58:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454ca, 0x404f00) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xffffffffffffffff) 15:58:22 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_buf(r0, 0x84, 0xe, 0x0, &(0x7f0000000180)=0xf00) 15:58:22 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000180)={{0x0, 0x5}}) 15:58:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xffff0000}, 0x1c) 15:58:22 executing program 2: truncate(&(0x7f0000000440)='.\x00', 0x0) 15:58:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x541b, 0x0) 15:58:22 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000), 0x10) 15:58:22 executing program 0: r0 = socket(0x2, 0x2, 0x0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x4, 0xf0ff7f}, 0x2000004c, &(0x7f0000000100)={0x0, 0x2}}, 0x9618) 15:58:23 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r0, 0x5433, 0x0) 15:58:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x6, 0x0, 0x0) 15:58:23 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x3, 0x0, 0x0) 15:58:23 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4004af61, 0x0) 15:58:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7, 0x0, 0xfd5, 0x1}, 0x40) 15:58:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000000)={'ip6gre0\x00', @ifru_map}) 15:58:23 executing program 3: r0 = socket(0x10, 0x3, 0x0) bind$nfc_llcp(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, "6005eab49091e986838cc159a36172d7d6af006c29e64edf56416bffe8ca8c80118a1cb9e315bd06857d321a14922465374a7c5b63720662a50886ef20dae5"}, 0x60) 15:58:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xffff80fe}, 0x1c) 15:58:23 executing program 2: ioperm(0x0, 0x14, 0xffdffffffffffff9) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) 15:58:23 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000000)={0x0, 0x0, 0x9b, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "26c62347504882f792b151c374b21b1e"}) 15:58:23 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xb701, 0x0) 15:58:24 executing program 2: r0 = socket(0x28, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x80108906, 0x0) 15:58:24 executing program 5: r0 = socket(0x2b, 0x1, 0x0) getpeername$tipc(r0, 0x0, 0x0) 15:58:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_WAITACTIVE(r0, 0x5437) syz_open_dev$tty1(0xc, 0x4, 0x1) 15:58:24 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000800)=[{&(0x7f0000000580)=""/21, 0x15}], 0x1, 0x0, 0x0, 0x0) 15:58:24 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc0d05640, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "74000089"}, 0x0, 0x0, @fd}) 15:58:24 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x4, 0x0, 0x0) 15:58:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x890d, 0x0) 15:58:25 executing program 3: prctl$PR_MCE_KILL(0x21, 0xce2e7021505bf407, 0x0) 15:58:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xffffc0fe}, 0x1c) 15:58:25 executing program 0: r0 = socket(0x2c, 0x3, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x10e, 0x3, 0x0, 0x0) 15:58:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, 0x0) 15:58:25 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x52b, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)) 15:58:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5427, 0x0) 15:58:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8937, &(0x7f0000000700)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, @private1}) 15:58:26 executing program 5: r0 = socket(0x2a, 0x2, 0x0) getsockname$netrom(r0, 0x0, &(0x7f0000000640)) 15:58:26 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_buf(r0, 0x84, 0x83, 0x0, &(0x7f0000000180)) 15:58:26 executing program 2: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 15:58:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, &(0x7f0000000080)) 15:58:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b32, &(0x7f0000000680)={0x0, "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"}) 15:58:26 executing program 5: r0 = socket(0x10, 0x2, 0x6) setsockopt$PNPIPE_ENCAP(r0, 0x10e, 0x2, 0x0, 0x0) 15:58:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xffffff8d}, 0x1c) 15:58:27 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8922, &(0x7f0000000700)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, @private1}) 15:58:27 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) close(r1) 15:58:27 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x402, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'trylock', ' ', 'none'}, 0xd) 15:58:27 executing program 3: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x894a, &(0x7f0000000240)={'tunl0\x00', 0x0}) 15:58:27 executing program 2: r0 = socket(0x11, 0x2, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x107, 0x16, 0x0, 0x0) 15:58:27 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x21, 0x0, 0x0) 15:58:28 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) close(r1) 15:58:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 15:58:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {0xf}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}}, 0x0) 15:58:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0xffffff91}, 0x1c) 15:58:28 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xa, 0xd0e0000, 0xe0, 0x100, 0x1d0, 0x1d8, 0x1d8, 0x1d0, 0x1d8, 0x3, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'vlan0\x00', 'batadv0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg2\x00', 'team_slave_0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}, @common=@inet=@esp={{0x30, 'esp\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 15:58:28 executing program 5: r0 = socket$inet(0x2, 0x3, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x891e, &(0x7f0000000000)={'batadv0\x00'}) 15:58:28 executing program 4: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8929, &(0x7f0000000240)={'tunl0\x00', 0x0}) 15:58:28 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000140)={0x6, 0x37, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) 15:58:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4bfb, &(0x7f0000000680)={0x0, "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"}) 15:58:29 executing program 2: accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c81) [ 1332.210916][T25921] ===================================================== [ 1332.218005][T25921] BUG: KMSAN: uninit-value in ucma_connect+0x458/0xc30 [ 1332.224912][T25921] CPU: 0 PID: 25921 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1332.233611][T25921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1332.243703][T25921] Call Trace: [ 1332.247051][T25921] dump_stack+0x21c/0x280 [ 1332.251433][T25921] kmsan_report+0xf7/0x1e0 [ 1332.255913][T25921] __msan_warning+0x58/0xa0 [ 1332.260477][T25921] ucma_connect+0x458/0xc30 [ 1332.265041][T25921] ? kmsan_get_metadata+0x116/0x180 [ 1332.270290][T25921] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1332.276410][T25921] ? _copy_from_user+0x201/0x310 [ 1332.281399][T25921] ? kmsan_get_metadata+0x116/0x180 [ 1332.286705][T25921] ucma_write+0x64d/0x6e0 [ 1332.291111][T25921] ? ucma_get_global_nl_info+0xe0/0xe0 [ 1332.296618][T25921] vfs_write+0x6a3/0x17c0 [ 1332.301899][T25921] ? __msan_poison_alloca+0xf0/0x120 [ 1332.307238][T25921] ? kmsan_get_metadata+0x116/0x180 [ 1332.312504][T25921] ksys_write+0x275/0x500 [ 1332.316889][T25921] ? kmsan_get_metadata+0x116/0x180 [ 1332.322119][T25921] __se_sys_write+0x92/0xb0 [ 1332.326675][T25921] __ia32_sys_write+0x4a/0x70 [ 1332.331392][T25921] __do_fast_syscall_32+0x2af/0x480 [ 1332.336638][T25921] do_fast_syscall_32+0x6b/0xd0 [ 1332.341552][T25921] do_SYSENTER_32+0x73/0x90 [ 1332.346108][T25921] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1332.352486][T25921] RIP: 0023:0xf7fd6549 [ 1332.356566][T25921] Code: Bad RIP value. [ 1332.360652][T25921] RSP: 002b:00000000f55d00cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1332.369103][T25921] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 1332.377121][T25921] RDX: 0000000000000120 RSI: 0000000000000000 RDI: 0000000000000000 [ 1332.385129][T25921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1332.393134][T25921] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1332.401368][T25921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1332.409378][T25921] [ 1332.411737][T25921] Local variable ----cmd@ucma_connect created at: [ 1332.418174][T25921] ucma_connect+0xde/0xc30 [ 1332.422602][T25921] ucma_connect+0xde/0xc30 [ 1332.427043][T25921] ===================================================== [ 1332.433978][T25921] Disabling lock debugging due to kernel taint [ 1332.440143][T25921] Kernel panic - not syncing: panic_on_warn set ... [ 1332.446760][T25921] CPU: 0 PID: 25921 Comm: syz-executor.0 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 1332.456831][T25921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1332.466902][T25921] Call Trace: [ 1332.470255][T25921] dump_stack+0x21c/0x280 [ 1332.474663][T25921] panic+0x4d7/0xef7 [ 1332.478612][T25921] ? add_taint+0x17c/0x210 [ 1332.483067][T25921] kmsan_report+0x1df/0x1e0 [ 1332.487611][T25921] __msan_warning+0x58/0xa0 [ 1332.492148][T25921] ucma_connect+0x458/0xc30 [ 1332.496695][T25921] ? kmsan_get_metadata+0x116/0x180 [ 1332.501929][T25921] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1332.508031][T25921] ? _copy_from_user+0x201/0x310 [ 1332.512998][T25921] ? kmsan_get_metadata+0x116/0x180 [ 1332.518235][T25921] ucma_write+0x64d/0x6e0 [ 1332.522603][T25921] ? ucma_get_global_nl_info+0xe0/0xe0 [ 1332.528092][T25921] vfs_write+0x6a3/0x17c0 [ 1332.532460][T25921] ? __msan_poison_alloca+0xf0/0x120 [ 1332.537771][T25921] ? kmsan_get_metadata+0x116/0x180 [ 1332.542999][T25921] ksys_write+0x275/0x500 [ 1332.547367][T25921] ? kmsan_get_metadata+0x116/0x180 [ 1332.552619][T25921] __se_sys_write+0x92/0xb0 [ 1332.558651][T25921] __ia32_sys_write+0x4a/0x70 [ 1332.563356][T25921] __do_fast_syscall_32+0x2af/0x480 [ 1332.568600][T25921] do_fast_syscall_32+0x6b/0xd0 [ 1332.573486][T25921] do_SYSENTER_32+0x73/0x90 [ 1332.578016][T25921] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1332.584380][T25921] RIP: 0023:0xf7fd6549 [ 1332.588450][T25921] Code: Bad RIP value. [ 1332.592537][T25921] RSP: 002b:00000000f55d00cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1332.600964][T25921] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 1332.608972][T25921] RDX: 0000000000000120 RSI: 0000000000000000 RDI: 0000000000000000 [ 1332.616990][T25921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1332.624978][T25921] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1332.632966][T25921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1332.642136][T25921] Kernel Offset: disabled [ 1332.646482][T25921] Rebooting in 86400 seconds..