0000000001010000000000004000000000000000020500000000000050000000000000000005000000000000400000000000000007050000000000004000000000000000080500000000000040000000000000000000001000000000080000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f050000000000006000000000000000010100000000000040000000000000000c0500000000000060000000000000000d050000000000006000000000000000000510000000000060000000000000000b05000000000000600000000000000000000010000000000d0000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000005000000000000700000000000000001010000000000004000000000000000010500000000000070000000000000000d050000000000006000000000000000000510000000000060000000000000000b05000000000000600000000000000000000010000000000d000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000050500000000000040000000000000000101000000000000400000000000000006050000000000004000000000000000000500000000000040000000000000000705000000000000400000000000000008050000000000004000000000000000000000100000000008000000000000001", 0x274, 0x10b20}], 0x0, &(0x7f0000000a40)={[{@inode_cache}]}) [ 1592.253744][ T8719] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1592.353122][ T6423] usb 1-1: new high-speed USB device number 85 using dummy_hcd 06:30:04 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:30:04 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) connect$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) [ 1592.593226][ T6423] usb 1-1: Using ep0 maxpacket: 16 [ 1592.613817][ T8719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1592.625172][ T8719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1592.635374][ T8719] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1592.649108][ T8719] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1592.658571][ T8719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.727726][ T9766] loop5: detected capacity change from 0 to 267 [ 1592.894285][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1592.903843][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.911980][ T6423] usb 1-1: Product: syz [ 1592.916472][ T6423] usb 1-1: Manufacturer: syz [ 1592.921191][ T6423] usb 1-1: SerialNumber: syz 06:30:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1f, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) [ 1592.955278][ T8719] usb 4-1: config 0 descriptor?? 06:30:05 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x2, &(0x7f0000000340)=@raw=[@map_val], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1593.003765][T30181] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1593.032472][ T6423] usb 1-1: config 0 descriptor?? [ 1593.086374][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1593.253148][T30181] usb 5-1: Using ep0 maxpacket: 16 [ 1593.430252][ T8719] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x2 [ 1593.457737][ T8719] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 1593.497590][ T8719] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1593.624842][T30181] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1593.634146][T30181] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.642277][T30181] usb 5-1: Product: syz [ 1593.646797][T30181] usb 5-1: Manufacturer: syz [ 1593.651629][T30181] usb 5-1: SerialNumber: syz [ 1593.662699][T30181] usb 5-1: config 0 descriptor?? [ 1593.707974][T22549] usb 4-1: USB disconnect, device number 37 [ 1593.721907][T30181] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1594.504067][T22549] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1594.883362][T22549] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1594.894838][T22549] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1594.904986][T22549] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1594.918382][T22549] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1594.927851][T22549] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.942391][T22549] usb 4-1: config 0 descriptor?? [ 1595.173296][T22549] usbhid 4-1:0.0: can't add hid device: -71 [ 1595.179473][T22549] usbhid: probe of 4-1:0.0 failed with error -71 [ 1595.194285][T22549] usb 4-1: USB disconnect, device number 38 [ 1596.326632][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1596.333216][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1596.339734][ T6423] gspca_stk1135: Sensor write failed [ 1596.345499][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1596.352088][ T6423] gspca_stk1135: Sensor write failed [ 1596.357823][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1596.366215][ T6423] gspca_stk1135: Sensor read failed [ 1596.371594][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1596.379003][ T6423] gspca_stk1135: Sensor read failed [ 1596.384572][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1596.391360][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1596.397928][ T6423] gspca_stk1135: Sensor read failed [ 1596.403506][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1596.410000][ T6423] gspca_stk1135: Sensor read failed [ 1596.415582][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1596.427096][ T6423] gspca_stk1135: Sensor write failed [ 1596.432798][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1596.439516][ T6423] gspca_stk1135: Sensor write failed [ 1596.445247][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1596.458328][ T6423] usb 1-1: USB disconnect, device number 85 06:30:08 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:30:08 executing program 5: syz_mount_image$btrfs(&(0x7f0000000000), 0x0, 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="5d650181193eac9238391a5f172d3ef144fcf7f3b5c03bb7e73074d5c9551ec4e76ed35274d74461bdaa670e3acfe92b000001000000000001000000000000005f42485266535f4d07000000", 0x4c, 0x10000}, {&(0x7f0000010200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\a', 0x14, 0x10220}, {&(0x7f0000010300)="00000000000000000000000001000000000000e4000010000000000000004000000000000200000000000000000001000000000002000000000000000010000000100000001000000100000001000000000000000000100000000000d75eaab06fc243b288e5e7aed2214d5d", 0x6c, 0x10320}, {&(0x7f0000010400)="000000000000000000000000105000000000000500000000000000001010000000000004000000000000000020500000000000050000000000000000005000000000000400000000000000007050000000000004000000000000000080500000000000040000000000000000000001000000000080000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f050000000000006000000000000000010100000000000040000000000000000c0500000000000060000000000000000d050000000000006000000000000000000510000000000060000000000000000b05000000000000600000000000000000000010000000000d0000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000005000000000000700000000000000001010000000000004000000000000000010500000000000070000000000000000d050000000000006000000000000000000510000000000060000000000000000b05000000000000600000000000000000000010000000000d000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000050500000000000040000000000000000101000000000000400000000000000006050000000000004000000000000000000500000000000040000000000000000705000000000000400000000000000008050000000000004000000000000000000000100000000008000000000000001", 0x274, 0x10b20}], 0x0, &(0x7f0000000a40)={[{@inode_cache}]}) 06:30:08 executing program 2: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') mkdir(&(0x7f0000000f80)='./bus\x00', 0x0) 06:30:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000035c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x4, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="5ae152ea", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:30:08 executing program 3: r0 = fork() r1 = fork() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000100)) [ 1596.979880][ T9836] loop5: detected capacity change from 0 to 267 06:30:09 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000140)='(#\x00', 0x3) [ 1597.193434][T30181] gspca_stk1135: reg_w 0x353 err -71 [ 1597.200217][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1597.207062][T30181] gspca_stk1135: Sensor write failed [ 1597.212510][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1597.219388][T30181] gspca_stk1135: Sensor write failed [ 1597.225138][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1597.231554][T30181] gspca_stk1135: Sensor read failed [ 1597.237356][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1597.243986][T30181] gspca_stk1135: Sensor read failed [ 1597.249374][T30181] gspca_stk1135: Detected sensor type unknown (0x0) [ 1597.256411][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1597.263262][T30181] gspca_stk1135: Sensor read failed [ 1597.268622][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1597.275314][T30181] gspca_stk1135: Sensor read failed [ 1597.280667][T30181] gspca_stk1135: serial bus timeout: status=0x00 06:30:09 executing program 5: syz_mount_image$btrfs(&(0x7f0000000000), 0x0, 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="5d650181193eac9238391a5f172d3ef144fcf7f3b5c03bb7e73074d5c9551ec4e76ed35274d74461bdaa670e3acfe92b000001000000000001000000000000005f42485266535f4d07000000", 0x4c, 0x10000}, {&(0x7f0000010200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\a', 0x14, 0x10220}, {&(0x7f0000010300)="00000000000000000000000001000000000000e4000010000000000000004000000000000200000000000000000001000000000002000000000000000010000000100000001000000100000001000000000000000000100000000000d75eaab06fc243b288e5e7aed2214d5d", 0x6c, 0x10320}, {&(0x7f0000010400)="000000000000000000000000105000000000000500000000000000001010000000000004000000000000000020500000000000050000000000000000005000000000000400000000000000007050000000000004000000000000000080500000000000040000000000000000000001000000000080000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f050000000000006000000000000000010100000000000040000000000000000c0500000000000060000000000000000d050000000000006000000000000000000510000000000060000000000000000b05000000000000600000000000000000000010000000000d0000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000005000000000000700000000000000001010000000000004000000000000000010500000000000070000000000000000d050000000000006000000000000000000510000000000060000000000000000b05000000000000600000000000000000000010000000000d000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000050500000000000040000000000000000101000000000000400000000000000006050000000000004000000000000000000500000000000040000000000000000705000000000000400000000000000008050000000000004000000000000000000000100000000008000000000000001", 0x274, 0x10b20}], 0x0, &(0x7f0000000a40)={[{@inode_cache}]}) [ 1597.289328][T30181] gspca_stk1135: Sensor write failed [ 1597.294538][ T9843] overlayfs: conflicting lowerdir path [ 1597.295321][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1597.306885][T30181] gspca_stk1135: Sensor write failed [ 1597.312403][T30181] stk1135: probe of 5-1:0.0 failed with error -71 [ 1597.487010][ T9856] loop5: detected capacity change from 0 to 267 06:30:09 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}}, &(0x7f0000000340)=""/161, 0x26, 0xa1, 0x1}, 0x20) [ 1597.540243][T30181] usb 5-1: USB disconnect, device number 51 06:30:09 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:30:09 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000180)=0x8) 06:30:09 executing program 5: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={[{@inode_cache}]}) 06:30:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000008500), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000004c00)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, 0x0}}], 0x1, 0x2, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={&(0x7f0000008540)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1597.803153][ T6423] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1598.046835][ T6423] usb 1-1: Using ep0 maxpacket: 16 [ 1598.323629][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1598.333361][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.341506][ T6423] usb 1-1: Product: syz [ 1598.346108][ T6423] usb 1-1: Manufacturer: syz [ 1598.350820][ T6423] usb 1-1: SerialNumber: syz [ 1598.443197][T30181] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1598.465932][ T6423] usb 1-1: config 0 descriptor?? [ 1598.508966][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1598.683193][T30181] usb 5-1: Using ep0 maxpacket: 16 [ 1598.963506][T30181] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1598.972789][T30181] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.981174][T30181] usb 5-1: Product: syz [ 1598.985593][T30181] usb 5-1: Manufacturer: syz [ 1598.990517][T30181] usb 5-1: SerialNumber: syz [ 1599.001852][T30181] usb 5-1: config 0 descriptor?? [ 1599.048759][T30181] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1601.733225][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1601.739732][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1601.746450][ T6423] gspca_stk1135: Sensor write failed [ 1601.751903][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1601.758651][ T6423] gspca_stk1135: Sensor write failed [ 1601.764350][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1601.770767][ T6423] gspca_stk1135: Sensor read failed [ 1601.776328][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1601.783065][ T6423] gspca_stk1135: Sensor read failed [ 1601.788339][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1601.797151][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1601.804293][ T6423] gspca_stk1135: Sensor read failed [ 1601.809655][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1601.816203][ T6423] gspca_stk1135: Sensor read failed [ 1601.821901][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1601.828398][ T6423] gspca_stk1135: Sensor write failed [ 1601.834039][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1601.840446][ T6423] gspca_stk1135: Sensor write failed [ 1601.846184][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1601.860774][ T6423] usb 1-1: USB disconnect, device number 86 06:30:14 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:30:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={0x0}, 0x1, 0x0, 0x300}, 0x0) 06:30:14 executing program 5: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={[{@inode_cache}]}) 06:30:14 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x3, 0x0, &(0x7f0000000300)=0x4) 06:30:14 executing program 3: r0 = syz_io_uring_setup(0x525c, &(0x7f0000000280), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 06:30:14 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) 06:30:14 executing program 5: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={[{@inode_cache}]}) [ 1602.483383][T30181] gspca_stk1135: reg_w 0x353 err -71 [ 1602.490076][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1602.497199][T30181] gspca_stk1135: Sensor write failed [ 1602.502644][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1602.511085][T30181] gspca_stk1135: Sensor write failed [ 1602.517107][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1602.523668][T30181] gspca_stk1135: Sensor read failed [ 1602.529021][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1602.536433][T30181] gspca_stk1135: Sensor read failed [ 1602.541700][T30181] gspca_stk1135: Detected sensor type unknown (0x0) [ 1602.548594][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1602.555098][T30181] gspca_stk1135: Sensor read failed [ 1602.560466][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1602.566966][T30181] gspca_stk1135: Sensor read failed [ 1602.572335][T30181] gspca_stk1135: serial bus timeout: status=0x00 06:30:14 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000700), 0x20a982, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) [ 1602.578961][T30181] gspca_stk1135: Sensor write failed [ 1602.584501][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1602.590912][T30181] gspca_stk1135: Sensor write failed [ 1602.596540][T30181] stk1135: probe of 5-1:0.0 failed with error -71 [ 1602.773958][T30181] usb 5-1: USB disconnect, device number 52 [ 1603.034639][ T6423] usb 1-1: new high-speed USB device number 87 using dummy_hcd 06:30:15 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) 06:30:15 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4202, 0x0) 06:30:15 executing program 5: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="5d650181193eac9238391a5f172d3ef144fcf7f3b5c03bb7e73074d5c9551ec4e76ed35274d74461bdaa670e3acfe92b000001000000000001000000000000005f42485266535f4d07000000", 0x4c, 0x10000}, {&(0x7f0000010200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\a', 0x14, 0x10220}, {&(0x7f0000010300)="00000000000000000000000001000000000000e4000010000000000000004000000000000200000000000000000001000000000002000000000000000010000000100000001000000100000001000000000000000000100000000000d75eaab06fc243b288e5e7aed2214d5d", 0x6c, 0x10320}], 0x0, &(0x7f0000000a40)={[{@inode_cache}]}) 06:30:15 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000), 0x8) [ 1603.296513][ T6423] usb 1-1: Using ep0 maxpacket: 16 [ 1603.336399][ T9929] loop5: detected capacity change from 0 to 259 [ 1603.603923][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1603.613248][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.622083][ T6423] usb 1-1: Product: syz [ 1603.626930][ T6423] usb 1-1: Manufacturer: syz [ 1603.631639][ T6423] usb 1-1: SerialNumber: syz [ 1603.669335][ T6423] usb 1-1: config 0 descriptor?? [ 1603.719122][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1607.003462][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1607.010133][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1607.018711][ T6423] gspca_stk1135: Sensor write failed [ 1607.024949][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1607.031377][ T6423] gspca_stk1135: Sensor write failed [ 1607.036944][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1607.043535][ T6423] gspca_stk1135: Sensor read failed [ 1607.048896][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1607.055575][ T6423] gspca_stk1135: Sensor read failed [ 1607.060852][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1607.068040][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1607.074634][ T6423] gspca_stk1135: Sensor read failed [ 1607.079994][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1607.086893][ T6423] gspca_stk1135: Sensor read failed [ 1607.092203][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1607.098745][ T6423] gspca_stk1135: Sensor write failed [ 1607.104898][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1607.111267][ T6423] gspca_stk1135: Sensor write failed [ 1607.116996][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1607.131155][ T6423] usb 1-1: USB disconnect, device number 87 06:30:19 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:30:19 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x4, 0x0, &(0x7f0000000300)) 06:30:19 executing program 2: socketpair(0x18, 0x0, 0x7, &(0x7f0000000040)) 06:30:19 executing program 5: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="5d650181193eac9238391a5f172d3ef144fcf7f3b5c03bb7e73074d5c9551ec4e76ed35274d74461bdaa670e3acfe92b000001000000000001000000000000005f42485266535f4d07000000", 0x4c, 0x10000}, {&(0x7f0000010200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\a', 0x14, 0x10220}], 0x0, &(0x7f0000000a40)={[{@inode_cache}]}) 06:30:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={0x0}, 0x8, 0x0, 0x9effffff}, 0x0) 06:30:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000008500), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/101, 0x65}}], 0x1, 0x2, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={&(0x7f0000008540)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1607.552158][ T9957] loop5: detected capacity change from 0 to 258 06:30:19 executing program 1: syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x2e201) 06:30:19 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2800002, 0x11, r0, 0x0) 06:30:19 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) 06:30:19 executing program 5: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="5d650181193eac9238391a5f172d3ef144fcf7f3b5c03bb7e73074d5c9551ec4e76ed35274d74461bdaa670e3acfe92b000001000000000001000000000000005f42485266535f4d07000000", 0x4c, 0x10000}], 0x0, &(0x7f0000000a40)={[{@inode_cache}]}) 06:30:19 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) [ 1608.093308][ T6423] usb 1-1: new high-speed USB device number 88 using dummy_hcd 06:30:20 executing program 2: socketpair(0x25, 0x0, 0x0, &(0x7f0000000280)) [ 1608.248264][ T9976] loop5: detected capacity change from 0 to 256 [ 1608.346146][ T6423] usb 1-1: Using ep0 maxpacket: 16 [ 1608.655162][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1608.664589][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.674733][ T6423] usb 1-1: Product: syz [ 1608.679019][ T6423] usb 1-1: Manufacturer: syz [ 1608.683802][ T6423] usb 1-1: SerialNumber: syz [ 1608.697874][ T6423] usb 1-1: config 0 descriptor?? [ 1608.751413][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1612.013328][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1612.019910][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1612.026618][ T6423] gspca_stk1135: Sensor write failed [ 1612.034265][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1612.040684][ T6423] gspca_stk1135: Sensor write failed [ 1612.046920][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1612.053517][ T6423] gspca_stk1135: Sensor read failed [ 1612.058866][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1612.065477][ T6423] gspca_stk1135: Sensor read failed [ 1612.070742][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1612.077682][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1612.084368][ T6423] gspca_stk1135: Sensor read failed [ 1612.089891][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1612.096483][ T6423] gspca_stk1135: Sensor read failed [ 1612.102326][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1612.109480][ T6423] gspca_stk1135: Sensor write failed [ 1612.115129][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1612.121590][ T6423] gspca_stk1135: Sensor write failed [ 1612.127224][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1612.141072][ T6423] usb 1-1: USB disconnect, device number 88 06:30:24 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:30:24 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) 06:30:24 executing program 5: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000a40)={[{@inode_cache}]}) 06:30:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000008500), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000b"], 0x14}}, 0x0) 06:30:24 executing program 2: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2fc0}, 0x0) 06:30:24 executing program 3: r0 = io_uring_setup(0x2e1, &(0x7f0000000000)) io_uring_setup(0x6d77, &(0x7f0000000080)={0x0, 0x40b5, 0x1, 0x0, 0x74, 0x0, r0}) mlockall(0x3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x2000001, 0x30, 0xffffffffffffffff, 0x8000000) 06:30:24 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) 06:30:24 executing program 5: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) 06:30:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x83, 0x0, 0x0) 06:30:25 executing program 1: socket(0x1d, 0x6, 0x0) [ 1613.234268][ T6423] usb 1-1: new high-speed USB device number 89 using dummy_hcd 06:30:25 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) 06:30:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) [ 1613.473089][ T6423] usb 1-1: Using ep0 maxpacket: 16 [ 1613.527094][T10030] can: request_module (can-proto-0) failed. [ 1613.597734][T10030] can: request_module (can-proto-0) failed. [ 1613.753839][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1613.763503][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.773324][ T6423] usb 1-1: Product: syz [ 1613.777739][ T6423] usb 1-1: Manufacturer: syz [ 1613.782455][ T6423] usb 1-1: SerialNumber: syz [ 1613.937169][ T6423] usb 1-1: config 0 descriptor?? [ 1613.981140][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1615.776663][ T3121] ieee802154 phy0 wpan0: encryption failed: -22 [ 1615.783383][ T3121] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.283170][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1617.289743][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1617.296547][ T6423] gspca_stk1135: Sensor write failed [ 1617.301998][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1617.308582][ T6423] gspca_stk1135: Sensor write failed [ 1617.314266][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1617.320651][ T6423] gspca_stk1135: Sensor read failed [ 1617.326206][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1617.332816][ T6423] gspca_stk1135: Sensor read failed [ 1617.338303][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1617.345367][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1617.351869][ T6423] gspca_stk1135: Sensor read failed [ 1617.359470][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1617.366554][ T6423] gspca_stk1135: Sensor read failed [ 1617.371950][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1617.378477][ T6423] gspca_stk1135: Sensor write failed [ 1617.384265][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1617.390862][ T6423] gspca_stk1135: Sensor write failed [ 1617.396603][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1617.409542][ T6423] usb 1-1: USB disconnect, device number 89 06:30:29 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:30:29 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$rxrpc(r0, 0x0, 0x0) 06:30:29 executing program 5: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) 06:30:29 executing program 1: syz_open_dev$binderN(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000280), 0x0, 0x0) 06:30:29 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x0, 0x0, @mcast2}], 0x2c) 06:30:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={0x0}, 0x300, 0x0, 0x9effffff}, 0x0) 06:30:30 executing program 3: r0 = syz_io_uring_setup(0x1a85, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x0) 06:30:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='.', 0x1, 0x95, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @sack_perm, @timestamp, @sack_perm, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 06:30:30 executing program 5: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) 06:30:30 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000340)="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", 0x1000, 0x9}]) 06:30:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x88) 06:30:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010100}], 0x10) [ 1618.474029][ T6423] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1618.723834][ T6423] usb 1-1: Using ep0 maxpacket: 16 [ 1619.004737][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1619.014265][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.022581][ T6423] usb 1-1: Product: syz [ 1619.027314][ T6423] usb 1-1: Manufacturer: syz [ 1619.032055][ T6423] usb 1-1: SerialNumber: syz [ 1619.132617][ T6423] usb 1-1: config 0 descriptor?? [ 1619.182725][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1622.443347][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1622.449881][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1622.456627][ T6423] gspca_stk1135: Sensor write failed [ 1622.462078][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1622.468717][ T6423] gspca_stk1135: Sensor write failed [ 1622.476154][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1622.482569][ T6423] gspca_stk1135: Sensor read failed [ 1622.488439][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1622.495039][ T6423] gspca_stk1135: Sensor read failed [ 1622.500491][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1622.507557][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1622.514229][ T6423] gspca_stk1135: Sensor read failed [ 1622.519665][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1622.526312][ T6423] gspca_stk1135: Sensor read failed [ 1622.531703][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1622.538207][ T6423] gspca_stk1135: Sensor write failed [ 1622.543796][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1622.550305][ T6423] gspca_stk1135: Sensor write failed [ 1622.555981][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1622.568681][ T6423] usb 1-1: USB disconnect, device number 90 06:30:34 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:30:34 executing program 1: select(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x2fc0}, &(0x7f00000000c0)={0x77359400}) 06:30:34 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x56032, 0xffffffffffffffff, 0x0) 06:30:34 executing program 2: socketpair(0x2, 0x5, 0x3, &(0x7f00000048c0)) 06:30:34 executing program 5: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000a40)) 06:30:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={0x0}, 0x1, 0x0, 0x900}, 0x0) 06:30:35 executing program 1: io_uring_setup(0x6d77, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x74}) mlockall(0x3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x2000001, 0x30, 0xffffffffffffffff, 0x8000000) 06:30:35 executing program 3: socketpair(0x9, 0x0, 0x0, &(0x7f0000000080)) [ 1624.313386][ T8719] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1624.583387][ T8719] usb 1-1: Using ep0 maxpacket: 16 06:30:36 executing program 3: r0 = io_uring_setup(0x2e1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x2, &(0x7f0000000080), 0x1) 06:30:36 executing program 5: io_uring_setup(0x0, &(0x7f0000000000)) mlockall(0x3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x2000001, 0x10, 0xffffffffffffffff, 0x8000000) [ 1624.884123][ T8719] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1624.893584][ T8719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.901812][ T8719] usb 1-1: Product: syz [ 1624.906320][ T8719] usb 1-1: Manufacturer: syz [ 1624.911136][ T8719] usb 1-1: SerialNumber: syz 06:30:37 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) [ 1625.135402][ T8719] usb 1-1: config 0 descriptor?? 06:30:37 executing program 3: r0 = io_uring_setup(0x2e1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0xa, &(0x7f0000000080), 0x1) [ 1625.199176][ T8719] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1628.213216][ T8719] gspca_stk1135: reg_w 0x351 err -71 [ 1628.219690][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1628.226561][ T8719] gspca_stk1135: Sensor write failed [ 1628.232027][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1628.239013][ T8719] gspca_stk1135: Sensor write failed [ 1628.244594][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1628.251043][ T8719] gspca_stk1135: Sensor read failed [ 1628.256634][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1628.263233][ T8719] gspca_stk1135: Sensor read failed [ 1628.268518][ T8719] gspca_stk1135: Detected sensor type unknown (0x0) [ 1628.275474][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1628.281969][ T8719] gspca_stk1135: Sensor read failed [ 1628.287863][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1628.294636][ T8719] gspca_stk1135: Sensor read failed [ 1628.300087][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1628.306801][ T8719] gspca_stk1135: Sensor write failed 06:30:40 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:30:40 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) 06:30:40 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000001380)=ANY=[@ANYBLOB="12010003000000202505a8a440000102030109021b"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 06:30:40 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000080)=0x8) 06:30:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={0x0, 0xf0ff7f00000000}, 0x1, 0x0, 0x9effffff}, 0x0) 06:30:40 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000340)="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", 0x354}]) [ 1628.313351][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1628.319765][ T8719] gspca_stk1135: Sensor write failed [ 1628.327278][ T8719] stk1135: probe of 1-1:0.0 failed with error -71 [ 1628.363338][T10160] loop5: detected capacity change from 0 to 1 [ 1628.412160][ T8719] usb 1-1: USB disconnect, device number 91 [ 1628.505951][T10160] Dev loop5: unable to read RDB block 1 [ 1628.511823][T10160] loop5: unable to read partition table [ 1628.531186][T10160] loop5: partition table beyond EOD, truncated [ 1628.538021][T10160] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 06:30:40 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000340)="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", 0xdf9, 0x9}]) 06:30:40 executing program 1: socketpair(0x2, 0x5, 0x0, &(0x7f00000048c0)) 06:30:40 executing program 4: r0 = io_uring_setup(0x22b1, &(0x7f0000000080)) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x0) 06:30:40 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x0, @local}, @in], 0x20) [ 1628.825013][ T6423] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1628.886163][ T8719] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1629.074293][ T6423] usb 3-1: Using ep0 maxpacket: 32 06:30:41 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x0, 0x0, @mcast2}], 0x2c) [ 1629.166355][ T8719] usb 1-1: Using ep0 maxpacket: 16 06:30:41 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0xfffffffffffff000, 0x0, 0x10, r0, 0x0) [ 1629.234916][ T6423] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1629.324544][ T6423] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1629.336268][ T6423] usb 3-1: config 0 has no interfaces? [ 1629.476715][ T8719] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1629.486170][ T8719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.494030][ T6423] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1629.494681][ T8719] usb 1-1: Product: syz [ 1629.503540][ T6423] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.507804][ T8719] usb 1-1: Manufacturer: syz [ 1629.515996][ T6423] usb 3-1: Product: syz [ 1629.520572][ T8719] usb 1-1: SerialNumber: syz [ 1629.525329][ T6423] usb 3-1: Manufacturer: syz [ 1629.534468][ T6423] usb 3-1: SerialNumber: syz [ 1629.646159][ T6423] usb 3-1: config 0 descriptor?? [ 1629.711247][ T8719] usb 1-1: config 0 descriptor?? [ 1629.768501][ T8719] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1629.889735][ T6423] usb 3-1: USB disconnect, device number 55 [ 1630.673095][ T6423] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1630.913154][ T6423] usb 3-1: Using ep0 maxpacket: 32 [ 1631.073238][ T6423] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1631.153969][ T6423] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1631.164523][ T6423] usb 3-1: config 0 has no interfaces? [ 1631.323861][ T6423] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1631.333604][ T6423] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.341839][ T6423] usb 3-1: Product: syz [ 1631.346286][ T6423] usb 3-1: Manufacturer: syz [ 1631.351027][ T6423] usb 3-1: SerialNumber: syz [ 1631.361927][ T6423] usb 3-1: config 0 descriptor?? [ 1631.470551][ T6171] usb 3-1: USB disconnect, device number 56 [ 1633.016165][ T8719] gspca_stk1135: reg_w 0x352 err -71 [ 1633.023796][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1633.030311][ T8719] gspca_stk1135: Sensor write failed [ 1633.035880][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1633.042300][ T8719] gspca_stk1135: Sensor write failed [ 1633.047892][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1633.054448][ T8719] gspca_stk1135: Sensor read failed [ 1633.059879][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1633.066379][ T8719] gspca_stk1135: Sensor read failed [ 1633.071636][ T8719] gspca_stk1135: Detected sensor type unknown (0x0) [ 1633.082600][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1633.089142][ T8719] gspca_stk1135: Sensor read failed [ 1633.094639][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1633.101081][ T8719] gspca_stk1135: Sensor read failed [ 1633.106549][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1633.113101][ T8719] gspca_stk1135: Sensor write failed [ 1633.118496][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1633.125121][ T8719] gspca_stk1135: Sensor write failed [ 1633.130587][ T8719] stk1135: probe of 1-1:0.0 failed with error -71 [ 1633.148203][ T8719] usb 1-1: USB disconnect, device number 92 06:30:45 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:30:45 executing program 3: r0 = io_uring_setup(0x2e1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0xf, 0x0, 0x1) 06:30:45 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x241, 0x0) mmap$dsp(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x2000007, 0x13, r0, 0x0) 06:30:45 executing program 5: socketpair(0x2, 0xa, 0x8, &(0x7f0000000000)) 06:30:45 executing program 1: socketpair(0x22, 0x0, 0x26, &(0x7f0000000040)) 06:30:45 executing program 2: r0 = getpgid(0x0) r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, 0x0) 06:30:45 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)=0x8) 06:30:45 executing program 1: socketpair(0x22, 0x0, 0x3, &(0x7f0000000040)) 06:30:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7d, 0x0, &(0x7f0000000280)=0x88) 06:30:45 executing program 2: r0 = io_uring_setup(0x2e1, &(0x7f0000000000)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x2, &(0x7f0000000080)=r1, 0x1) 06:30:45 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) connect$pptp(r0, 0x0, 0x0) [ 1634.053216][ T8719] usb 1-1: new high-speed USB device number 93 using dummy_hcd 06:30:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)={0x14, 0x0, 0x4}, 0x14}}, 0x0) [ 1634.293474][ T8719] usb 1-1: Using ep0 maxpacket: 16 [ 1634.573337][ T8719] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1634.582623][ T8719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.591210][ T8719] usb 1-1: Product: syz [ 1634.595654][ T8719] usb 1-1: Manufacturer: syz [ 1634.600367][ T8719] usb 1-1: SerialNumber: syz [ 1634.692626][ T8719] usb 1-1: config 0 descriptor?? [ 1634.739811][ T8719] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1638.023200][ T8719] gspca_stk1135: reg_w 0x352 err -71 [ 1638.029887][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1638.036748][ T8719] gspca_stk1135: Sensor write failed [ 1638.043349][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1638.049772][ T8719] gspca_stk1135: Sensor write failed [ 1638.055973][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1638.062399][ T8719] gspca_stk1135: Sensor read failed [ 1638.068124][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1638.075054][ T8719] gspca_stk1135: Sensor read failed [ 1638.080329][ T8719] gspca_stk1135: Detected sensor type unknown (0x0) [ 1638.087536][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1638.094409][ T8719] gspca_stk1135: Sensor read failed [ 1638.099921][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1638.106923][ T8719] gspca_stk1135: Sensor read failed [ 1638.112237][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1638.118851][ T8719] gspca_stk1135: Sensor write failed [ 1638.124578][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1638.130986][ T8719] gspca_stk1135: Sensor write failed [ 1638.136648][ T8719] stk1135: probe of 1-1:0.0 failed with error -71 [ 1638.151865][ T8719] usb 1-1: USB disconnect, device number 93 06:30:50 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:30:50 executing program 5: epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000180), 0x61) 06:30:50 executing program 3: socketpair(0x22, 0x0, 0x24, &(0x7f0000000040)) 06:30:50 executing program 2: socketpair(0x22, 0x0, 0x22, &(0x7f0000000040)) 06:30:50 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000040)) 06:30:50 executing program 1: r0 = io_uring_setup(0x2e1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x8, 0x0, 0x1) 06:30:50 executing program 1: r0 = socket(0x1, 0x5, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={0x0}}, 0x0) 06:30:50 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) io_uring_setup(0x2e1, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 06:30:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000008500), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)=""/8, 0x8}, {&(0x7f0000000b80)=""/119, 0x77}], 0x2}}], 0x2, 0x2, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={&(0x7f0000008540)={0x14, r1, 0x1}, 0x14}}, 0x0) 06:30:50 executing program 5: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) 06:30:50 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80000002, 0x0) 06:30:51 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x481, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000140)) [ 1639.264105][ T6423] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1639.533177][ T6423] usb 1-1: Using ep0 maxpacket: 16 [ 1639.853430][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1639.863610][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.871833][ T6423] usb 1-1: Product: syz [ 1639.876387][ T6423] usb 1-1: Manufacturer: syz [ 1639.881137][ T6423] usb 1-1: SerialNumber: syz [ 1639.939176][ T6423] usb 1-1: config 0 descriptor?? [ 1639.990708][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1643.286015][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1643.292501][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1643.299361][ T6423] gspca_stk1135: Sensor write failed [ 1643.305070][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1643.311515][ T6423] gspca_stk1135: Sensor write failed [ 1643.317197][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1643.324024][ T6423] gspca_stk1135: Sensor read failed [ 1643.329359][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1643.335907][ T6423] gspca_stk1135: Sensor read failed [ 1643.341513][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1643.348472][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1643.355140][ T6423] gspca_stk1135: Sensor read failed [ 1643.360446][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1643.369130][ T6423] gspca_stk1135: Sensor read failed [ 1643.375175][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1643.381993][ T6423] gspca_stk1135: Sensor write failed [ 1643.387601][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1643.394312][ T6423] gspca_stk1135: Sensor write failed [ 1643.399777][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1643.412742][ T6423] usb 1-1: USB disconnect, device number 94 06:30:55 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:30:55 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x2, 0x0, &(0x7f0000000300)=0xffffffffffffff31) 06:30:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) 06:30:55 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0xb}]}}, &(0x7f0000000340)=""/161, 0x26, 0xa1, 0x1}, 0x20) 06:30:55 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in], 0x10) 06:30:55 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xfffff1ac}, 0x8) 06:30:56 executing program 2: syz_emit_ethernet(0xb2, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @remote, {[@ra={0x94, 0xe}, @end]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@noop, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@broadcast}]}, @rr={0x7, 0x23, 0x0, [@multicast2, @rand_addr, @broadcast, @local, @broadcast, @rand_addr, @multicast2, @local]}, @cipso={0x86, 0x21, 0x0, [{0x0, 0xe, "9a7812b2a9306698a7b9d236"}, {0x0, 0xd, "dc737fd8e7f7d7b3496c4c"}]}]}}}}}}}, 0x0) 06:30:56 executing program 4: r0 = io_uring_setup(0x2e1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x11, &(0x7f0000000080), 0x1) 06:30:56 executing program 3: io_uring_setup(0x0, &(0x7f0000000000)) mlockall(0x3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 06:30:56 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:30:56 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x8000000) 06:30:56 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, 0x0) [ 1644.513391][ T8719] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1644.794178][ T8719] usb 1-1: Using ep0 maxpacket: 16 [ 1645.096753][ T8719] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1645.107034][ T8719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.115740][ T8719] usb 1-1: Product: syz [ 1645.120111][ T8719] usb 1-1: Manufacturer: syz [ 1645.125111][ T8719] usb 1-1: SerialNumber: syz [ 1645.195202][ T8719] usb 1-1: config 0 descriptor?? [ 1645.249044][ T8719] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1648.513111][ T8719] gspca_stk1135: reg_w 0x352 err -71 [ 1648.519602][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1648.526264][ T8719] gspca_stk1135: Sensor write failed [ 1648.531734][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1648.538411][ T8719] gspca_stk1135: Sensor write failed [ 1648.544016][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1648.550541][ T8719] gspca_stk1135: Sensor read failed [ 1648.556061][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1648.562480][ T8719] gspca_stk1135: Sensor read failed [ 1648.568074][ T8719] gspca_stk1135: Detected sensor type unknown (0x0) [ 1648.575143][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1648.581559][ T8719] gspca_stk1135: Sensor read failed [ 1648.588237][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1648.594978][ T8719] gspca_stk1135: Sensor read failed [ 1648.600350][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1648.606891][ T8719] gspca_stk1135: Sensor write failed [ 1648.612351][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1648.619124][ T8719] gspca_stk1135: Sensor write failed [ 1648.624806][ T8719] stk1135: probe of 1-1:0.0 failed with error -71 [ 1648.648814][ T8719] usb 1-1: USB disconnect, device number 95 06:31:00 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:31:00 executing program 4: io_uring_setup(0x6d77, 0x0) mlockall(0x3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 06:31:00 executing program 5: r0 = io_uring_setup(0x2e1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0xb, 0x0, 0x1) 06:31:00 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000340)="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", 0x1ff, 0x9}]) 06:31:00 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:31:00 executing program 3: syz_io_uring_setup(0x1a85, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0xffffffff}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 06:31:01 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 06:31:01 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:31:01 executing program 5: r0 = io_uring_setup(0x2e1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x5, 0x0, 0x1) 06:31:01 executing program 2: r0 = io_uring_setup(0x2e1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0xe, 0x0, 0x1) [ 1649.662299][ T6630] usb 1-1: new high-speed USB device number 96 using dummy_hcd 06:31:01 executing program 3: r0 = io_uring_setup(0x2e1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x20000084, 0x0, 0x1) [ 1649.923109][ T6630] usb 1-1: Using ep0 maxpacket: 16 06:31:01 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x24) [ 1650.232223][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1650.241631][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.249961][ T6630] usb 1-1: Product: syz [ 1650.254526][ T6630] usb 1-1: Manufacturer: syz [ 1650.259243][ T6630] usb 1-1: SerialNumber: syz [ 1650.370950][ T6630] usb 1-1: config 0 descriptor?? [ 1650.419023][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1653.663364][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 1653.669941][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1653.676846][ T6630] gspca_stk1135: Sensor write failed [ 1653.682301][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1653.688842][ T6630] gspca_stk1135: Sensor write failed [ 1653.694474][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1653.700891][ T6630] gspca_stk1135: Sensor read failed [ 1653.707548][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1653.714374][ T6630] gspca_stk1135: Sensor read failed [ 1653.719648][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 1653.726551][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1653.733128][ T6630] gspca_stk1135: Sensor read failed [ 1653.738433][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1653.744946][ T6630] gspca_stk1135: Sensor read failed [ 1653.750250][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1653.756753][ T6630] gspca_stk1135: Sensor write failed [ 1653.762136][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1653.768653][ T6630] gspca_stk1135: Sensor write failed [ 1653.774348][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 1653.790681][ T6630] usb 1-1: USB disconnect, device number 96 06:31:06 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000001380)=ANY=[@ANYBLOB="12010003000000202505a8a440000102030109021b0001011d000009"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 06:31:06 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:31:06 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:31:06 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000380)=0x2) 06:31:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={0x0}, 0x1, 0x0, 0x2171}, 0x0) 06:31:06 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 06:31:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) 06:31:06 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) 06:31:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000008500), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={&(0x7f0000008540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0103000000000000000003"], 0x14}}, 0x0) [ 1654.573360][ T6630] usb 3-1: new high-speed USB device number 57 using dummy_hcd 06:31:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={0x0}, 0x1, 0x0, 0x6000}, 0x0) [ 1654.816145][ T6630] usb 3-1: Using ep0 maxpacket: 32 [ 1654.884053][T30181] usb 1-1: new high-speed USB device number 97 using dummy_hcd 06:31:06 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) [ 1654.979262][ T6630] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1655.077139][ T6630] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1655.087683][ T6630] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1655.123213][T30181] usb 1-1: Using ep0 maxpacket: 16 06:31:07 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$alg(r0, 0x0, 0x0) [ 1655.284036][ T6630] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1655.293502][ T6630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.301738][ T6630] usb 3-1: Product: syz [ 1655.306267][ T6630] usb 3-1: Manufacturer: syz [ 1655.310986][ T6630] usb 3-1: SerialNumber: syz [ 1655.403634][T30181] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1655.413099][T30181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.421234][T30181] usb 1-1: Product: syz [ 1655.425703][T30181] usb 1-1: Manufacturer: syz [ 1655.430408][T30181] usb 1-1: SerialNumber: syz [ 1655.600882][T30181] usb 1-1: config 0 descriptor?? [ 1655.648746][T30181] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1655.736507][ T6630] usb 3-1: USB disconnect, device number 57 [ 1656.483253][ T6630] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1656.753054][ T6630] usb 3-1: Using ep0 maxpacket: 32 [ 1656.943802][ T6630] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1657.027632][ T6630] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1657.037965][ T6630] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1657.225044][ T6630] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1657.234871][ T6630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.243173][ T6630] usb 3-1: Product: syz [ 1657.247549][ T6630] usb 3-1: Manufacturer: syz [ 1657.252247][ T6630] usb 3-1: SerialNumber: syz 06:31:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='.', 0x1, 0x95, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f00000004c0)='4', 0x1, 0x0, 0x0, 0x0) 06:31:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000008500), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/101, 0x65}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)=""/8, 0x8}, {&(0x7f0000000b80)=""/119, 0x77}], 0x2}}], 0x2, 0x2, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={&(0x7f0000008540)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1657.353327][ T6630] usb 3-1: can't set config #1, error -71 [ 1657.379840][ T6630] usb 3-1: USB disconnect, device number 58 [ 1658.923428][T30181] gspca_stk1135: reg_w 0x352 err -71 [ 1658.932231][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1658.939052][T30181] gspca_stk1135: Sensor write failed [ 1658.944676][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1658.951115][T30181] gspca_stk1135: Sensor write failed [ 1658.956692][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1658.963225][T30181] gspca_stk1135: Sensor read failed [ 1658.968671][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1658.976618][T30181] gspca_stk1135: Sensor read failed [ 1658.981892][T30181] gspca_stk1135: Detected sensor type unknown (0x0) [ 1658.988772][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1658.995403][T30181] gspca_stk1135: Sensor read failed [ 1659.000977][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1659.007556][T30181] gspca_stk1135: Sensor read failed [ 1659.013043][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1659.019473][T30181] gspca_stk1135: Sensor write failed [ 1659.025094][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1659.031524][T30181] gspca_stk1135: Sensor write failed [ 1659.037313][T30181] stk1135: probe of 1-1:0.0 failed with error -71 [ 1659.052087][T30181] usb 1-1: USB disconnect, device number 97 06:31:11 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:31:11 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0xfffffffffffffffe) 06:31:11 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) 06:31:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={0x0}, 0x1, 0x0, 0x2}, 0x0) 06:31:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x9) 06:31:11 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000340)="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", 0x1f7, 0x9}]) 06:31:11 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x83, 0x0, &(0x7f0000000280)=0x88) 06:31:11 executing program 5: mlockall(0x3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0, 0x30, 0xffffffffffffffff, 0x8000000) 06:31:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff926e000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0x3c}}, 0x0) 06:31:11 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000001380)=ANY=[@ANYBLOB="12010003000000202505a8a44000010203010902"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 06:31:12 executing program 4: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000040)) [ 1660.113920][ T8719] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1660.244468][T10516] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1660.308438][T10523] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1660.353789][ T8719] usb 1-1: Using ep0 maxpacket: 16 [ 1660.400648][T10523] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1660.445165][T10516] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1660.513998][ T6630] usb 3-1: new high-speed USB device number 59 using dummy_hcd 06:31:12 executing program 3: io_uring_setup(0x0, &(0x7f0000000000)) mlockall(0x3) syz_io_uring_complete(0x0) [ 1660.634333][ T8719] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1660.643917][ T8719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.652155][ T8719] usb 1-1: Product: syz [ 1660.656825][ T8719] usb 1-1: Manufacturer: syz [ 1660.661545][ T8719] usb 1-1: SerialNumber: syz [ 1660.744034][ T8719] usb 1-1: config 0 descriptor?? [ 1660.792607][ T8719] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1660.803676][ T6630] usb 3-1: Using ep0 maxpacket: 32 [ 1660.963968][ T6630] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1661.043224][ T6630] usb 3-1: config 0 has no interfaces? [ 1661.206751][ T6630] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1661.216376][ T6630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.224964][ T6630] usb 3-1: Product: syz [ 1661.229376][ T6630] usb 3-1: Manufacturer: syz [ 1661.234469][ T6630] usb 3-1: SerialNumber: syz [ 1661.343549][ T6630] usb 3-1: config 0 descriptor?? [ 1661.595608][ T6630] usb 3-1: USB disconnect, device number 59 [ 1662.376084][ T6630] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1662.623082][ T6630] usb 3-1: Using ep0 maxpacket: 32 [ 1662.783354][ T6630] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1662.863294][ T6630] usb 3-1: config 0 has no interfaces? [ 1663.046233][ T6630] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1663.055621][ T6630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.064074][ T6630] usb 3-1: Product: syz [ 1663.068338][ T6630] usb 3-1: Manufacturer: syz [ 1663.073224][ T6630] usb 3-1: SerialNumber: syz [ 1663.105016][ T6630] usb 3-1: config 0 descriptor?? [ 1663.203565][ T6630] usb 3-1: can't set config #0, error -71 [ 1663.226273][ T6630] usb 3-1: USB disconnect, device number 60 [ 1664.106011][ T8719] gspca_stk1135: reg_w 0x352 err -71 [ 1664.112494][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1664.119189][ T8719] gspca_stk1135: Sensor write failed [ 1664.124856][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1664.131262][ T8719] gspca_stk1135: Sensor write failed [ 1664.137113][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1664.143735][ T8719] gspca_stk1135: Sensor read failed [ 1664.149138][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1664.156627][ T8719] gspca_stk1135: Sensor read failed [ 1664.161964][ T8719] gspca_stk1135: Detected sensor type unknown (0x0) [ 1664.170240][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1664.176882][ T8719] gspca_stk1135: Sensor read failed [ 1664.182370][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1664.188887][ T8719] gspca_stk1135: Sensor read failed [ 1664.194434][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1664.200918][ T8719] gspca_stk1135: Sensor write failed [ 1664.206472][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1664.213116][ T8719] gspca_stk1135: Sensor write failed [ 1664.218707][ T8719] stk1135: probe of 1-1:0.0 failed with error -71 [ 1664.235003][ T8719] usb 1-1: USB disconnect, device number 98 06:31:16 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:31:16 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) 06:31:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={0x0}, 0x1, 0x0, 0x60}, 0x0) 06:31:16 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xe, 0x1, &(0x7f0000000780)=@raw=[@alu], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:31:16 executing program 2: msgctl$MSG_STAT(0x0, 0xb, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x1, 0x0, 0xee01, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x7b2}) 06:31:16 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000340)="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", 0x5f0, 0x9}]) [ 1664.833032][T10574] loop5: detected capacity change from 0 to 2 [ 1664.967484][T10574] Dev loop5: unable to read RDB block 2 [ 1664.974279][T10574] loop5: unable to read partition table 06:31:17 executing program 3: r0 = io_uring_setup(0x2e1, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) [ 1665.027979][T10574] loop5: partition table beyond EOD, truncated [ 1665.034910][T10574] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 06:31:17 executing program 4: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) [ 1665.283150][T30181] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1665.318091][T10574] loop5: detected capacity change from 0 to 2 06:31:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0xd0, 0x180, 0xd0, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, {{@ip={@rand_addr, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'xfrm0\x00', 'veth0_macvtap\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) [ 1665.384715][T10574] Dev loop5: unable to read RDB block 2 [ 1665.390662][T10574] loop5: unable to read partition table [ 1665.417468][T10574] loop5: partition table beyond EOD, truncated [ 1665.424214][T10574] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1665.533360][T30181] usb 1-1: Using ep0 maxpacket: 16 06:31:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, 0x0) 06:31:17 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) [ 1665.814777][T30181] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1665.824515][T30181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.832685][T30181] usb 1-1: Product: syz [ 1665.837196][T30181] usb 1-1: Manufacturer: syz [ 1665.841922][T30181] usb 1-1: SerialNumber: syz 06:31:17 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x2010, r1, 0x8000000) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x336a, 0x10, 0x0, 0x2e5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010102}, 0x10) [ 1666.025175][T30181] usb 1-1: config 0 descriptor?? [ 1666.069191][T30181] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1666.238439][T10605] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 1666.293295][T10608] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 1669.353250][T30181] gspca_stk1135: reg_w 0x352 err -71 [ 1669.359810][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1669.366794][T30181] gspca_stk1135: Sensor write failed [ 1669.372287][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1669.381657][T30181] gspca_stk1135: Sensor write failed [ 1669.388058][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1669.394975][T30181] gspca_stk1135: Sensor read failed [ 1669.400342][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1669.406931][T30181] gspca_stk1135: Sensor read failed [ 1669.412291][T30181] gspca_stk1135: Detected sensor type unknown (0x0) [ 1669.419251][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1669.425919][T30181] gspca_stk1135: Sensor read failed [ 1669.431284][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1669.438159][T30181] gspca_stk1135: Sensor read failed [ 1669.443731][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1669.450238][T30181] gspca_stk1135: Sensor write failed [ 1669.455968][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1669.462358][T30181] gspca_stk1135: Sensor write failed [ 1669.468479][T30181] stk1135: probe of 1-1:0.0 failed with error -71 [ 1669.482789][T30181] usb 1-1: USB disconnect, device number 99 06:31:21 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:31:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000008500), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={&(0x7f0000008540)={0x14, r1, 0x1}, 0x14}}, 0x0) 06:31:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0xb, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 06:31:21 executing program 5: io_uring_setup(0x6d77, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x74}) mlockall(0x3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 06:31:21 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:31:21 executing program 2: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000400)=""/14) 06:31:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000008500), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000008600)={&(0x7f00000084c0), 0xc, &(0x7f00000085c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030024"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) 06:31:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) 06:31:22 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:31:22 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) [ 1670.446039][ T8719] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1670.687326][T10641] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1670.705801][ T8719] usb 1-1: Using ep0 maxpacket: 16 [ 1670.759115][T10644] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 06:31:22 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000001380)=ANY=[@ANYBLOB="12010003000000202505a8a440000102030109021b0001011d00000904"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 06:31:22 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) read(0xffffffffffffffff, &(0x7f0000000180)=""/407, 0x197) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) [ 1671.033897][ T8719] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1671.043439][ T8719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.052196][ T8719] usb 1-1: Product: syz [ 1671.057706][ T8719] usb 1-1: Manufacturer: syz [ 1671.062422][ T8719] usb 1-1: SerialNumber: syz [ 1671.094199][ T8719] usb 1-1: config 0 descriptor?? [ 1671.151791][ T8719] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1671.573284][ T6630] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1671.846275][ T6630] usb 3-1: Using ep0 maxpacket: 32 [ 1672.038943][ T6630] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1672.144009][ T6630] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1672.343708][ T6630] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1672.353253][ T6630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.361474][ T6630] usb 3-1: Product: syz [ 1672.366027][ T6630] usb 3-1: Manufacturer: syz [ 1672.370783][ T6630] usb 3-1: SerialNumber: syz [ 1672.723688][ T6630] usb 3-1: USB disconnect, device number 61 [ 1673.463094][ T6630] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1673.723129][ T6630] usb 3-1: Using ep0 maxpacket: 32 [ 1673.903340][ T6630] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1674.003366][ T6630] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1674.253656][ T6630] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1674.263174][ T6630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.271317][ T6630] usb 3-1: Product: syz [ 1674.275794][ T6630] usb 3-1: Manufacturer: syz [ 1674.319509][ T6630] usb 3-1: can't set config #1, error -71 [ 1674.329866][ T6630] usb 3-1: USB disconnect, device number 62 [ 1674.383240][ T8719] gspca_stk1135: reg_w 0x352 err -71 [ 1674.389807][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1674.398455][ T8719] gspca_stk1135: Sensor write failed [ 1674.404229][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1674.410643][ T8719] gspca_stk1135: Sensor write failed [ 1674.416289][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1674.423083][ T8719] gspca_stk1135: Sensor read failed [ 1674.428442][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1674.434978][ T8719] gspca_stk1135: Sensor read failed [ 1674.440248][ T8719] gspca_stk1135: Detected sensor type unknown (0x0) [ 1674.447247][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1674.453937][ T8719] gspca_stk1135: Sensor read failed [ 1674.459315][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1674.465977][ T8719] gspca_stk1135: Sensor read failed [ 1674.471304][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1674.477998][ T8719] gspca_stk1135: Sensor write failed [ 1674.483627][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1674.490049][ T8719] gspca_stk1135: Sensor write failed [ 1674.495757][ T8719] stk1135: probe of 1-1:0.0 failed with error -71 [ 1674.512167][ T8719] usb 1-1: USB disconnect, device number 100 06:31:26 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:31:26 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) read(0xffffffffffffffff, &(0x7f0000000180)=""/407, 0x197) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:31:26 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r0, 0x0, 0x0) 06:31:26 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:31:26 executing program 5: select(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0) 06:31:26 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000180)) 06:31:27 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) read(0xffffffffffffffff, &(0x7f0000000180)=""/407, 0x197) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:31:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340), &(0x7f0000000380)=0x8) 06:31:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:31:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000008500), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)=""/8, 0x8}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={&(0x7f0000008540)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1675.513353][ T8719] usb 1-1: new high-speed USB device number 101 using dummy_hcd 06:31:27 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:31:27 executing program 5: socketpair(0x1e, 0x0, 0x4000, &(0x7f0000000000)) [ 1675.783900][ T8719] usb 1-1: Using ep0 maxpacket: 16 [ 1676.094110][ T8719] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1676.103440][ T8719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.111932][ T8719] usb 1-1: Product: syz [ 1676.116502][ T8719] usb 1-1: Manufacturer: syz [ 1676.121231][ T8719] usb 1-1: SerialNumber: syz [ 1676.199363][ T8719] usb 1-1: config 0 descriptor?? [ 1676.251997][ T8719] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1677.215639][ T3121] ieee802154 phy0 wpan0: encryption failed: -22 [ 1677.222227][ T3121] ieee802154 phy1 wpan1: encryption failed: -22 [ 1679.533873][ T8719] gspca_stk1135: reg_w 0x352 err -71 [ 1679.540377][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1679.547170][ T8719] gspca_stk1135: Sensor write failed [ 1679.552724][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1679.559643][ T8719] gspca_stk1135: Sensor write failed [ 1679.565284][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1679.571882][ T8719] gspca_stk1135: Sensor read failed [ 1679.577422][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1679.584146][ T8719] gspca_stk1135: Sensor read failed [ 1679.589590][ T8719] gspca_stk1135: Detected sensor type unknown (0x0) [ 1679.596551][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1679.603331][ T8719] gspca_stk1135: Sensor read failed [ 1679.608714][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1679.616287][ T8719] gspca_stk1135: Sensor read failed [ 1679.621685][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1679.628582][ T8719] gspca_stk1135: Sensor write failed [ 1679.634245][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1679.640772][ T8719] gspca_stk1135: Sensor write failed [ 1679.646426][ T8719] stk1135: probe of 1-1:0.0 failed with error -71 [ 1679.662700][ T8719] usb 1-1: USB disconnect, device number 101 06:31:32 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:31:32 executing program 2: syz_io_uring_setup(0x1a85, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0xffffffff}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) 06:31:32 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0xc00) 06:31:32 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @mcast2}], 0x1c) 06:31:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:31:32 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:31:32 executing program 5: socketpair(0x22, 0x0, 0x21, &(0x7f0000000040)) 06:31:32 executing program 3: socketpair(0x22, 0x0, 0x313, &(0x7f0000000040)) 06:31:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000008500), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/101, 0x65}}], 0x1, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={&(0x7f0000008540)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1680.643229][T30181] usb 1-1: new high-speed USB device number 102 using dummy_hcd 06:31:32 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x3385, &(0x7f0000000100)={0x0, 0x84b8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r1, r0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) 06:31:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)) 06:31:32 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) [ 1680.883072][T30181] usb 1-1: Using ep0 maxpacket: 16 [ 1681.164762][T30181] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1681.174678][T30181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.183039][T30181] usb 1-1: Product: syz [ 1681.187324][T30181] usb 1-1: Manufacturer: syz [ 1681.192028][T30181] usb 1-1: SerialNumber: syz [ 1681.284732][T30181] usb 1-1: config 0 descriptor?? [ 1681.332092][T30181] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1684.613238][T30181] gspca_stk1135: reg_w 0x352 err -71 [ 1684.619937][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1684.626828][T30181] gspca_stk1135: Sensor write failed [ 1684.634535][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1684.641009][T30181] gspca_stk1135: Sensor write failed [ 1684.647274][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1684.653903][T30181] gspca_stk1135: Sensor read failed [ 1684.659322][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1684.666227][T30181] gspca_stk1135: Sensor read failed [ 1684.671717][T30181] gspca_stk1135: Detected sensor type unknown (0x0) [ 1684.679700][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1684.686282][T30181] gspca_stk1135: Sensor read failed [ 1684.691717][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1684.698392][T30181] gspca_stk1135: Sensor read failed [ 1684.704040][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1684.710613][T30181] gspca_stk1135: Sensor write failed [ 1684.716262][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1684.722731][T30181] gspca_stk1135: Sensor write failed [ 1684.728558][T30181] stk1135: probe of 1-1:0.0 failed with error -71 [ 1684.743175][T30181] usb 1-1: USB disconnect, device number 102 06:31:37 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:31:37 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {0x5}, {}]}) 06:31:37 executing program 2: socketpair(0x25, 0x5, 0x0, &(0x7f0000000100)) 06:31:37 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:31:37 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x89ff, 0x0) 06:31:37 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)) 06:31:37 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x5450, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x5452, &(0x7f0000000180)) 06:31:37 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/user\x00') close(r0) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 06:31:37 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x12800, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x8000000) syz_io_uring_setup(0x7b0c, &(0x7f00000001c0)={0x0, 0x336a, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r3, &(0x7f0000000380)={0x103}, 0x0, 0x18}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010102}, 0x10) 06:31:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000), 0x8) [ 1685.794253][T30181] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1685.858295][T10814] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? 06:31:37 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000340), 0x6, 0x0) read$usbfs(r0, 0x0, 0x0) [ 1686.033629][T30181] usb 1-1: Using ep0 maxpacket: 16 06:31:38 executing program 5: clone(0x34204080, 0x0, 0x0, 0x0, 0x0) [ 1686.317221][T30181] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1686.326604][T30181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.335316][T30181] usb 1-1: Product: syz [ 1686.339593][T30181] usb 1-1: Manufacturer: syz [ 1686.344559][T30181] usb 1-1: SerialNumber: syz [ 1686.467589][T30181] usb 1-1: config 0 descriptor?? [ 1686.532355][T30181] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1689.793794][T30181] gspca_stk1135: reg_w 0x352 err -71 [ 1689.800305][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1689.807183][T30181] gspca_stk1135: Sensor write failed [ 1689.812738][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1689.819773][T30181] gspca_stk1135: Sensor write failed [ 1689.825365][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1689.831859][T30181] gspca_stk1135: Sensor read failed [ 1689.837577][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1689.844249][T30181] gspca_stk1135: Sensor read failed [ 1689.849742][T30181] gspca_stk1135: Detected sensor type unknown (0x0) [ 1689.858447][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1689.865631][T30181] gspca_stk1135: Sensor read failed [ 1689.871010][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1689.877754][T30181] gspca_stk1135: Sensor read failed [ 1689.883448][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1689.889964][T30181] gspca_stk1135: Sensor write failed [ 1689.895652][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1689.902266][T30181] gspca_stk1135: Sensor write failed [ 1689.908045][T30181] stk1135: probe of 1-1:0.0 failed with error -71 [ 1689.920683][T30181] usb 1-1: USB disconnect, device number 103 06:31:42 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:31:42 executing program 2: prctl$PR_SET_MM_MAP(0x1c, 0x1ffff000, 0x0, 0x0) 06:31:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)) 06:31:42 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x3138, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}}) 06:31:42 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:31:42 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000200)=[{0x5}, {}, {}]}) 06:31:42 executing program 5: futex(0x0, 0x5, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:31:42 executing program 2: syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x3000, &(0x7f0000000580)) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 06:31:42 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) [ 1690.723199][T30181] usb 4-1: new high-speed USB device number 39 using dummy_hcd 06:31:42 executing program 5: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) 06:31:42 executing program 2: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000240)="dd", 0x1, 0xfffffffffffffffb) [ 1690.924488][ T6423] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1690.964521][T30181] usb 4-1: Using ep0 maxpacket: 16 06:31:43 executing program 1: timer_create(0x0, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) [ 1691.163857][T30181] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1691.174168][ T6423] usb 1-1: Using ep0 maxpacket: 16 [ 1691.335015][T30181] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.40 [ 1691.344429][T30181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.352573][T30181] usb 4-1: Product: syz [ 1691.357260][T30181] usb 4-1: Manufacturer: syz [ 1691.362119][T30181] usb 4-1: SerialNumber: syz [ 1691.474131][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1691.483789][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.493701][ T6423] usb 1-1: Product: syz [ 1691.498002][ T6423] usb 1-1: Manufacturer: syz [ 1691.502724][ T6423] usb 1-1: SerialNumber: syz [ 1691.618819][ T6423] usb 1-1: config 0 descriptor?? [ 1691.669873][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1691.763958][T30181] usbhid 4-1:1.0: can't add hid device: -22 [ 1691.770252][T30181] usbhid: probe of 4-1:1.0 failed with error -22 [ 1691.835319][T30181] usb 4-1: USB disconnect, device number 39 [ 1692.513071][ T6630] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1692.763271][ T6630] usb 4-1: Using ep0 maxpacket: 16 [ 1692.983396][ T6630] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1693.173950][ T6630] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.40 [ 1693.183324][ T6630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.191589][ T6630] usb 4-1: Product: syz [ 1693.197591][ T6630] usb 4-1: Manufacturer: syz [ 1693.202426][ T6630] usb 4-1: SerialNumber: syz [ 1693.517148][ T6630] usbhid 4-1:1.0: can't add hid device: -22 [ 1693.523553][ T6630] usbhid: probe of 4-1:1.0 failed with error -22 [ 1693.542753][ T6630] usb 4-1: USB disconnect, device number 40 [ 1694.953894][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1694.960390][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1694.967189][ T6423] gspca_stk1135: Sensor write failed [ 1694.974637][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1694.981061][ T6423] gspca_stk1135: Sensor write failed [ 1694.987413][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1694.994006][ T6423] gspca_stk1135: Sensor read failed [ 1694.999471][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1695.006095][ T6423] gspca_stk1135: Sensor read failed [ 1695.011463][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1695.018379][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1695.025109][ T6423] gspca_stk1135: Sensor read failed [ 1695.030605][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1695.037490][ T6423] gspca_stk1135: Sensor read failed [ 1695.042810][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1695.049611][ T6423] gspca_stk1135: Sensor write failed [ 1695.055306][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1695.062120][ T6423] gspca_stk1135: Sensor write failed [ 1695.067899][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1695.083627][ T6423] usb 1-1: USB disconnect, device number 104 06:31:47 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:31:47 executing program 5: futex(&(0x7f0000000000), 0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x1) 06:31:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000000a180)={0x0, 0x0, &(0x7f000000a140)={0x0, 0x4c}}, 0x0) 06:31:47 executing program 1: timer_create(0x0, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:31:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}}, 0x0) 06:31:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 06:31:47 executing program 5: syz_open_dev$vcsa(&(0x7f0000000180), 0x0, 0x191841) 06:31:47 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, 0x0) 06:31:47 executing program 3: memfd_create(0x0, 0x1624851def0c0274) 06:31:47 executing program 1: timer_create(0x0, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) [ 1696.086263][ T6423] usb 1-1: new high-speed USB device number 105 using dummy_hcd 06:31:48 executing program 5: syz_open_procfs(0x0, &(0x7f0000005a80)='io\x00') 06:31:48 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x48040, 0x0) [ 1696.343283][ T6423] usb 1-1: Using ep0 maxpacket: 16 [ 1696.624215][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1696.633709][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.641846][ T6423] usb 1-1: Product: syz [ 1696.646424][ T6423] usb 1-1: Manufacturer: syz [ 1696.651129][ T6423] usb 1-1: SerialNumber: syz [ 1696.720476][ T6423] usb 1-1: config 0 descriptor?? [ 1696.773504][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1700.056168][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1700.062666][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1700.069452][ T6423] gspca_stk1135: Sensor write failed [ 1700.075132][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1700.081549][ T6423] gspca_stk1135: Sensor write failed [ 1700.087217][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1700.095681][ T6423] gspca_stk1135: Sensor read failed [ 1700.101100][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1700.108261][ T6423] gspca_stk1135: Sensor read failed [ 1700.113880][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1700.120708][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1700.127254][ T6423] gspca_stk1135: Sensor read failed [ 1700.132700][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1700.139250][ T6423] gspca_stk1135: Sensor read failed [ 1700.144817][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1700.151225][ T6423] gspca_stk1135: Sensor write failed [ 1700.156789][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1700.163499][ T6423] gspca_stk1135: Sensor write failed [ 1700.169002][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1700.182255][ T6423] usb 1-1: USB disconnect, device number 105 06:31:52 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:31:52 executing program 1: timer_create(0x2, 0x0, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:31:52 executing program 2: syslog(0x3, &(0x7f0000000100)=""/119, 0x77) 06:31:52 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='nr_inodes=C']) 06:31:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)) 06:31:52 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}}, 0x0) [ 1701.142102][T10966] tmpfs: Bad value for 'nr_inodes' 06:31:53 executing program 1: timer_create(0x2, 0x0, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) [ 1701.189960][T10966] tmpfs: Bad value for 'nr_inodes' 06:31:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', 0x0}) 06:31:53 executing program 5: prctl$PR_SET_CHILD_SUBREAPER(0x21, 0x1) 06:31:53 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x3138, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 06:31:53 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61854acc37c2d101, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1701.993150][ T8719] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1702.234023][ T8719] usb 1-1: Using ep0 maxpacket: 16 06:31:54 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x200, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, 0x0) [ 1702.473188][ T6423] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1702.513619][ T8719] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1702.523258][ T8719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.531404][ T8719] usb 1-1: Product: syz [ 1702.536045][ T8719] usb 1-1: Manufacturer: syz [ 1702.540841][ T8719] usb 1-1: SerialNumber: syz [ 1702.632039][ T8719] usb 1-1: config 0 descriptor?? [ 1702.678945][ T8719] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1702.723519][ T6423] usb 4-1: Using ep0 maxpacket: 16 [ 1702.873385][ T6423] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1702.884727][ T6423] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1703.083332][ T6423] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.40 [ 1703.092561][ T6423] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.100797][ T6423] usb 4-1: Product: syz [ 1703.105276][ T6423] usb 4-1: Manufacturer: syz [ 1703.109993][ T6423] usb 4-1: SerialNumber: syz [ 1703.404116][ T6423] usbhid 4-1:1.0: can't add hid device: -22 [ 1703.410435][ T6423] usbhid: probe of 4-1:1.0 failed with error -22 [ 1703.436925][ T6423] usb 4-1: USB disconnect, device number 41 [ 1704.153124][ T6423] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1704.413377][ T6423] usb 4-1: Using ep0 maxpacket: 16 [ 1704.553821][ T6423] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1704.565013][ T6423] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1704.773359][ T6423] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.40 [ 1704.782690][ T6423] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.790936][ T6423] usb 4-1: Product: syz [ 1704.795389][ T6423] usb 4-1: Manufacturer: syz [ 1704.800103][ T6423] usb 4-1: SerialNumber: syz [ 1705.103953][ T6423] usbhid 4-1:1.0: can't add hid device: -22 [ 1705.113375][ T6423] usbhid: probe of 4-1:1.0 failed with error -22 [ 1705.155447][ T6423] usb 4-1: USB disconnect, device number 42 [ 1705.973413][ T8719] gspca_stk1135: reg_w 0x352 err -71 [ 1705.980604][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1705.987395][ T8719] gspca_stk1135: Sensor write failed [ 1705.993208][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1705.999619][ T8719] gspca_stk1135: Sensor write failed [ 1706.005718][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1706.012080][ T8719] gspca_stk1135: Sensor read failed [ 1706.017715][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1706.024335][ T8719] gspca_stk1135: Sensor read failed [ 1706.029766][ T8719] gspca_stk1135: Detected sensor type unknown (0x0) [ 1706.037760][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1706.044536][ T8719] gspca_stk1135: Sensor read failed [ 1706.049831][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1706.056539][ T8719] gspca_stk1135: Sensor read failed [ 1706.061865][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1706.068415][ T8719] gspca_stk1135: Sensor write failed [ 1706.074097][ T8719] gspca_stk1135: serial bus timeout: status=0x00 [ 1706.080600][ T8719] gspca_stk1135: Sensor write failed [ 1706.086398][ T8719] stk1135: probe of 1-1:0.0 failed with error -71 [ 1706.100992][ T8719] usb 1-1: USB disconnect, device number 106 06:31:58 executing program 2: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={r0, r1+10000000}, 0x0) 06:31:58 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:31:58 executing program 1: timer_create(0x2, 0x0, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:31:58 executing program 5: madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 06:31:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}}, 0x0) 06:31:58 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0}, 0x20) 06:31:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}) 06:31:58 executing program 3: pselect6(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240), 0x0) 06:31:58 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) [ 1706.894099][ T6423] usb 1-1: new high-speed USB device number 107 using dummy_hcd 06:31:58 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/slabinfo\x00', 0x0, 0x0) 06:31:59 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000980)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) [ 1707.143030][ T6423] usb 1-1: Using ep0 maxpacket: 16 06:31:59 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0) 06:31:59 executing program 2: socket(0xa, 0x5, 0x1) [ 1707.423206][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1707.432705][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.441059][ T6423] usb 1-1: Product: syz [ 1707.445519][ T6423] usb 1-1: Manufacturer: syz [ 1707.450247][ T6423] usb 1-1: SerialNumber: syz [ 1707.495647][ T6423] usb 1-1: config 0 descriptor?? [ 1707.539445][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1710.753147][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1710.759634][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1710.766397][ T6423] gspca_stk1135: Sensor write failed [ 1710.771866][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1710.778539][ T6423] gspca_stk1135: Sensor write failed [ 1710.784231][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1710.790640][ T6423] gspca_stk1135: Sensor read failed [ 1710.796195][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1710.802778][ T6423] gspca_stk1135: Sensor read failed [ 1710.808243][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1710.815354][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1710.821761][ T6423] gspca_stk1135: Sensor read failed [ 1710.827340][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1710.833965][ T6423] gspca_stk1135: Sensor read failed [ 1710.839421][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1710.847959][ T6423] gspca_stk1135: Sensor write failed [ 1710.854043][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1710.860538][ T6423] gspca_stk1135: Sensor write failed [ 1710.866204][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1710.878211][ T6423] usb 1-1: USB disconnect, device number 107 06:32:03 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:32:03 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x234c42) 06:32:03 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:32:03 executing program 5: memfd_create(&(0x7f0000000040)='\xaf\x9f\xb2\xd2s\xf7\x89\xe1\xa9\xb7&\xbc\xccdev/n\x9e}\xb8/\xf4i\xc7\xb4d\x97nt\x01A\xd0K@\xe3c0\xd9', 0x0) 06:32:03 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x3138, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) 06:32:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) 06:32:03 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') 06:32:03 executing program 5: openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x890b, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) [ 1711.763101][ T6423] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1711.823270][T30181] usb 1-1: new high-speed USB device number 108 using dummy_hcd 06:32:03 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x0) [ 1712.017452][ T6423] usb 3-1: Using ep0 maxpacket: 16 06:32:04 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x84280, 0x0) [ 1712.084240][T30181] usb 1-1: Using ep0 maxpacket: 16 [ 1712.155858][ T6423] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1712.323317][ T6423] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.40 [ 1712.332787][ T6423] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.341416][ T6423] usb 3-1: Product: syz [ 1712.346162][ T6423] usb 3-1: Manufacturer: syz [ 1712.351146][ T6423] usb 3-1: SerialNumber: syz 06:32:04 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) [ 1712.423504][T30181] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1712.433114][T30181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.441465][T30181] usb 1-1: Product: syz [ 1712.446085][T30181] usb 1-1: Manufacturer: syz [ 1712.450804][T30181] usb 1-1: SerialNumber: syz 06:32:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) [ 1712.628349][T30181] usb 1-1: config 0 descriptor?? [ 1712.679658][T30181] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1712.824247][ T6423] usbhid 3-1:1.0: can't add hid device: -22 [ 1712.830621][ T6423] usbhid: probe of 3-1:1.0 failed with error -22 [ 1712.862988][ T6423] usb 3-1: USB disconnect, device number 63 [ 1713.573269][ T6423] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1713.823303][ T6423] usb 3-1: Using ep0 maxpacket: 16 [ 1713.953859][ T6423] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1714.163717][ T6423] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.40 [ 1714.173427][ T6423] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.181632][ T6423] usb 3-1: Product: syz [ 1714.186309][ T6423] usb 3-1: Manufacturer: syz [ 1714.191021][ T6423] usb 3-1: SerialNumber: syz [ 1714.444247][ T6423] usbhid 3-1:1.0: can't add hid device: -22 [ 1714.450637][ T6423] usbhid: probe of 3-1:1.0 failed with error -22 [ 1714.478575][ T6423] usb 3-1: USB disconnect, device number 64 [ 1715.913999][T30181] gspca_stk1135: reg_w 0x352 err -71 [ 1715.920513][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1715.927145][T30181] gspca_stk1135: Sensor write failed [ 1715.932615][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1715.939432][T30181] gspca_stk1135: Sensor write failed [ 1715.944983][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1715.951418][T30181] gspca_stk1135: Sensor read failed [ 1715.956925][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1715.963445][T30181] gspca_stk1135: Sensor read failed [ 1715.970638][T30181] gspca_stk1135: Detected sensor type unknown (0x0) [ 1715.977840][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1715.984373][T30181] gspca_stk1135: Sensor read failed [ 1715.989740][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1715.996305][T30181] gspca_stk1135: Sensor read failed [ 1716.001622][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1716.008270][T30181] gspca_stk1135: Sensor write failed [ 1716.013889][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1716.020309][T30181] gspca_stk1135: Sensor write failed [ 1716.026151][T30181] stk1135: probe of 1-1:0.0 failed with error -71 [ 1716.039395][T30181] usb 1-1: USB disconnect, device number 108 06:32:08 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:32:08 executing program 3: prctl$PR_SET_CHILD_SUBREAPER(0x2, 0x1ffff000) 06:32:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x1}, 0x24}}, 0x0) 06:32:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) 06:32:08 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:32:08 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x3138, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa}]}}) 06:32:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x300}, 0x0) 06:32:08 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) [ 1716.863750][T30181] usb 3-1: new high-speed USB device number 65 using dummy_hcd 06:32:08 executing program 5: madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) getrusage(0x0, &(0x7f0000000000)) [ 1717.003605][ T6423] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1717.057588][T11180] /dev/loop0: Can't open blockdev [ 1717.068728][T11181] /dev/loop0: Can't open blockdev [ 1717.127009][T30181] usb 3-1: Using ep0 maxpacket: 16 [ 1717.267129][ T6423] usb 1-1: Using ep0 maxpacket: 16 06:32:09 executing program 3: madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) [ 1717.345447][T30181] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 06:32:09 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) [ 1717.534696][T30181] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.40 [ 1717.544174][T30181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.552311][T30181] usb 3-1: Product: syz [ 1717.557062][T30181] usb 3-1: Manufacturer: syz [ 1717.561786][T30181] usb 3-1: SerialNumber: syz [ 1717.584039][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1717.593461][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.601593][ T6423] usb 1-1: Product: syz [ 1717.607478][ T6423] usb 1-1: Manufacturer: syz [ 1717.612201][ T6423] usb 1-1: SerialNumber: syz 06:32:09 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) [ 1717.750563][ T6423] usb 1-1: config 0 descriptor?? [ 1717.770339][T30181] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1717.819058][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1717.971066][T30181] usb 3-1: USB disconnect, device number 65 [ 1718.793177][T30181] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1719.043055][T30181] usb 3-1: Using ep0 maxpacket: 16 [ 1719.263828][T30181] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1719.463955][T30181] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.40 [ 1719.473257][T30181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.484534][T30181] usb 3-1: Product: syz [ 1719.488901][T30181] usb 3-1: Manufacturer: syz [ 1719.493794][T30181] usb 3-1: SerialNumber: syz [ 1719.593634][T30181] usb 3-1: can't set config #1, error -71 [ 1719.617486][T30181] usb 3-1: USB disconnect, device number 66 [ 1721.026896][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1721.033405][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1721.039856][ T6423] gspca_stk1135: Sensor write failed [ 1721.045937][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1721.052357][ T6423] gspca_stk1135: Sensor write failed [ 1721.058291][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1721.065129][ T6423] gspca_stk1135: Sensor read failed [ 1721.070444][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1721.077073][ T6423] gspca_stk1135: Sensor read failed [ 1721.082360][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1721.091102][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1721.098369][ T6423] gspca_stk1135: Sensor read failed [ 1721.103982][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1721.110594][ T6423] gspca_stk1135: Sensor read failed [ 1721.116117][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1721.122620][ T6423] gspca_stk1135: Sensor write failed [ 1721.128348][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1721.134976][ T6423] gspca_stk1135: Sensor write failed [ 1721.140440][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1721.153905][ T6423] usb 1-1: USB disconnect, device number 109 06:32:13 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:32:13 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) 06:32:13 executing program 3: syz_open_dev$rtc(&(0x7f0000000000), 0x200, 0x40041) 06:32:13 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x1e, 0x4) 06:32:13 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:32:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x44}, 0x40) 06:32:13 executing program 2: r0 = syz_open_procfs(0x0, 0x0) symlinkat(&(0x7f00000015c0)='./file0\x00', r0, 0x0) r1 = syz_open_procfs(0x0, 0x0) execveat(r1, 0x0, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$f2fs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x80000001, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000680)) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 06:32:13 executing program 3: madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 06:32:13 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000), 0x10) [ 1722.113272][ T6423] usb 1-1: new high-speed USB device number 110 using dummy_hcd 06:32:14 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x4d}, {}]}) [ 1722.383209][ T6423] usb 1-1: Using ep0 maxpacket: 16 06:32:14 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002020000402505a1a440000102030109027c0001010100080904000902020600200724060000c1a905240008000d240f01000000f0570f6e00200c240781ff00ff7fc60000020424020507240a050101070c241be77d0300002081000107240a030902011524122e4ea317a88b045e4f01a607c0ffcb7e39240905"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) 06:32:14 executing program 3: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000001580)=[{&(0x7f0000000080)="c2", 0x1}, {&(0x7f00000001c0)="fc86a1d659b43f1d15c9d362db8295b6013763c47423d500d7f0e24580adcdd2541b16e892ac3613d49acc00c7e01d74d49b602a26913c2fa866ab289be26005415daf1c21c03672d03e7feb487bd95c54b2ae128c4ffadfaa0f3427293a7473f864a26f24d9b3bc3585a03bb6d760dd25bd3c46450c7398e4f17017c9ec1507fce81a", 0x83, 0x4}, {0x0}], 0x0, 0x0) [ 1722.683920][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1722.693219][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.701346][ T6423] usb 1-1: Product: syz [ 1722.706079][ T6423] usb 1-1: Manufacturer: syz [ 1722.710807][ T6423] usb 1-1: SerialNumber: syz [ 1722.875171][ T6423] usb 1-1: config 0 descriptor?? [ 1722.931907][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1723.134055][ T8719] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1723.533822][ T8719] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1723.613420][ T8719] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1723.623817][ T8719] usb 3-1: config 1 interface 0 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1723.634597][ T8719] usb 3-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1723.648440][ T8719] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1723.813390][ T8719] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1723.822678][ T8719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.831013][ T8719] usb 3-1: Product: syz [ 1723.835514][ T8719] usb 3-1: Manufacturer: syz [ 1723.840319][ T8719] usb 3-1: SerialNumber: syz [ 1724.164796][ T8719] usb 3-1: bad CDC descriptors [ 1724.195506][ T8719] usb 3-1: USB disconnect, device number 67 [ 1724.863132][T30181] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1725.263768][T30181] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1725.343330][T30181] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.353817][T30181] usb 3-1: config 1 interface 0 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1725.364622][T30181] usb 3-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1725.378111][T30181] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1725.543792][T30181] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1725.553166][T30181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.561586][T30181] usb 3-1: Product: syz [ 1725.566085][T30181] usb 3-1: Manufacturer: syz [ 1725.570808][T30181] usb 3-1: SerialNumber: syz [ 1725.894325][T30181] usb 3-1: bad CDC descriptors [ 1725.916011][T30181] usb 3-1: USB disconnect, device number 68 [ 1726.193207][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1726.199818][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1726.208367][ T6423] gspca_stk1135: Sensor write failed [ 1726.214589][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1726.221359][ T6423] gspca_stk1135: Sensor write failed [ 1726.227026][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1726.233868][ T6423] gspca_stk1135: Sensor read failed [ 1726.239183][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1726.245979][ T6423] gspca_stk1135: Sensor read failed [ 1726.251718][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1726.258717][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1726.265347][ T6423] gspca_stk1135: Sensor read failed [ 1726.270725][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1726.277550][ T6423] gspca_stk1135: Sensor read failed [ 1726.283081][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1726.289538][ T6423] gspca_stk1135: Sensor write failed [ 1726.295137][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1726.301526][ T6423] gspca_stk1135: Sensor write failed [ 1726.307195][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1726.321874][ T6423] usb 1-1: USB disconnect, device number 110 06:32:18 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:32:18 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:32:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) 06:32:18 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0}, 0x20) 06:32:18 executing program 3: prctl$PR_SET_CHILD_SUBREAPER(0x38, 0x0) 06:32:18 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 06:32:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000100)) 06:32:18 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:32:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 06:32:19 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8914, &(0x7f0000000700)={'ip6tnl0\x00', 0x0}) [ 1727.333299][ T6423] usb 1-1: new high-speed USB device number 111 using dummy_hcd 06:32:19 executing program 2: syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo/4\x00') [ 1727.573614][ T6423] usb 1-1: Using ep0 maxpacket: 16 06:32:19 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) [ 1727.853717][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1727.863385][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.871626][ T6423] usb 1-1: Product: syz [ 1727.876153][ T6423] usb 1-1: Manufacturer: syz [ 1727.880968][ T6423] usb 1-1: SerialNumber: syz [ 1728.035118][ T6423] usb 1-1: config 0 descriptor?? [ 1728.079434][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1731.363218][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1731.370076][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1731.377234][ T6423] gspca_stk1135: Sensor write failed [ 1731.382690][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1731.389224][ T6423] gspca_stk1135: Sensor write failed [ 1731.395098][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1731.401502][ T6423] gspca_stk1135: Sensor read failed [ 1731.407008][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1731.413769][ T6423] gspca_stk1135: Sensor read failed [ 1731.419033][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1731.426086][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1731.434414][ T6423] gspca_stk1135: Sensor read failed [ 1731.439787][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1731.446936][ T6423] gspca_stk1135: Sensor read failed [ 1731.452424][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1731.458947][ T6423] gspca_stk1135: Sensor write failed [ 1731.464608][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1731.471011][ T6423] gspca_stk1135: Sensor write failed [ 1731.476674][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1731.489250][ T6423] usb 1-1: USB disconnect, device number 111 06:32:23 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) 06:32:23 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:32:23 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0xffffffffffffff30) 06:32:23 executing program 2: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 06:32:23 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(0xffffffffffffffff, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:32:23 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r1, 0x11, 0x67, 0x0, &(0x7f0000000280)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000002d00)={'sit0\x00', &(0x7f0000002c80)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x8000) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="68000b00000d06030000000000000000000c00000605000100070000000500010007000000050005000300000013000300686173683a6e65742c69666163650000050001000700000005000100070000000500010007000000050005000a00000005000500090000"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x80040) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x890b, &(0x7f0000000000)={'syztnl2\x00', 0x0}) 06:32:24 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x2d}, {}]}) 06:32:24 executing program 5: pselect6(0x40, &(0x7f0000000080)={0x5}, 0x0, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 06:32:24 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(0xffffffffffffffff, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:32:24 executing program 3: madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) [ 1732.506505][ T6423] usb 1-1: new high-speed USB device number 112 using dummy_hcd 06:32:24 executing program 2: prctl$PR_SET_CHILD_SUBREAPER(0x35, 0x2) [ 1732.753377][ T6423] usb 1-1: Using ep0 maxpacket: 16 06:32:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0xf}, 0x0) 06:32:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) [ 1733.034567][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1733.044094][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.052223][ T6423] usb 1-1: Product: syz [ 1733.056822][ T6423] usb 1-1: Manufacturer: syz [ 1733.061524][ T6423] usb 1-1: SerialNumber: syz [ 1733.196405][ T6423] usb 1-1: config 0 descriptor?? [ 1733.254414][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1736.533519][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1736.539978][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1736.546750][ T6423] gspca_stk1135: Sensor write failed [ 1736.554190][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1736.560610][ T6423] gspca_stk1135: Sensor write failed [ 1736.566926][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1736.573442][ T6423] gspca_stk1135: Sensor read failed [ 1736.578750][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1736.585339][ T6423] gspca_stk1135: Sensor read failed [ 1736.590715][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1736.599056][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1736.605627][ T6423] gspca_stk1135: Sensor read failed [ 1736.610950][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1736.617563][ T6423] gspca_stk1135: Sensor read failed [ 1736.623082][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1736.629485][ T6423] gspca_stk1135: Sensor write failed [ 1736.635052][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1736.641449][ T6423] gspca_stk1135: Sensor write failed [ 1736.647146][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1736.661975][ T6423] usb 1-1: USB disconnect, device number 112 06:32:28 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:32:28 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(0xffffffffffffffff, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:32:29 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/vlan/config\x00') 06:32:29 executing program 2: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x38}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x0, 0xf8}, 0x26, &(0x7f0000000140)={0x5, 0xf, 0x26, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @generic={0x3, 0x10, 0xb}, @ss_cap={0xa}]}}) 06:32:29 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000340), 0x6, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x0, 0x10, r0, 0x8000000) 06:32:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:32:29 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, 0x0, 0x0) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:32:29 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 06:32:29 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='io\x00') [ 1737.423259][ T8719] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1737.644096][ T6423] usb 1-1: new high-speed USB device number 113 using dummy_hcd 06:32:29 executing program 3: syz_open_dev$vcsa(&(0x7f0000000340), 0x6, 0x125782) 06:32:29 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, 0x0, 0x0) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:32:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) [ 1737.824093][ T8719] usb 3-1: not running at top speed; connect to a high speed hub [ 1737.883703][ T6423] usb 1-1: Using ep0 maxpacket: 16 [ 1737.903996][ T8719] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1737.914331][ T8719] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1737.925650][ T8719] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1738.133867][ T8719] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1738.143317][ T8719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.151445][ T8719] usb 3-1: Product: syz [ 1738.155966][ T8719] usb 3-1: Manufacturer: syz [ 1738.160680][ T8719] usb 3-1: SerialNumber: syz [ 1738.184170][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1738.194962][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.203715][ T6423] usb 1-1: Product: syz [ 1738.208006][ T6423] usb 1-1: Manufacturer: syz [ 1738.212737][ T6423] usb 1-1: SerialNumber: syz [ 1738.375892][ T6423] usb 1-1: config 0 descriptor?? [ 1738.429569][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1738.614309][ T8719] cdc_ncm 3-1:1.0: bind() failure [ 1738.639957][ T8719] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1738.647194][ T8719] cdc_ncm 3-1:1.1: bind() failure [ 1738.657265][ T3121] ieee802154 phy0 wpan0: encryption failed: -22 [ 1738.664012][ T3121] ieee802154 phy1 wpan1: encryption failed: -22 [ 1738.749447][ T8719] usb 3-1: USB disconnect, device number 69 [ 1739.353276][T30181] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1739.763840][T30181] usb 3-1: not running at top speed; connect to a high speed hub [ 1739.853955][T30181] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1739.864159][T30181] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1739.875416][T30181] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1740.083579][T30181] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1740.092785][T30181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.101794][T30181] usb 3-1: Product: syz [ 1740.106454][T30181] usb 3-1: Manufacturer: syz [ 1740.111144][T30181] usb 3-1: SerialNumber: syz [ 1740.204005][T30181] usb 3-1: can't set config #1, error -71 [ 1740.242149][T30181] usb 3-1: USB disconnect, device number 70 [ 1741.723588][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1741.730083][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1741.736828][ T6423] gspca_stk1135: Sensor write failed [ 1741.742289][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1741.748948][ T6423] gspca_stk1135: Sensor write failed [ 1741.754505][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1741.761020][ T6423] gspca_stk1135: Sensor read failed [ 1741.766490][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1741.774868][ T6423] gspca_stk1135: Sensor read failed [ 1741.780233][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1741.787604][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1741.794209][ T6423] gspca_stk1135: Sensor read failed [ 1741.799512][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1741.806019][ T6423] gspca_stk1135: Sensor read failed [ 1741.811374][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1741.817919][ T6423] gspca_stk1135: Sensor write failed [ 1741.823521][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1741.829929][ T6423] gspca_stk1135: Sensor write failed [ 1741.835622][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1741.847769][ T6423] usb 1-1: USB disconnect, device number 113 06:32:34 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:32:34 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, 0x0, 0x0) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:32:34 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040)) 06:32:34 executing program 5: clone(0x34204080, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 06:32:34 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000900)=ANY=[], &(0x7f00000009c0)=""/153, 0x53, 0x99, 0x1}, 0x20) 06:32:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:32:34 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc30a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 06:32:34 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:32:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)) [ 1742.803998][ T6423] usb 1-1: new high-speed USB device number 114 using dummy_hcd 06:32:35 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) [ 1743.074480][ T6423] usb 1-1: Using ep0 maxpacket: 16 06:32:35 executing program 3: madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14) [ 1743.190585][T30181] usb 3-1: new high-speed USB device number 71 using dummy_hcd 06:32:35 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) [ 1743.386057][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1743.395543][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.404252][ T6423] usb 1-1: Product: syz [ 1743.409971][ T6423] usb 1-1: Manufacturer: syz [ 1743.415109][ T6423] usb 1-1: SerialNumber: syz [ 1743.464001][T30181] usb 3-1: Using ep0 maxpacket: 8 [ 1743.525600][ T6423] usb 1-1: config 0 descriptor?? [ 1743.568812][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1743.593892][T30181] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1743.863944][T30181] usb 3-1: string descriptor 0 read error: -22 [ 1743.870355][T30181] usb 3-1: New USB device found, idVendor=046d, idProduct=c30a, bcdDevice= 0.40 [ 1743.879927][T30181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.929610][T30181] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1744.129444][T30181] usb 3-1: USB disconnect, device number 71 [ 1744.923200][T30181] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1745.163201][T30181] usb 3-1: Using ep0 maxpacket: 8 [ 1745.283318][T30181] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1745.553454][T30181] usb 3-1: string descriptor 0 read error: -22 [ 1745.561228][T30181] usb 3-1: New USB device found, idVendor=046d, idProduct=c30a, bcdDevice= 0.40 [ 1745.571033][T30181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.619280][T30181] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1745.835394][T30181] usb 3-1: USB disconnect, device number 72 [ 1746.843357][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1746.849863][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1746.856700][ T6423] gspca_stk1135: Sensor write failed [ 1746.862164][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1746.868754][ T6423] gspca_stk1135: Sensor write failed [ 1746.874347][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1746.880767][ T6423] gspca_stk1135: Sensor read failed [ 1746.886348][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1746.894936][ T6423] gspca_stk1135: Sensor read failed [ 1746.900997][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1746.908330][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1746.915028][ T6423] gspca_stk1135: Sensor read failed [ 1746.920418][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1746.927023][ T6423] gspca_stk1135: Sensor read failed [ 1746.932484][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1746.939146][ T6423] gspca_stk1135: Sensor write failed [ 1746.944871][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1746.951303][ T6423] gspca_stk1135: Sensor write failed [ 1746.957217][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1746.970687][ T6423] usb 1-1: USB disconnect, device number 114 06:32:39 executing program 3: setresuid(0xffffffffffffffff, 0xee00, 0x0) syz_open_dev$vcsa(&(0x7f0000000340), 0x0, 0x0) 06:32:39 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') 06:32:39 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:32:39 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:32:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:32:39 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8924, &(0x7f0000000700)={'ip6tnl0\x00', 0x0}) 06:32:39 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000080)) 06:32:39 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x401) 06:32:39 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:32:39 executing program 3: clone(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 06:32:40 executing program 2: futex(0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0) [ 1748.013658][ T6630] usb 1-1: new high-speed USB device number 115 using dummy_hcd 06:32:40 executing program 5: futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x20000000) 06:32:40 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) [ 1748.273354][ T6630] usb 1-1: Using ep0 maxpacket: 16 06:32:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) [ 1748.594386][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1748.603935][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.612069][ T6630] usb 1-1: Product: syz [ 1748.616597][ T6630] usb 1-1: Manufacturer: syz [ 1748.621405][ T6630] usb 1-1: SerialNumber: syz [ 1748.789415][ T6630] usb 1-1: config 0 descriptor?? [ 1748.848897][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1752.153195][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 1752.159697][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1752.166478][ T6630] gspca_stk1135: Sensor write failed [ 1752.171927][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1752.178686][ T6630] gspca_stk1135: Sensor write failed [ 1752.184414][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1752.190908][ T6630] gspca_stk1135: Sensor read failed [ 1752.196467][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1752.203058][ T6630] gspca_stk1135: Sensor read failed [ 1752.208333][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 1752.216896][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1752.223860][ T6630] gspca_stk1135: Sensor read failed [ 1752.229307][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1752.236213][ T6630] gspca_stk1135: Sensor read failed [ 1752.241585][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1752.248202][ T6630] gspca_stk1135: Sensor write failed [ 1752.253838][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1752.260253][ T6630] gspca_stk1135: Sensor write failed [ 1752.265933][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 1752.281683][ T6630] usb 1-1: USB disconnect, device number 115 06:32:44 executing program 5: syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x40041) 06:32:44 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018"], &(0x7f00000009c0)=""/153, 0x53, 0x99, 0x1}, 0x20) 06:32:44 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:32:44 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0), 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:32:44 executing program 3: syz_open_dev$rtc(&(0x7f0000000000), 0x200, 0x0) 06:32:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:32:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {0x35}, {}]}) 06:32:44 executing program 3: clock_gettime(0x9, &(0x7f0000000180)) 06:32:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x0) 06:32:45 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0), 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) [ 1753.223341][ T6423] usb 1-1: new high-speed USB device number 116 using dummy_hcd 06:32:45 executing program 2: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) 06:32:45 executing program 3: madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) getrusage(0x0, &(0x7f0000000000)) 06:32:45 executing program 5: request_key(&(0x7f0000001180)='cifs.spnego\x00', 0x0, 0x0, 0xfffffffffffffffe) [ 1753.484289][ T6423] usb 1-1: Using ep0 maxpacket: 16 06:32:45 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0), 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) [ 1753.770227][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1753.779661][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.788083][ T6423] usb 1-1: Product: syz [ 1753.792350][ T6423] usb 1-1: Manufacturer: syz [ 1753.797224][ T6423] usb 1-1: SerialNumber: syz [ 1753.973575][ T6423] usb 1-1: config 0 descriptor?? [ 1753.983241][T30181] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1754.019261][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1754.404502][T30181] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1754.586065][T30181] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1754.594118][T30181] usb 3-1: can't read configurations, error -71 [ 1757.323786][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1757.330232][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1757.338863][ T6423] gspca_stk1135: Sensor write failed [ 1757.345201][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1757.351631][ T6423] gspca_stk1135: Sensor write failed [ 1757.357204][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1757.363812][ T6423] gspca_stk1135: Sensor read failed [ 1757.369125][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1757.375749][ T6423] gspca_stk1135: Sensor read failed [ 1757.381025][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1757.388000][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1757.394693][ T6423] gspca_stk1135: Sensor read failed [ 1757.400051][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1757.406711][ T6423] gspca_stk1135: Sensor read failed [ 1757.412143][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1757.418981][ T6423] gspca_stk1135: Sensor write failed [ 1757.424601][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1757.431103][ T6423] gspca_stk1135: Sensor write failed [ 1757.436840][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1757.450617][ T6423] usb 1-1: USB disconnect, device number 116 06:32:49 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:32:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) 06:32:49 executing program 3: syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) 06:32:49 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:32:49 executing program 5: syz_open_dev$usbfs(&(0x7f00000006c0), 0x0, 0x480540) 06:32:49 executing program 2: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000700), 0x22400, 0x0) 06:32:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) 06:32:50 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x14028f2d87121f35}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)=@mpls_newroute={0x1c}, 0x1c}}, 0x0) 06:32:50 executing program 3: sched_setparam(0x0, &(0x7f00000047c0)) 06:32:50 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)) pipe(&(0x7f0000000480)) 06:32:50 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) [ 1758.493766][T30181] usb 1-1: new high-speed USB device number 117 using dummy_hcd 06:32:50 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000002ec0), 0x4) socket(0x0, 0x0, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x80800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 1758.733237][T30181] usb 1-1: Using ep0 maxpacket: 16 [ 1759.013538][T30181] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1759.023055][T30181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.031193][T30181] usb 1-1: Product: syz [ 1759.035760][T30181] usb 1-1: Manufacturer: syz [ 1759.040494][T30181] usb 1-1: SerialNumber: syz [ 1759.110075][T30181] usb 1-1: config 0 descriptor?? [ 1759.159127][T30181] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1762.433898][T30181] gspca_stk1135: reg_w 0x352 err -71 [ 1762.440406][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1762.447183][T30181] gspca_stk1135: Sensor write failed [ 1762.452640][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1762.461386][T30181] gspca_stk1135: Sensor write failed [ 1762.467305][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1762.473801][T30181] gspca_stk1135: Sensor read failed [ 1762.479157][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1762.485742][T30181] gspca_stk1135: Sensor read failed [ 1762.491005][T30181] gspca_stk1135: Detected sensor type unknown (0x0) [ 1762.498022][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1762.504688][T30181] gspca_stk1135: Sensor read failed [ 1762.510167][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1762.516739][T30181] gspca_stk1135: Sensor read failed [ 1762.522047][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1762.528559][T30181] gspca_stk1135: Sensor write failed [ 1762.534411][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1762.540889][T30181] gspca_stk1135: Sensor write failed [ 1762.546553][T30181] stk1135: probe of 1-1:0.0 failed with error -71 [ 1762.561440][T30181] usb 1-1: USB disconnect, device number 117 06:32:54 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:32:54 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) 06:32:54 executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x5, &(0x7f0000002700)) 06:32:54 executing program 5: request_key(&(0x7f0000001540)='user\x00', &(0x7f0000001580)={'syz', 0x3}, &(0x7f00000015c0)='trusted:', 0x0) 06:32:54 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$usbfs(&(0x7f0000004340), 0x889, 0x1) 06:32:54 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 06:32:55 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), r0) 06:32:55 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000014c0)) 06:32:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) 06:32:55 executing program 5: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 06:32:55 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) [ 1763.493541][T30181] usb 1-1: new high-speed USB device number 118 using dummy_hcd 06:32:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) [ 1763.743735][T30181] usb 1-1: Using ep0 maxpacket: 16 [ 1764.043912][T30181] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1764.053430][T30181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.061588][T30181] usb 1-1: Product: syz [ 1764.066152][T30181] usb 1-1: Manufacturer: syz [ 1764.070871][T30181] usb 1-1: SerialNumber: syz [ 1764.143817][T30181] usb 1-1: config 0 descriptor?? [ 1764.189266][T30181] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1767.413254][T30181] gspca_stk1135: reg_w 0x352 err -71 [ 1767.420044][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1767.426723][T30181] gspca_stk1135: Sensor write failed [ 1767.432348][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1767.439099][T30181] gspca_stk1135: Sensor write failed [ 1767.444908][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1767.451417][T30181] gspca_stk1135: Sensor read failed [ 1767.456945][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1767.463615][T30181] gspca_stk1135: Sensor read failed [ 1767.468881][T30181] gspca_stk1135: Detected sensor type unknown (0x0) [ 1767.478034][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1767.485049][T30181] gspca_stk1135: Sensor read failed [ 1767.490365][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1767.496890][T30181] gspca_stk1135: Sensor read failed [ 1767.502246][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1767.508899][T30181] gspca_stk1135: Sensor write failed [ 1767.514542][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1767.521124][T30181] gspca_stk1135: Sensor write failed [ 1767.526738][T30181] stk1135: probe of 1-1:0.0 failed with error -71 [ 1767.539862][T30181] usb 1-1: USB disconnect, device number 118 06:32:59 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:32:59 executing program 3: request_key(&(0x7f0000001180)='cifs.spnego\x00', &(0x7f00000011c0)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) 06:32:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x24}}, 0x8090) socket$tipc(0x1e, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:32:59 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, &(0x7f00000009c0)) 06:32:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) 06:32:59 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) 06:33:00 executing program 5: syz_open_procfs$namespace(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) pipe(&(0x7f0000000840)) 06:33:00 executing program 2: clock_gettime(0x5, 0x0) 06:33:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:33:00 executing program 3: keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000001180)='cifs.spnego\x00', &(0x7f00000011c0)={'syz', 0x0}, &(0x7f0000001200)='][-\x00', 0xfffffffffffffffe) [ 1768.513470][ T6630] usb 1-1: new high-speed USB device number 119 using dummy_hcd 06:33:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 06:33:00 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001940)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) [ 1768.753179][ T6630] usb 1-1: Using ep0 maxpacket: 16 [ 1769.044121][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1769.053637][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.061773][ T6630] usb 1-1: Product: syz [ 1769.066344][ T6630] usb 1-1: Manufacturer: syz [ 1769.071057][ T6630] usb 1-1: SerialNumber: syz [ 1769.225105][ T6630] usb 1-1: config 0 descriptor?? [ 1769.268942][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1769.383231][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1772.553186][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 1772.559881][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1772.566669][ T6630] gspca_stk1135: Sensor write failed [ 1772.572349][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1772.579124][ T6630] gspca_stk1135: Sensor write failed [ 1772.584759][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1772.591434][ T6630] gspca_stk1135: Sensor read failed [ 1772.598415][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1772.605393][ T6630] gspca_stk1135: Sensor read failed [ 1772.610940][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 1772.617994][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1772.624633][ T6630] gspca_stk1135: Sensor read failed [ 1772.630222][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1772.636820][ T6630] gspca_stk1135: Sensor read failed [ 1772.642278][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1772.648830][ T6630] gspca_stk1135: Sensor write failed [ 1772.654570][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1772.660987][ T6630] gspca_stk1135: Sensor write failed [ 1772.666846][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 1772.680899][ T6630] usb 1-1: USB disconnect, device number 119 06:33:05 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:33:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:33:05 executing program 1: timer_create(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f0000000180)=""/407, 0x197) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) 06:33:05 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}}) 06:33:05 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x187843, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) 06:33:05 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 06:33:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:33:05 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000047c0)='./cgroup/syz1\x00', 0x200002, 0x0) 06:33:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x14028f2d87121f35}, 0xc, &(0x7f0000000540)={0x0}}, 0x0) 06:33:05 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000200)) [ 1773.593229][ T6630] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1773.833782][ T6630] usb 1-1: Using ep0 maxpacket: 16 06:33:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) dup3(r1, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) 06:33:05 executing program 3: clock_gettime(0x0, &(0x7f0000002700)) [ 1774.113706][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1774.123207][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.132082][ T6630] usb 1-1: Product: syz [ 1774.136851][ T6630] usb 1-1: Manufacturer: syz [ 1774.141567][ T6630] usb 1-1: SerialNumber: syz [ 1774.272811][ T6630] usb 1-1: config 0 descriptor?? [ 1774.319008][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1777.623315][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 1777.629897][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1777.636587][ T6630] gspca_stk1135: Sensor write failed [ 1777.642041][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1777.648930][ T6630] gspca_stk1135: Sensor write failed [ 1777.654542][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1777.661711][ T6630] gspca_stk1135: Sensor read failed [ 1777.667371][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1777.673960][ T6630] gspca_stk1135: Sensor read failed [ 1777.679305][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 1777.686363][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1777.692752][ T6630] gspca_stk1135: Sensor read failed [ 1777.698213][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1777.704825][ T6630] gspca_stk1135: Sensor read failed [ 1777.710126][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1777.717614][ T6630] gspca_stk1135: Sensor write failed [ 1777.723517][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1777.729911][ T6630] gspca_stk1135: Sensor write failed [ 1777.735529][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 1777.750771][ T6630] usb 1-1: USB disconnect, device number 120 06:33:10 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:33:10 executing program 5: openat$cuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 06:33:10 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) 06:33:10 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f0000004580)={0x90, 0x0, r2}, 0x90) 06:33:10 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) dup3(r1, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) 06:33:10 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000002700)) 06:33:10 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000200), 0x4) 06:33:10 executing program 2: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000002700)) 06:33:10 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) dup3(r1, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) 06:33:10 executing program 1: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) 06:33:10 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='mode=0x0000000000000401,cruft,check=relaxed,uid=', @ANYRESHEX=0xee00, @ANYRESDEC=0xee01]) [ 1778.774199][ T6630] usb 1-1: new high-speed USB device number 121 using dummy_hcd 06:33:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) [ 1779.023180][ T6630] usb 1-1: Using ep0 maxpacket: 16 [ 1779.333936][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1779.343329][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.352290][ T6630] usb 1-1: Product: syz [ 1779.356982][ T6630] usb 1-1: Manufacturer: syz [ 1779.361693][ T6630] usb 1-1: SerialNumber: syz [ 1779.408867][ T6630] usb 1-1: config 0 descriptor?? [ 1779.459604][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1782.723402][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 1782.730592][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1782.737391][ T6630] gspca_stk1135: Sensor write failed [ 1782.743261][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1782.749676][ T6630] gspca_stk1135: Sensor write failed [ 1782.755346][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1782.761843][ T6630] gspca_stk1135: Sensor read failed [ 1782.767426][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1782.774991][ T6630] gspca_stk1135: Sensor read failed [ 1782.780328][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 1782.787889][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1782.794796][ T6630] gspca_stk1135: Sensor read failed [ 1782.800118][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1782.806724][ T6630] gspca_stk1135: Sensor read failed [ 1782.812264][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1782.818832][ T6630] gspca_stk1135: Sensor write failed [ 1782.824467][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1782.830874][ T6630] gspca_stk1135: Sensor write failed [ 1782.837547][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 1782.852777][ T6630] usb 1-1: USB disconnect, device number 121 06:33:15 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:33:15 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x580) 06:33:15 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)) 06:33:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x4000000000000002) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) 06:33:15 executing program 5: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:33:15 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x580) pipe(0x0) 06:33:15 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x14028f2d87121f35}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)=@mpls_newroute={0x1c, 0x18, 0x0, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfe}}, 0x1c}}, 0x0) pipe(0x0) 06:33:15 executing program 1: request_key(&(0x7f0000001180)='cifs.spnego\x00', &(0x7f00000011c0)={'syz', 0x0}, &(0x7f0000001200)='][-\x00', 0xfffffffffffffffe) 06:33:15 executing program 3: syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) 06:33:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 06:33:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x4000000000000002) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) [ 1783.843094][ T6630] usb 1-1: new high-speed USB device number 122 using dummy_hcd 06:33:15 executing program 1: sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) [ 1784.107492][ T6630] usb 1-1: Using ep0 maxpacket: 16 [ 1784.427989][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1784.437334][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.445984][ T6630] usb 1-1: Product: syz [ 1784.450399][ T6630] usb 1-1: Manufacturer: syz [ 1784.455467][ T6630] usb 1-1: SerialNumber: syz [ 1784.505225][ T6630] usb 1-1: config 0 descriptor?? [ 1784.549123][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1787.823145][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 1787.829722][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1787.836510][ T6630] gspca_stk1135: Sensor write failed [ 1787.842086][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1787.849253][ T6630] gspca_stk1135: Sensor write failed [ 1787.855993][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1787.862533][ T6630] gspca_stk1135: Sensor read failed [ 1787.868235][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1787.874797][ T6630] gspca_stk1135: Sensor read failed [ 1787.880188][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 1787.887155][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1787.893742][ T6630] gspca_stk1135: Sensor read failed [ 1787.899064][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1787.905572][ T6630] gspca_stk1135: Sensor read failed [ 1787.910880][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1787.917419][ T6630] gspca_stk1135: Sensor write failed [ 1787.922810][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1787.929375][ T6630] gspca_stk1135: Sensor write failed [ 1787.935072][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 1787.949225][ T6630] usb 1-1: USB disconnect, device number 122 06:33:20 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:33:20 executing program 2: openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 06:33:20 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001000)={0x0, 0x0, 0x10}, 0x10) 06:33:20 executing program 5: openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000006c0), 0x26b97b4bdc2896d0, 0x0) 06:33:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x4000000000000002) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) 06:33:20 executing program 1: syz_open_dev$usbfs(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 06:33:20 executing program 1: openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 06:33:20 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x580) 06:33:20 executing program 2: syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x4b8001) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/uts\x00') 06:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:33:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x34, 0xd, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x34}}, 0x0) [ 1789.007136][ T6423] usb 1-1: new high-speed USB device number 123 using dummy_hcd 06:33:21 executing program 2: socketpair(0x28, 0x0, 0x2, &(0x7f0000001080)) [ 1789.253271][ T6423] usb 1-1: Using ep0 maxpacket: 16 [ 1789.534381][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1789.543753][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.551992][ T6423] usb 1-1: Product: syz [ 1789.556505][ T6423] usb 1-1: Manufacturer: syz [ 1789.561230][ T6423] usb 1-1: SerialNumber: syz [ 1789.635069][ T6423] usb 1-1: config 0 descriptor?? [ 1789.679146][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1792.993599][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1793.000149][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1793.006916][ T6423] gspca_stk1135: Sensor write failed [ 1793.012385][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1793.018962][ T6423] gspca_stk1135: Sensor write failed [ 1793.024509][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1793.031018][ T6423] gspca_stk1135: Sensor read failed [ 1793.036891][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1793.043530][ T6423] gspca_stk1135: Sensor read failed [ 1793.048914][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1793.056064][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1793.062606][ T6423] gspca_stk1135: Sensor read failed [ 1793.068331][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1793.076950][ T6423] gspca_stk1135: Sensor read failed [ 1793.082399][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1793.089375][ T6423] gspca_stk1135: Sensor write failed [ 1793.095053][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1793.101608][ T6423] gspca_stk1135: Sensor write failed [ 1793.107421][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1793.119798][ T6423] usb 1-1: USB disconnect, device number 123 06:33:25 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:33:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x25, 0x0, 0x0) 06:33:25 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1c, 0x0, 0x0) 06:33:25 executing program 4: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:33:25 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:33:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x4, 0xa, 0x101}, 0x14}}, 0x0) 06:33:25 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000200)={@private, @remote}, 0x8) 06:33:25 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:33:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) 06:33:25 executing program 1: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffd) 06:33:25 executing program 4: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) [ 1794.133134][ T6423] usb 1-1: new high-speed USB device number 124 using dummy_hcd 06:33:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, 0x0, 0x1}, 0x14}}, 0x0) [ 1794.373092][ T6423] usb 1-1: Using ep0 maxpacket: 16 [ 1794.654603][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1794.664007][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.672139][ T6423] usb 1-1: Product: syz [ 1794.676696][ T6423] usb 1-1: Manufacturer: syz [ 1794.681427][ T6423] usb 1-1: SerialNumber: syz [ 1794.706395][ T6423] usb 1-1: config 0 descriptor?? [ 1794.758910][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1798.046212][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1798.052714][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1798.059572][ T6423] gspca_stk1135: Sensor write failed [ 1798.065241][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1798.071746][ T6423] gspca_stk1135: Sensor write failed [ 1798.077676][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1798.084263][ T6423] gspca_stk1135: Sensor read failed [ 1798.091375][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1798.098428][ T6423] gspca_stk1135: Sensor read failed [ 1798.103888][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1798.110671][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1798.117300][ T6423] gspca_stk1135: Sensor read failed [ 1798.122750][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1798.129347][ T6423] gspca_stk1135: Sensor read failed [ 1798.134869][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1798.141227][ T6423] gspca_stk1135: Sensor write failed [ 1798.146794][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1798.153334][ T6423] gspca_stk1135: Sensor write failed [ 1798.158839][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1798.171871][ T6423] usb 1-1: USB disconnect, device number 124 06:33:30 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 06:33:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 06:33:30 executing program 5: syz_genetlink_get_family_id$SEG6(&(0x7f0000000b40), 0xffffffffffffffff) 06:33:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, 0x0, &(0x7f0000000340)) 06:33:30 executing program 4: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:33:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000800)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x40) 06:33:30 executing program 2: pipe(&(0x7f0000000000)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000380)) 06:33:30 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:33:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x1f05, 0xffffffffffffffff, 0x6}, 0x2b) 06:33:30 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 06:33:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:33:31 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000140)={0xb0000006}) 06:33:31 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 06:33:31 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map}, 0x10) 06:33:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x2d, 0x0, &(0x7f0000002500)) 06:33:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:33:31 executing program 2: socket$inet(0x2, 0x8000c, 0x0) 06:33:31 executing program 5: bpf$MAP_CREATE(0x1c, &(0x7f0000002080), 0x40) 06:33:31 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x0, 0x8}, 0xc) 06:33:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x21, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x268, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ipvlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @private, 0x0, 0x0, 'erspan0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 06:33:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) [ 1800.101618][ T3121] ieee802154 phy0 wpan0: encryption failed: -22 [ 1800.108594][ T3121] ieee802154 phy1 wpan1: encryption failed: -22 06:33:32 executing program 2: socketpair(0x1, 0x0, 0x1ff, &(0x7f0000000380)) 06:33:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xc, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x268, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ipvlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @private, 0x0, 0x0, 'erspan0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 06:33:32 executing program 1: socketpair(0x11, 0x3, 0x80000001, &(0x7f0000000000)) 06:33:32 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 06:33:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)="83d8862be5e7e4cbb212", 0xa) 06:33:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:33:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000080)=0x80) 06:33:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x6, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x268, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ipvlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @private, 0x0, 0x0, 'erspan0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 06:33:32 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 06:33:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x8, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x268, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ipvlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @private, 0x0, 0x0, 'erspan0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 06:33:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:33:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x290, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ipvlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @private, 0x0, 0x0, 'erspan0\x00', 'team_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, '\vd'}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 06:33:33 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @random="856e50d0ff11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "3d0f9a", 0x3c, 0x6, 0x0, @remote, @empty, {[@routing={0x0, 0x4, 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00', @mcast2]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 06:33:33 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x12, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:33:33 executing program 5: pipe(&(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) 06:33:33 executing program 0: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:33:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:33:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x19, 0x0, 0x0, 0xd6d2, 0x0, 0x1}, 0x40) 06:33:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x31, 0x0, &(0x7f0000002500)) 06:33:33 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000002500)=0xffffffffffffffb0) 06:33:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000080)={'sit0\x00', 0x0}) 06:33:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:33:34 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) 06:33:34 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x2, 0x0, 0x100000) 06:33:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 06:33:34 executing program 5: socket$inet6(0xa, 0x3, 0x20) 06:33:34 executing program 0: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:33:34 executing program 2: bpf$MAP_CREATE(0x4, &(0x7f0000002080), 0x40) 06:33:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:33:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect(r0, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80) 06:33:35 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:33:35 executing program 5: bpf$MAP_CREATE(0x14, &(0x7f0000002080), 0x40) 06:33:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x0, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local}}}}) 06:33:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)="83d8862be5e7e4cbb2", 0x9) 06:33:35 executing program 3: syz_emit_ethernet(0x34, &(0x7f0000000140)={@local, @multicast, @val, {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@broadcast, @random="2efb6f1ddf05"}}}}}, 0x0) 06:33:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:33:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gre0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast}}}}) 06:33:35 executing program 0: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:33:35 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2}}) 06:33:35 executing program 2: bpf$MAP_CREATE(0x1d, &(0x7f0000002080), 0x40) 06:33:35 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:33:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:33:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)=""/121, &(0x7f0000000100)=0x79) 06:33:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @multicast2}, 0xc) 06:33:36 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) 06:33:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x15}, 0x40) 06:33:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:33:36 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x0, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:33:36 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) 06:33:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000000)={@empty}, 0x14) 06:33:36 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000003300)=@framed, &(0x7f0000003380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:33:37 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) 06:33:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) [ 1805.233134][ T6630] usb 1-1: new high-speed USB device number 125 using dummy_hcd 06:33:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x22, 0x0, 0x0) 06:33:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080), 0x4) [ 1805.443814][ T6630] usb 1-1: device descriptor read/64, error 18 06:33:37 executing program 3: pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 06:33:37 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) bind(r0, &(0x7f0000000000)=@nfc, 0x80) 06:33:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:33:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000780)={@local, @remote}, 0x8) [ 1805.723174][ T6630] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1805.923455][ T6630] usb 1-1: device descriptor read/64, error 18 [ 1806.046889][ T6630] usb usb1-port1: attempt power cycle [ 1806.473436][ T6630] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1806.573519][ T6630] usb 1-1: Invalid ep0 maxpacket: 0 [ 1806.733069][ T6630] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1806.823962][ T6630] usb 1-1: Invalid ep0 maxpacket: 0 [ 1806.829775][ T6630] usb usb1-port1: unable to enumerate USB device 06:33:39 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x0, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:33:39 executing program 3: r0 = epoll_create1(0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x10000000}) 06:33:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) 06:33:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x238}, 0x40) 06:33:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:33:39 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) read(r0, &(0x7f0000000080)=""/123, 0x7b) 06:33:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:33:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x11, 0x66, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x268, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ipvlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @private, 0x0, 0x0, 'erspan0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 06:33:40 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x4020940d, &(0x7f0000000040)) 06:33:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) [ 1808.613253][ T6630] usb 1-1: new high-speed USB device number 3 using dummy_hcd 06:33:40 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xe, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:33:40 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003600)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000003380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1808.803438][ T6630] usb 1-1: device descriptor read/64, error 18 [ 1809.076105][ T6630] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1809.273795][ T6630] usb 1-1: device descriptor read/64, error 18 [ 1809.393462][ T6630] usb usb1-port1: attempt power cycle [ 1809.813068][ T6630] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1809.903927][ T6630] usb 1-1: Invalid ep0 maxpacket: 0 [ 1810.063163][ T6630] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1810.163943][ T6630] usb 1-1: Invalid ep0 maxpacket: 0 [ 1810.169786][ T6630] usb usb1-port1: unable to enumerate USB device 06:33:43 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x0, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:33:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) 06:33:43 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000021c0), 0x4) 06:33:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000003280)={&(0x7f0000003040), 0xc, &(0x7f0000003240)={0x0}}, 0x0) 06:33:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x14, 0x0, 0x0) 06:33:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x29, 0x0, 0x0) 06:33:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c0100000201050000000000000000000a000004f7ff"], 0x18c}}, 0x0) 06:33:43 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) write$binfmt_elf32(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:33:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x1, 0x2, 0x401}, 0x14}}, 0x0) 06:33:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) 06:33:43 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000016c0)={'batadv_slave_0\x00'}) [ 1811.890878][T12249] netlink: 376 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1811.943468][ T6423] usb 1-1: new high-speed USB device number 7 using dummy_hcd 06:33:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd}, 0x40) [ 1812.143346][ T6423] usb 1-1: device descriptor read/64, error 18 [ 1812.423160][ T6423] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1812.614131][ T6423] usb 1-1: device descriptor read/64, error 18 [ 1812.743718][ T6423] usb usb1-port1: attempt power cycle [ 1813.213138][ T6423] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1813.303801][ T6423] usb 1-1: Invalid ep0 maxpacket: 0 [ 1813.453154][ T6423] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1813.543492][ T6423] usb 1-1: Invalid ep0 maxpacket: 0 [ 1813.549013][ T6423] usb usb1-port1: unable to enumerate USB device 06:33:46 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={0x0}}, 0x0) 06:33:46 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)={0x0, 0x0, 0x18}, 0x10) 06:33:46 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x2f, 0x0, &(0x7f0000002500)) 06:33:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) 06:33:46 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:33:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x4f0, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ipvlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x90}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @private, 0x0, 0x0, 'erspan0\x00', 'team_slave_1\x00'}, 0x0, 0x2c8, 0x2f8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}}, @common=@icmp={{0x28}, {0x0, '\vd'}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) 06:33:46 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x1600bd60, 0x0, &(0x7f0000002500)) 06:33:46 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x20) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 06:33:46 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, r0, &(0x7f00000002c0), 0x0) 06:33:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:33:46 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x15, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1815.313165][ T6630] usb 1-1: new high-speed USB device number 11 using dummy_hcd 06:33:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x22, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x268, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ipvlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @private, 0x0, 0x0, 'erspan0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) [ 1815.553660][ T6630] usb 1-1: Using ep0 maxpacket: 16 [ 1815.834386][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1815.843908][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.852042][ T6630] usb 1-1: Product: syz [ 1815.856785][ T6630] usb 1-1: Manufacturer: syz [ 1815.861681][ T6630] usb 1-1: SerialNumber: syz [ 1815.939231][ T6630] usb 1-1: config 0 descriptor?? [ 1815.991683][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1819.225930][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 1819.232475][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1819.239167][ T6630] gspca_stk1135: Sensor write failed [ 1819.244864][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1819.251374][ T6630] gspca_stk1135: Sensor write failed [ 1819.256985][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1819.263598][ T6630] gspca_stk1135: Sensor read failed [ 1819.268965][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1819.275833][ T6630] gspca_stk1135: Sensor read failed [ 1819.281142][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 1819.289320][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1819.296133][ T6630] gspca_stk1135: Sensor read failed [ 1819.301498][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1819.308049][ T6630] gspca_stk1135: Sensor read failed [ 1819.313585][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1819.319987][ T6630] gspca_stk1135: Sensor write failed [ 1819.325672][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1819.332179][ T6630] gspca_stk1135: Sensor write failed [ 1819.337853][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 1819.353254][ T6630] usb 1-1: USB disconnect, device number 11 06:33:51 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:33:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x32, 0x0, 0x0) 06:33:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:33:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x4f0, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ipvlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @private, 0x0, 0x0, 'erspan0\x00', 'team_slave_1\x00'}, 0x0, 0x2c8, 0x2f8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80}, {}, {0x9}]}}, @common=@icmp={{0x28}, {0x0, '\vd'}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) 06:33:51 executing program 3: syz_emit_ethernet(0x15, &(0x7f0000000000)={@multicast, @broadcast, @val={@void}, {@llc={0x4, {@llc={0x0, 0x0, "8c"}}}}}, 0x0) 06:33:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@local, @remote}, 0xc) 06:33:52 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000380)) 06:33:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:33:52 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) pread64(r0, 0x0, 0x0, 0x0) 06:33:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@private2, @private0, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40400060}) 06:33:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000180)={0x6, 'xfrm0\x00'}) [ 1820.403157][ T6423] usb 1-1: new high-speed USB device number 12 using dummy_hcd 06:33:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x12, 0x0, &(0x7f0000002500)) [ 1820.673130][ T6423] usb 1-1: Using ep0 maxpacket: 16 [ 1820.973495][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1820.982703][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.991058][ T6423] usb 1-1: Product: syz [ 1820.995902][ T6423] usb 1-1: Manufacturer: syz [ 1821.000615][ T6423] usb 1-1: SerialNumber: syz [ 1821.050171][ T6423] usb 1-1: config 0 descriptor?? [ 1821.101773][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1824.347413][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1824.354084][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1824.360513][ T6423] gspca_stk1135: Sensor write failed [ 1824.366211][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1824.372714][ T6423] gspca_stk1135: Sensor write failed [ 1824.378292][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1824.384840][ T6423] gspca_stk1135: Sensor read failed [ 1824.390233][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1824.396866][ T6423] gspca_stk1135: Sensor read failed [ 1824.402388][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1824.410691][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1824.417808][ T6423] gspca_stk1135: Sensor read failed [ 1824.423313][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1824.429799][ T6423] gspca_stk1135: Sensor read failed [ 1824.435575][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1824.442069][ T6423] gspca_stk1135: Sensor write failed [ 1824.447613][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1824.454527][ T6423] gspca_stk1135: Sensor write failed [ 1824.459984][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1824.473562][ T6423] usb 1-1: USB disconnect, device number 12 06:33:56 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:33:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f00000021c0)) 06:33:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:33:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000010c0), &(0x7f0000001100)=0xc) 06:33:56 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:33:56 executing program 5: bpf$MAP_CREATE(0x3, &(0x7f0000002080), 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 06:33:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ipvlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @private, 0x0, 0x0, 'erspan0\x00', 'team_slave_1\x00'}, 0x0, 0x2c8, 0x2f8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}}, @common=@icmp={{0x28}, {0x0, '\vd'}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) 06:33:57 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x2, 0x0, 0x700) 06:33:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x2c, 0x0, &(0x7f0000002500)) 06:33:57 executing program 1: bpf$MAP_CREATE(0x1e, &(0x7f0000002080), 0x40) 06:33:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) [ 1825.604378][ T6630] usb 1-1: new high-speed USB device number 13 using dummy_hcd 06:33:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind(r0, &(0x7f0000000140)=@nfc, 0x80) [ 1825.843061][ T6630] usb 1-1: Using ep0 maxpacket: 16 [ 1826.124090][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1826.133587][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.142251][ T6630] usb 1-1: Product: syz [ 1826.146831][ T6630] usb 1-1: Manufacturer: syz [ 1826.152347][ T6630] usb 1-1: SerialNumber: syz [ 1826.325785][ T6630] usb 1-1: config 0 descriptor?? [ 1826.368954][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1829.654221][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 1829.660801][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1829.667626][ T6630] gspca_stk1135: Sensor write failed [ 1829.673361][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1829.679789][ T6630] gspca_stk1135: Sensor write failed [ 1829.685580][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1829.691996][ T6630] gspca_stk1135: Sensor read failed [ 1829.697731][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1829.704368][ T6630] gspca_stk1135: Sensor read failed [ 1829.709648][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 1829.716806][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1829.723775][ T6630] gspca_stk1135: Sensor read failed [ 1829.729138][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1829.736786][ T6630] gspca_stk1135: Sensor read failed [ 1829.742125][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1829.748967][ T6630] gspca_stk1135: Sensor write failed [ 1829.754805][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1829.761396][ T6630] gspca_stk1135: Sensor write failed [ 1829.767304][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 1829.786032][ T6630] usb 1-1: USB disconnect, device number 13 06:34:02 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:34:02 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000001180), 0xfffffe22) 06:34:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:34:02 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x12, 0x1, &(0x7f00000002c0)=@raw=[@generic], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:34:02 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000004b40)={&(0x7f0000004b00)=""/45, 0x0, 0x1000, 0x0, 0x1}, 0x20) 06:34:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)) [ 1830.855456][T12379] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1831.103106][T12379] usb 1-1: Using ep0 maxpacket: 16 [ 1831.383229][T12379] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1831.393157][T12379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.401303][T12379] usb 1-1: Product: syz [ 1831.405839][T12379] usb 1-1: Manufacturer: syz [ 1831.410551][T12379] usb 1-1: SerialNumber: syz [ 1831.457495][T12379] usb 1-1: config 0 descriptor?? [ 1831.509097][T12379] gspca_main: stk1135-2.14.0 probing 174f:6a31 06:34:04 executing program 5: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)}, 0x48) 06:34:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x25, 0x0, &(0x7f0000002500)) 06:34:04 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040), 0x4) 06:34:04 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100), 0x4) 06:34:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:34:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect(r0, &(0x7f0000000000)=@in, 0x80) [ 1835.063340][T12379] gspca_stk1135: reg_w 0x352 err -71 [ 1835.069914][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1835.076733][T12379] gspca_stk1135: Sensor write failed [ 1835.082192][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1835.088818][T12379] gspca_stk1135: Sensor write failed [ 1835.094435][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1835.100853][T12379] gspca_stk1135: Sensor read failed [ 1835.106473][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1835.113351][T12379] gspca_stk1135: Sensor read failed [ 1835.118620][T12379] gspca_stk1135: Detected sensor type unknown (0x0) [ 1835.125643][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1835.132136][T12379] gspca_stk1135: Sensor read failed [ 1835.137727][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1835.144431][T12379] gspca_stk1135: Sensor read failed [ 1835.149760][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1835.156430][T12379] gspca_stk1135: Sensor write failed [ 1835.163259][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1835.169764][T12379] gspca_stk1135: Sensor write failed [ 1835.175620][T12379] stk1135: probe of 1-1:0.0 failed with error -71 [ 1835.190802][T12379] usb 1-1: USB disconnect, device number 14 06:34:07 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:34:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, &(0x7f0000000180)=""/112, 0x0, 0x70}, 0x20) 06:34:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @loopback}, {}, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x200, 0xfff}) 06:34:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x14}, 0x14}}, 0x0) 06:34:07 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) 06:34:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:34:07 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:34:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x1, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}]}, 0x1c}}, 0x0) 06:34:07 executing program 5: syz_genetlink_get_family_id$team(&(0x7f00000031c0), 0xffffffffffffffff) 06:34:07 executing program 3: pipe(&(0x7f0000000980)={0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 06:34:08 executing program 2: r0 = epoll_create(0x200) epoll_pwait(r0, &(0x7f0000000300)=[{}], 0x1, 0x0, &(0x7f0000000380), 0x8) [ 1836.206046][T12379] usb 1-1: new high-speed USB device number 15 using dummy_hcd 06:34:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x268, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ipvlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @private, 0x0, 0x0, 'erspan0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) [ 1836.454458][T12379] usb 1-1: Using ep0 maxpacket: 16 [ 1836.734154][T12379] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1836.743563][T12379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.751789][T12379] usb 1-1: Product: syz [ 1836.756583][T12379] usb 1-1: Manufacturer: syz [ 1836.761299][T12379] usb 1-1: SerialNumber: syz [ 1836.811826][T12379] usb 1-1: config 0 descriptor?? [ 1836.858788][T12379] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1840.123173][T12379] gspca_stk1135: reg_w 0x352 err -71 [ 1840.129658][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1840.136312][T12379] gspca_stk1135: Sensor write failed [ 1840.141757][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1840.148495][T12379] gspca_stk1135: Sensor write failed [ 1840.154094][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1840.160506][T12379] gspca_stk1135: Sensor read failed [ 1840.166022][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1840.172432][T12379] gspca_stk1135: Sensor read failed [ 1840.179407][T12379] gspca_stk1135: Detected sensor type unknown (0x0) [ 1840.186733][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1840.193351][T12379] gspca_stk1135: Sensor read failed [ 1840.198665][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1840.205229][T12379] gspca_stk1135: Sensor read failed [ 1840.210674][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1840.217189][T12379] gspca_stk1135: Sensor write failed [ 1840.222636][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1840.229154][T12379] gspca_stk1135: Sensor write failed [ 1840.234801][T12379] stk1135: probe of 1-1:0.0 failed with error -71 [ 1840.251226][T12379] usb 1-1: USB disconnect, device number 15 06:34:12 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:34:12 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = socket$inet(0x2, 0x3, 0x7) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000003c0)) 06:34:12 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000002500)) 06:34:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140), 0x8) 06:34:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:34:12 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x24, 0x0, &(0x7f0000002500)) 06:34:12 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x19, 0x0, &(0x7f0000002500)) 06:34:12 executing program 5: ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)='wg2\x00') r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) 06:34:12 executing program 2: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, 0x4, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0x20}}, 0x0) 06:34:12 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x0) 06:34:13 executing program 2: bpf$MAP_CREATE(0xd, &(0x7f0000002080), 0x40) 06:34:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000200)) [ 1841.304491][ T6423] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1841.546596][ T6423] usb 1-1: Using ep0 maxpacket: 16 [ 1841.823900][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1841.833520][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.841649][ T6423] usb 1-1: Product: syz [ 1841.846317][ T6423] usb 1-1: Manufacturer: syz [ 1841.851042][ T6423] usb 1-1: SerialNumber: syz [ 1841.910155][ T6423] usb 1-1: config 0 descriptor?? [ 1841.958775][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1845.243243][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1845.249709][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1845.256562][ T6423] gspca_stk1135: Sensor write failed [ 1845.262015][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1845.268585][ T6423] gspca_stk1135: Sensor write failed [ 1845.274175][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1845.280577][ T6423] gspca_stk1135: Sensor read failed [ 1845.286647][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1845.293396][ T6423] gspca_stk1135: Sensor read failed [ 1845.299757][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1845.307402][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1845.314133][ T6423] gspca_stk1135: Sensor read failed [ 1845.319465][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1845.326047][ T6423] gspca_stk1135: Sensor read failed [ 1845.331349][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1845.338048][ T6423] gspca_stk1135: Sensor write failed [ 1845.343691][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1845.350275][ T6423] gspca_stk1135: Sensor write failed [ 1845.356198][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1845.369186][ T6423] usb 1-1: USB disconnect, device number 16 06:34:17 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:34:17 executing program 1: bpf$MAP_CREATE(0x8, &(0x7f0000002080), 0x40) 06:34:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x18, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_LABELS_MASK={0x4}]}, 0x18}}, 0x0) 06:34:17 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000004b40)={0x0, 0x204000, 0x1000, 0x0, 0x1}, 0x20) 06:34:17 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 06:34:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:34:18 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x3, 0x0, 0x0) 06:34:18 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x49, 0x49, 0x2, [@var, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "82"}]}}, &(0x7f0000000180)=""/163, 0x66, 0xa3, 0x1}, 0x20) 06:34:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x11, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x268, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ipvlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @private, 0x0, 0x0, 'erspan0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 06:34:18 executing program 5: syz_emit_ethernet(0xaa, &(0x7f0000000100)={@dev, @multicast, @void, {@ipv4={0x800, @gre={{0x16, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@remote}, {@loopback}, {@local}]}, @ra={0x94, 0x4}, @end, @rr={0x7, 0xb, 0x0, [@rand_addr, @local]}, @ra={0x94, 0x4}, @cipso={0x86, 0x9, 0x0, [{0x0, 0x3, "e2"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}, 0x0) [ 1846.395184][ T6423] usb 1-1: new high-speed USB device number 17 using dummy_hcd 06:34:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x4f0, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ipvlan1\x00', 'nr0\x00'}, 0x0, 0xa0, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @private, 0x0, 0x0, 'erspan0\x00', 'team_slave_1\x00'}, 0x0, 0x2c8, 0x2f8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}}, @common=@icmp={{0x28}, {0x0, '\vd'}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) 06:34:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2c, 0x9, 0x6, 0x805, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x2c}}, 0x0) [ 1846.643094][ T6423] usb 1-1: Using ep0 maxpacket: 16 [ 1846.924221][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1846.933567][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.943310][ T6423] usb 1-1: Product: syz [ 1846.947698][ T6423] usb 1-1: Manufacturer: syz [ 1846.952410][ T6423] usb 1-1: SerialNumber: syz [ 1846.999048][ T6423] usb 1-1: config 0 descriptor?? [ 1847.051483][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1850.319234][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1850.325876][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1850.332316][ T6423] gspca_stk1135: Sensor write failed [ 1850.339014][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1850.345643][ T6423] gspca_stk1135: Sensor write failed [ 1850.351093][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1850.357704][ T6423] gspca_stk1135: Sensor read failed [ 1850.363413][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1850.369854][ T6423] gspca_stk1135: Sensor read failed [ 1850.375349][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1850.382124][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1850.388847][ T6423] gspca_stk1135: Sensor read failed [ 1850.394484][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1850.401018][ T6423] gspca_stk1135: Sensor read failed [ 1850.406510][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1850.413325][ T6423] gspca_stk1135: Sensor write failed [ 1850.418860][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1850.425487][ T6423] gspca_stk1135: Sensor write failed [ 1850.431029][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1850.446097][ T6423] usb 1-1: USB disconnect, device number 17 06:34:22 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:34:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000700)={0x0, 0xfe, '\x00', [@generic={0x0, 0x7ef, "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"}]}, 0x800) 06:34:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x9, 0x0, 0x0, 0x0, 0x2b, 0x1}, 0x40) 06:34:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x4, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x268, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ipvlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @private, 0x0, 0x0, 'erspan0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 06:34:22 executing program 1: bpf$MAP_CREATE(0x23, &(0x7f0000002080), 0x40) 06:34:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:34:23 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 06:34:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @loopback}, {}, 0xd, 0x0, 0x0, 0x0, 0x7}) 06:34:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x4, 0x6, 0x201}, 0x14}}, 0x0) 06:34:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x18, 0x0, 0x0) 06:34:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) [ 1851.513212][ T6423] usb 1-1: new high-speed USB device number 18 using dummy_hcd 06:34:23 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000340)='GPL\x00', 0x1, 0x94, &(0x7f0000000380)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1851.756906][ T6423] usb 1-1: Using ep0 maxpacket: 16 [ 1852.065044][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1852.074355][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.082501][ T6423] usb 1-1: Product: syz [ 1852.086970][ T6423] usb 1-1: Manufacturer: syz [ 1852.091771][ T6423] usb 1-1: SerialNumber: syz [ 1852.123154][ T6423] usb 1-1: config 0 descriptor?? [ 1852.169533][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1855.396074][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1855.402739][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1855.409586][ T6423] gspca_stk1135: Sensor write failed [ 1855.415384][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1855.421891][ T6423] gspca_stk1135: Sensor write failed [ 1855.427651][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1855.436000][ T6423] gspca_stk1135: Sensor read failed [ 1855.441371][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1855.448328][ T6423] gspca_stk1135: Sensor read failed [ 1855.453810][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1855.460673][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1855.467279][ T6423] gspca_stk1135: Sensor read failed [ 1855.472770][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1855.479330][ T6423] gspca_stk1135: Sensor read failed [ 1855.484866][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1855.491318][ T6423] gspca_stk1135: Sensor write failed [ 1855.497105][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1855.503711][ T6423] gspca_stk1135: Sensor write failed [ 1855.509181][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1855.522325][ T6423] usb 1-1: USB disconnect, device number 18 06:34:27 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:34:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x6, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}}, 0x0) 06:34:27 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x1600bd63, 0x0, &(0x7f0000002500)) 06:34:27 executing program 2: socket(0x11, 0x2, 0x1) 06:34:27 executing program 1: bpf$MAP_CREATE(0x16, &(0x7f0000002080), 0x40) 06:34:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:34:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 06:34:28 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000004b40)={0x0}, 0x20) 06:34:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:34:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x6, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) 06:34:28 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2}, 0x0) [ 1856.413253][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1856.473272][ T6423] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1856.713497][ T6423] usb 1-1: Using ep0 maxpacket: 16 06:34:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) [ 1857.003951][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1857.013483][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.021785][ T6423] usb 1-1: Product: syz [ 1857.026352][ T6423] usb 1-1: Manufacturer: syz [ 1857.031161][ T6423] usb 1-1: SerialNumber: syz [ 1857.114509][ T6423] usb 1-1: config 0 descriptor?? [ 1857.159360][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1860.446051][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1860.454491][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1860.460919][ T6423] gspca_stk1135: Sensor write failed [ 1860.467180][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1860.473767][ T6423] gspca_stk1135: Sensor write failed [ 1860.479226][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1860.486090][ T6423] gspca_stk1135: Sensor read failed [ 1860.491399][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1860.497926][ T6423] gspca_stk1135: Sensor read failed [ 1860.503367][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1860.510140][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1860.516675][ T6423] gspca_stk1135: Sensor read failed [ 1860.522113][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1860.528662][ T6423] gspca_stk1135: Sensor read failed [ 1860.534282][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1860.540766][ T6423] gspca_stk1135: Sensor write failed [ 1860.546387][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1860.553621][ T6423] gspca_stk1135: Sensor write failed [ 1860.559117][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1860.574051][ T6423] usb 1-1: USB disconnect, device number 19 06:34:32 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:34:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x7, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x268, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ipvlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @private, 0x0, 0x0, 'erspan0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 06:34:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gre0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @rand_addr, {[@timestamp={0x44, 0x4}]}}}}}) 06:34:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xf, 0x0, 0x0) 06:34:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:34:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x2b, 0x0, &(0x7f0000002500)) 06:34:33 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x1600bd59, 0x0, &(0x7f0000002500)) 06:34:33 executing program 1: syz_genetlink_get_family_id$nbd(&(0x7f0000001180), 0xffffffffffffffff) 06:34:33 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xe, 0x0, 0x0) 06:34:33 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x40) 06:34:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) [ 1861.537216][ T3121] ieee802154 phy0 wpan0: encryption failed: -22 [ 1861.544011][ T3121] ieee802154 phy1 wpan1: encryption failed: -22 [ 1861.603674][ T6423] usb 1-1: new high-speed USB device number 20 using dummy_hcd 06:34:33 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x0) [ 1861.843997][ T6423] usb 1-1: Using ep0 maxpacket: 16 [ 1862.124016][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1862.133489][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.141621][ T6423] usb 1-1: Product: syz [ 1862.146297][ T6423] usb 1-1: Manufacturer: syz [ 1862.150998][ T6423] usb 1-1: SerialNumber: syz [ 1862.242534][ T6423] usb 1-1: config 0 descriptor?? [ 1862.289757][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1865.577486][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1865.584127][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1865.590731][ T6423] gspca_stk1135: Sensor write failed [ 1865.596597][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1865.603197][ T6423] gspca_stk1135: Sensor write failed [ 1865.608632][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1865.615331][ T6423] gspca_stk1135: Sensor read failed [ 1865.620678][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1865.627410][ T6423] gspca_stk1135: Sensor read failed [ 1865.632660][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1865.639842][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1865.646519][ T6423] gspca_stk1135: Sensor read failed [ 1865.651903][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1865.658520][ T6423] gspca_stk1135: Sensor read failed [ 1865.664105][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1865.670617][ T6423] gspca_stk1135: Sensor write failed [ 1865.677963][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1865.685148][ T6423] gspca_stk1135: Sensor write failed [ 1865.690628][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1865.703678][ T6423] usb 1-1: USB disconnect, device number 20 06:34:38 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:34:38 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x20, 0x1, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x20}}, 0x0) 06:34:38 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x3, &(0x7f0000000880)=@framed, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 06:34:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 06:34:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:34:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={0x0}}, 0x0) 06:34:38 executing program 1: pipe(&(0x7f0000000980)={0xffffffffffffffff}) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) 06:34:38 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x20, 0x1, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x20}}, 0x0) 06:34:38 executing program 2: bpf$MAP_CREATE(0x10, &(0x7f0000002080), 0x40) 06:34:38 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000002000)) 06:34:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) [ 1866.753733][T30181] usb 1-1: new high-speed USB device number 21 using dummy_hcd 06:34:38 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) [ 1866.993151][T30181] usb 1-1: Using ep0 maxpacket: 16 [ 1867.279548][T30181] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1867.289146][T30181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.297604][T30181] usb 1-1: Product: syz [ 1867.301882][T30181] usb 1-1: Manufacturer: syz [ 1867.307444][T30181] usb 1-1: SerialNumber: syz [ 1867.390407][T30181] usb 1-1: config 0 descriptor?? [ 1867.439698][T30181] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1870.703506][T30181] gspca_stk1135: reg_w 0x352 err -71 [ 1870.710088][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1870.716882][T30181] gspca_stk1135: Sensor write failed [ 1870.722344][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1870.728904][T30181] gspca_stk1135: Sensor write failed [ 1870.734542][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1870.740969][T30181] gspca_stk1135: Sensor read failed [ 1870.746549][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1870.753981][T30181] gspca_stk1135: Sensor read failed [ 1870.759340][T30181] gspca_stk1135: Detected sensor type unknown (0x0) [ 1870.766281][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1870.772690][T30181] gspca_stk1135: Sensor read failed [ 1870.778300][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1870.784957][T30181] gspca_stk1135: Sensor read failed [ 1870.790328][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1870.798955][T30181] gspca_stk1135: Sensor write failed [ 1870.805187][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1870.812061][T30181] gspca_stk1135: Sensor write failed [ 1870.817957][T30181] stk1135: probe of 1-1:0.0 failed with error -71 [ 1870.830936][T30181] usb 1-1: USB disconnect, device number 21 06:34:43 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:34:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, &(0x7f0000002500)) 06:34:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x20, 0x1, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x20}}, 0x0) 06:34:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:34:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x14, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x268, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ipvlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @private, 0x0, 0x0, 'erspan0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 06:34:43 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x2, 0x0, 0x7) 06:34:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000005c0), 0x4) 06:34:43 executing program 2: socket(0x33, 0x0, 0x0) 06:34:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xf, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:34:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x20, 0x1, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x20}}, 0x0) [ 1871.853330][T12379] usb 1-1: new high-speed USB device number 22 using dummy_hcd 06:34:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x268, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x8000000, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ipvlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @private, 0x0, 0x0, 'erspan0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 06:34:43 executing program 1: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000200)={[0x7fff]}, 0x8) [ 1872.093372][T12379] usb 1-1: Using ep0 maxpacket: 16 [ 1872.373843][T12379] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1872.383305][T12379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.391438][T12379] usb 1-1: Product: syz [ 1872.396017][T12379] usb 1-1: Manufacturer: syz [ 1872.400732][T12379] usb 1-1: SerialNumber: syz [ 1872.485071][T12379] usb 1-1: config 0 descriptor?? [ 1872.528946][T12379] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1875.816861][T12379] gspca_stk1135: reg_w 0x352 err -71 [ 1875.823364][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1875.829793][T12379] gspca_stk1135: Sensor write failed [ 1875.835611][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1875.842024][T12379] gspca_stk1135: Sensor write failed [ 1875.847677][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1875.854246][T12379] gspca_stk1135: Sensor read failed [ 1875.859870][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1875.866629][T12379] gspca_stk1135: Sensor read failed [ 1875.871878][T12379] gspca_stk1135: Detected sensor type unknown (0x0) [ 1875.878951][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1875.885534][T12379] gspca_stk1135: Sensor read failed [ 1875.890852][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1875.897507][T12379] gspca_stk1135: Sensor read failed [ 1875.902815][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1875.909405][T12379] gspca_stk1135: Sensor write failed [ 1875.916076][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1875.922575][T12379] gspca_stk1135: Sensor write failed [ 1875.928534][T12379] stk1135: probe of 1-1:0.0 failed with error -71 [ 1875.944594][T12379] usb 1-1: USB disconnect, device number 22 06:34:48 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:34:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x268, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ipvlan1\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x88}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @private, 0x0, 0x0, 'erspan0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 06:34:48 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002680)={0x18, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0) 06:34:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x30}}, 0x0) 06:34:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f00000003c0)="b6") 06:34:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:34:48 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x92442, 0x0) 06:34:48 executing program 3: socket(0x22, 0x2, 0x1) 06:34:48 executing program 2: socketpair(0x10, 0x2, 0x8b, &(0x7f0000000280)) 06:34:48 executing program 5: syz_emit_ethernet(0x38, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "68f979", 0x2, 0x0, 0x0, @rand_addr=' \x01\x00', @mcast1, {[], "fa81"}}}}}, 0x0) [ 1876.866104][T30181] usb 1-1: new high-speed USB device number 23 using dummy_hcd 06:34:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x6}, 0x1c, 0x0}, 0x0) 06:34:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002080)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0}}, {{@in=@local}, 0x0, @in=@empty}}, 0xe8) [ 1877.123751][T30181] usb 1-1: Using ep0 maxpacket: 16 [ 1877.454162][T30181] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1877.463603][T30181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.471736][T30181] usb 1-1: Product: syz [ 1877.476201][T30181] usb 1-1: Manufacturer: syz [ 1877.481335][T30181] usb 1-1: SerialNumber: syz [ 1877.538583][T30181] usb 1-1: config 0 descriptor?? [ 1877.598862][T30181] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1880.866292][T30181] gspca_stk1135: reg_w 0x352 err -71 [ 1880.873577][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1880.880001][T30181] gspca_stk1135: Sensor write failed [ 1880.885719][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1880.892126][T30181] gspca_stk1135: Sensor write failed [ 1880.897932][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1880.904573][T30181] gspca_stk1135: Sensor read failed [ 1880.909913][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1880.916608][T30181] gspca_stk1135: Sensor read failed [ 1880.921853][T30181] gspca_stk1135: Detected sensor type unknown (0x0) [ 1880.928833][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1880.937363][T30181] gspca_stk1135: Sensor read failed [ 1880.943633][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1880.950200][T30181] gspca_stk1135: Sensor read failed [ 1880.955797][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1880.964470][T30181] gspca_stk1135: Sensor write failed [ 1880.969918][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1880.976813][T30181] gspca_stk1135: Sensor write failed [ 1880.982303][T30181] stk1135: probe of 1-1:0.0 failed with error -71 [ 1880.995726][T30181] usb 1-1: USB disconnect, device number 23 06:34:53 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:34:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 06:34:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000001b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001ac0)={&(0x7f0000000a00)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_MODES_OURS={0xea8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xea1, 0x5, "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"}]}]}, 0xec4}}, 0x0) 06:34:53 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg(r0, &(0x7f0000002a00)={&(0x7f0000001380)=@ax25={{0x3, @bcast}, [@bcast, @rose, @remote, @rose, @rose, @rose, @rose, @default]}, 0x80, 0x0}, 0x12002) 06:34:53 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$fou(&(0x7f0000003c00), 0xffffffffffffffff) 06:34:53 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:34:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0x9}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:34:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) 06:34:53 executing program 1: pipe(&(0x7f0000000040)) clock_gettime(0x0, 0x0) 06:34:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x2, 'ib\x00'}]}]}, 0x20}}, 0x0) [ 1881.973410][T30181] usb 1-1: new high-speed USB device number 24 using dummy_hcd 06:34:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x300}, 0x0) [ 1882.214278][T30181] usb 1-1: Using ep0 maxpacket: 16 06:34:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0x38}}, 0x0) [ 1882.493996][T30181] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1882.503483][T30181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.511617][T30181] usb 1-1: Product: syz [ 1882.516544][T30181] usb 1-1: Manufacturer: syz [ 1882.521369][T30181] usb 1-1: SerialNumber: syz [ 1882.645252][T30181] usb 1-1: config 0 descriptor?? [ 1882.688971][T30181] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1885.973500][T30181] gspca_stk1135: reg_w 0x352 err -71 [ 1885.979946][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1885.986707][T30181] gspca_stk1135: Sensor write failed [ 1885.992180][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1885.998881][T30181] gspca_stk1135: Sensor write failed [ 1886.004607][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1886.011044][T30181] gspca_stk1135: Sensor read failed [ 1886.016662][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1886.023197][T30181] gspca_stk1135: Sensor read failed [ 1886.028510][T30181] gspca_stk1135: Detected sensor type unknown (0x0) [ 1886.035577][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1886.042110][T30181] gspca_stk1135: Sensor read failed [ 1886.047760][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1886.055646][T30181] gspca_stk1135: Sensor read failed [ 1886.061139][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1886.068157][T30181] gspca_stk1135: Sensor write failed [ 1886.073767][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1886.080193][T30181] gspca_stk1135: Sensor write failed [ 1886.086021][T30181] stk1135: probe of 1-1:0.0 failed with error -71 [ 1886.099080][T30181] usb 1-1: USB disconnect, device number 24 06:34:58 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:34:58 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000003740), &(0x7f00000037c0)={&(0x7f0000003780), 0x8}) 06:34:58 executing program 2: r0 = socket(0x21, 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0xffffffffffffffff, 0x0) 06:34:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="17ba"], 0x22c}}, 0x0) 06:34:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000002d80)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0) 06:34:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:34:58 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x6, 0x18, {0x0, @bearer=@udp='udp:syz1\x00'}}}}, 0x30}}, 0x0) 06:34:58 executing program 2: socket(0x21, 0x2, 0x2) 06:34:58 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000040)) 06:34:58 executing program 3: socket(0x1, 0x0, 0x40) 06:34:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f00000000c0)=""/87, 0x57}], 0x2}}], 0x1, 0x0, 0x0) [ 1887.163101][T12379] usb 1-1: new high-speed USB device number 25 using dummy_hcd 06:34:59 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) read$alg(r0, &(0x7f0000000200)=""/191, 0xbf) [ 1887.433281][T12379] usb 1-1: Using ep0 maxpacket: 16 [ 1887.744180][T12379] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1887.753587][T12379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.761721][T12379] usb 1-1: Product: syz [ 1887.766334][T12379] usb 1-1: Manufacturer: syz [ 1887.771264][T12379] usb 1-1: SerialNumber: syz [ 1887.820096][T12379] usb 1-1: config 0 descriptor?? [ 1887.878961][T12379] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1891.156135][T12379] gspca_stk1135: reg_w 0x352 err -71 [ 1891.162642][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1891.169318][T12379] gspca_stk1135: Sensor write failed [ 1891.175927][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1891.182349][T12379] gspca_stk1135: Sensor write failed [ 1891.188093][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1891.194691][T12379] gspca_stk1135: Sensor read failed [ 1891.200061][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1891.206585][T12379] gspca_stk1135: Sensor read failed [ 1891.212025][T12379] gspca_stk1135: Detected sensor type unknown (0x0) [ 1891.218971][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1891.225610][T12379] gspca_stk1135: Sensor read failed [ 1891.230980][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1891.237523][T12379] gspca_stk1135: Sensor read failed [ 1891.243298][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1891.249698][T12379] gspca_stk1135: Sensor write failed [ 1891.255289][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1891.261703][T12379] gspca_stk1135: Sensor write failed [ 1891.267534][T12379] stk1135: probe of 1-1:0.0 failed with error -71 [ 1891.284156][T12379] usb 1-1: USB disconnect, device number 25 06:35:03 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:35:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local}, 0x1b, &(0x7f0000002cc0)=[{&(0x7f0000001600)="ba", 0x1}, {&(0x7f0000001640)="b15cfc", 0x3}, {&(0x7f00000004c0)="f2", 0x1}, {&(0x7f0000001840)="d1", 0x1}, {&(0x7f0000002c40)="df", 0x1}], 0x5}, 0x0) 06:35:03 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000), 0x8) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}, 0x0) 06:35:03 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) 06:35:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE]}, 0xfffffde0}}, 0x0) 06:35:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:35:03 executing program 3: r0 = socket(0x11, 0x3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={0x0}}, 0x0) 06:35:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@setneightbl={0x28, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0x5, 0x1, '\x00'}, @NDTA_PARMS={0xc, 0x6, 0x0, 0x1, [@NDTPA_APP_PROBES={0x8}]}]}, 0x28}}, 0x0) 06:35:04 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f00000003c0)) 06:35:04 executing program 1: socket$inet6(0xa, 0x5, 0x0) [ 1892.113240][ T6630] usb 1-1: new high-speed USB device number 26 using dummy_hcd 06:35:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {&(0x7f00000000c0)='q', 0x1}], 0x2}, 0x0) [ 1892.374087][ T6630] usb 1-1: Using ep0 maxpacket: 16 06:35:04 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000002d40), &(0x7f0000002d80)=0x4) [ 1892.708214][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1892.717659][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.726042][ T6630] usb 1-1: Product: syz [ 1892.730331][ T6630] usb 1-1: Manufacturer: syz [ 1892.735261][ T6630] usb 1-1: SerialNumber: syz [ 1892.873153][ T6630] usb 1-1: config 0 descriptor?? [ 1892.923587][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1894.343205][T12379] Bluetooth: hci0: command 0x0c20 tx timeout [ 1896.109822][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 1896.116486][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1896.123205][ T6630] gspca_stk1135: Sensor write failed [ 1896.128750][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1896.135420][ T6630] gspca_stk1135: Sensor write failed [ 1896.140865][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1896.147448][ T6630] gspca_stk1135: Sensor read failed [ 1896.152785][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1896.159397][ T6630] gspca_stk1135: Sensor read failed [ 1896.164982][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 1896.171898][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1896.178603][ T6630] gspca_stk1135: Sensor read failed [ 1896.184143][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1896.191603][ T6630] gspca_stk1135: Sensor read failed [ 1896.197544][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1896.204227][ T6630] gspca_stk1135: Sensor write failed [ 1896.209931][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1896.216489][ T6630] gspca_stk1135: Sensor write failed [ 1896.221965][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 1896.237338][ T6630] usb 1-1: USB disconnect, device number 26 06:35:08 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:35:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4$packet(r0, 0x0, 0x0, 0x0) 06:35:08 executing program 3: r0 = socket(0x2a, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x800) 06:35:08 executing program 5: clock_gettime(0x2, &(0x7f0000000640)) 06:35:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private0, 0x1}}) 06:35:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:35:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0xc80a713660b65a3f}, 0x14}}, 0x0) 06:35:08 executing program 5: connect$qrtr(0xffffffffffffffff, 0x0, 0x0) 06:35:08 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, 0x0}, 0x0) 06:35:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) 06:35:09 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80) [ 1897.273351][ T6630] usb 1-1: new high-speed USB device number 27 using dummy_hcd 06:35:09 executing program 5: clock_gettime(0x4, &(0x7f0000000800)) [ 1897.533509][ T6630] usb 1-1: Using ep0 maxpacket: 16 [ 1897.834213][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1897.843649][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.851779][ T6630] usb 1-1: Product: syz [ 1897.856339][ T6630] usb 1-1: Manufacturer: syz [ 1897.861210][ T6630] usb 1-1: SerialNumber: syz [ 1897.915803][ T6630] usb 1-1: config 0 descriptor?? [ 1897.969146][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1901.223142][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 1901.229813][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1901.236613][ T6630] gspca_stk1135: Sensor write failed [ 1901.242068][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1901.248651][ T6630] gspca_stk1135: Sensor write failed [ 1901.254311][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1901.260748][ T6630] gspca_stk1135: Sensor read failed [ 1901.266257][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1901.272668][ T6630] gspca_stk1135: Sensor read failed [ 1901.278282][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 1901.285340][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1901.291749][ T6630] gspca_stk1135: Sensor read failed [ 1901.297451][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1901.304058][ T6630] gspca_stk1135: Sensor read failed [ 1901.310401][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1901.317314][ T6630] gspca_stk1135: Sensor write failed [ 1901.322704][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1901.329267][ T6630] gspca_stk1135: Sensor write failed [ 1901.335059][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 1901.352612][ T6630] usb 1-1: USB disconnect, device number 27 06:35:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @loopback}}}}) 06:35:13 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:35:13 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000000)=@framed={{}, [@generic, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x1000, &(0x7f0000000500)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:35:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)) 06:35:13 executing program 3: pselect6(0x40, &(0x7f0000002f40), &(0x7f0000003140)={0x1f}, &(0x7f0000003700), &(0x7f0000003740), &(0x7f00000037c0)={&(0x7f0000003780)={[0x10a]}, 0x8}) 06:35:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:35:14 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x0, {{0x0}, {}, {0x6, 0x18, {0x0, @bearer=@udp='udp:syz1\x00'}}}}, 0x30}}, 0x0) 06:35:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000013c0)={@remote, @empty, @private2, 0x0, 0xfffa}) 06:35:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[{0x10}], 0x10}, 0x0) 06:35:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002800), 0x10, 0x0}}], 0x2, 0x0) 06:35:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @remote, 0xa}, 0x1c, &(0x7f0000002cc0)=[{&(0x7f0000000140)="bae1c3306d5002e46b37c77baeaa37772e3aebade5144abb39f565ad3045361288f934da8efb5c81fdc69d24ceb53c3c46888fa4252df9d27c18ee8a519acbe942f67a53f5dff49dcf4f7ee50065eff11af9aa070223", 0x56}, {&(0x7f0000001640)="b15cfced531b8593ffaf644ef9e1b3dcb5e227cefeffe679b17fa976770ccd0a43888d2eedaaf5bad407f9c72edf022e1ef036155776ad31be97cb", 0x3b}, {&(0x7f0000001bc0)="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", 0x9d6}, {&(0x7f0000001680)="19227a645f25b69acd85fd5c4b4a28e974ac8368bd609ee6a6b3a2a8a3cf043bf5325efb26f7b6037831ccb4ff0a4d5a4fad7991ae4709ee97ec2cde9c7e9cab327c30b311ba5b992e9780195f1995b530255b3b20ae858425ade95595dd60aa6fcb790869e9cb0a7c64ddba119036ac846dcc4b0101a4e22a41859a87427dfe09eb", 0x82}], 0x4}, 0x0) [ 1902.384515][ T6630] usb 1-1: new high-speed USB device number 28 using dummy_hcd 06:35:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in=@loopback}}, 0xe8) 06:35:14 executing program 2: pipe(&(0x7f0000000400)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) [ 1902.633272][ T6630] usb 1-1: Using ep0 maxpacket: 16 [ 1902.934107][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1902.943578][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.952656][ T6630] usb 1-1: Product: syz [ 1902.957458][ T6630] usb 1-1: Manufacturer: syz [ 1902.962188][ T6630] usb 1-1: SerialNumber: syz [ 1903.048272][ T6630] usb 1-1: config 0 descriptor?? [ 1903.099639][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1906.366060][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 1906.372565][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1906.379346][ T6630] gspca_stk1135: Sensor write failed [ 1906.385058][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1906.391477][ T6630] gspca_stk1135: Sensor write failed [ 1906.397171][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1906.403861][ T6630] gspca_stk1135: Sensor read failed [ 1906.409415][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1906.416105][ T6630] gspca_stk1135: Sensor read failed [ 1906.421705][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 1906.429898][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1906.436799][ T6630] gspca_stk1135: Sensor read failed [ 1906.442244][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1906.448764][ T6630] gspca_stk1135: Sensor read failed [ 1906.454642][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1906.461240][ T6630] gspca_stk1135: Sensor write failed [ 1906.466813][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1906.473390][ T6630] gspca_stk1135: Sensor write failed [ 1906.478865][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 1906.495331][ T6630] usb 1-1: USB disconnect, device number 28 06:35:18 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:35:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}}, 0x0) 06:35:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}, 0x50) 06:35:18 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x0, {{0x0}, {}, {0x6, 0x18, {0x0, @bearer=@udp='udp:syz1\x00'}}}}, 0x30}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'ip_vti0\x00'}}}}}, 0x30}}, 0x0) 06:35:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0) 06:35:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:35:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 06:35:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000000)="90337198e04dd27746f8dbbfa4d95dfebca3045ddc6e33212cfce76f1a22798ff88330c6884febdf8bf3a5117798f73496830b81f9e41147cdb1562018c67f12f8949f53bbfec846655ad84625bbe54ac39514e92be19d7a9a81346603e8a6223475d24b9bcdd115c78a5fd401ea863305f5d5ede820909fd2cc561cfd7ddbc8fe18a9b697dc0567c677e9a483154535d89b536147c86a610982754c276205b538fc45f3c3", 0xa5}, {&(0x7f00000000c0)="71ad3992d6d801a2f912dfd7fc7a1eb485837b69f6e48d25803785d67f29f18179ad8db77471220cca8a464e569eadc1975ece147c31a7b0cafdaa975483e1ce56502408d338cf5d9bfd3a1b14627ca90c3a7f9899ace9989d4850139da09dddec691b5b77c79e0ce315ccef50379402a5148a46afa868db5e597c9b3ac98735c01f738444cd569dd9c036561bb30f04bbb866e5534e02870ed0d17c286e1fe8120cd9849fdf1aa7b9a4369aebcf074046d6428bd81c09c56ac1bb9406be49f9f23829eb0c397d12c99a275895f92281282fb17f88134d9d0cb5d9f15eb060c25d68117ace038b598537db864f895b710088e62d11b2133bec2fb52bad521deb474759a6290a57f033e167ceb78a1a2591459e3d8925e7045998249160a940c603f651590004f68c6df4bcf25aa8d0323ee8ce00a1e400709ba59b585c324055c04061f0f0eaacc55f9126d2741e31260d4191969d9877900abdf69b65f066c594a6ed52a22ab83cb927dda97d4793b1f3ef72cd63744dc9156f42b15671bea357283571f6c3f2af2a76713c8d4fa966654db59e994efe96bea2ee71fb70fc34baa9dfafe10af61ee4e01563329a57fd7159469b956884aada2a3d16e8be474d382195e765361ac5696f1f970339df75f6d9a7440e86c87696f960afa880d9ad74cd4128177f48e3201737d3d56ff72d74b48829414d1583ed248a978418cfc0cbd9cf0ce9f6fdd7d00119e10c4bccb76d7bae5c8ed02d8b66062c039c889fe2b0f1199f271059ecf92f860db1f14912935a134ed7dbcdf5a517aa53ce601097a9278d5216e71ad90bef07e220c79349d8368c8953f59fe5c1a584ea0677a2a3d446d4686f9f3a70a2ea95f31683a4ec480f0fe437304f38733efd5dd36ec80c5f80a6e63f868117535cbe995004325502263db2a39d74bdadd50dc6c06f1dffb68a5688d768ac9993f9be03d37819086f3941795bcba3936635f3b303cf7744678cb4bd62347468bfa6198d4e7cc0ed62c2684590cd11781ee50a5a618b6fa0946a5eec116423a236cd507c62b7859466dbb295761a0756b3f1935f41f4570a3a4d3928085cf5ce2723bf76678c5816970e64a828f3bc68998c951f9f5545bfef9667ba960be3f6258d5ec2fdbe0ac7126170a2b274ad65a2d321e4bd12b3a77aa4d5e2516234522d809dfadd29d1112090559e042a220709c11ab4353db3db9131ddb693aae6d3c729743b74209d34e872835d8e56a39409c67bf69d564aa8e39a680fe92ebdbc2d2f315705a4a007f52e8148cb3ff61cbcefb41bcb9059f39664172d9d5063d44ed4a782e4f2952a414720f4204ef8b7578a9524f33a3dadae5d8ce3a313075cba43de70fb96816b33d95a1832b0fd8ad8015870fe0c20181598345e09827d3cee902297a90bf1d5ed4a08f73b10fbe245253e4bed5eec403e468a949f6c38eb36c955c5fa98f2c86381e9ce918d06d0f9643aa834aed990372cf5cade42b825d7b82499597fcb3b9997da76415f8279f0863d0742d66c7e94538a8822fa58cd7dd9a6f654b540285b03ce173067e62277b7172212adea9deaef9d3f950101f30822a2270002f520573f8d6c86c1354cd9f42c10c314024d250211ab6de7439dc490d42de7e669de02f6e840ebb62462d4d783ffb8163c4a2e82809730e518020bc4d2d5e35fda312a22ed6a233d362579d2bfadf98795697015af90935bbe9ba2ec7daba8972686bdbd42c413f24c7b9bb7a0b2dec4a3e1ecd9c0999eb3c751e7979ba9743161233e534bd7fc7d402b12fb56e207c60aa75f44d3e060e8a98fdb032812c306675b7a7fbfe55f42009f202a7d589572dc5954173f4c0306f5c67612f28825f49b3c529f718697f0bbd70be2138524c91f60a5f783ecdb6401b8464002a0bec76bd35947e900a229510cbf1038e7ebabbf7b76942cd67325360e45372e7eae6ac381ab4f97c53251699a7f9e42427d45c1e5b6befa247869b75bda37b62acfcddb14af96a4c41f1a4de570e57591409b8ee483d8d83aa3200951e271d2612989275cdb842185c252ec21c326780712963a6c6207d981150910fe4fed0e34cd96bc7edcf4733ee636efc7621de21a02f23f092026cd2bf3d0af79abcc0fa6577fcb990f6d228cd895d084409cb36639ce24f7875681e82860518effb97e3bd49cf14bef8039f32e589f011970271b4c01b416b8066363f9679fbae3ff9a78ef17dd1033ae2f71fc0091cdc8cf83f195460cb1d587fe7b08152da9682d7abc91169f0daaaeefbffcd64747dd858cf0ffab07a91ae4db886ddb1587d514d63380dd7422fc5f63be6479f52f7380e0632d88fbfbaea1197508ea774153a3379bc248815a7c91353b83fae3a7e1173ff9003c4c7067391ec7bf77e8cabe16dbc94680c3e9e851ef08a28a438108fa94e40e1426114b78c3b687c346f444654d780907b691acf07360424b55e9f27cfed248d0e4e181ee9fe12529d4b357364bc9016bd042ff0966b9e1173383512fccc8bc93cafa1c90055271f197dc48127196c514004e1a74c0a4255e86cb61bf6777c36a0662619f11cc4fecf441ed971ccfb3738771d4fbcb775646e23a7284b2793c92f8c9eaf348ce25c45179656378f722f6694b04205ffbf849403fa5be1081839cbdff527e8e4fa7a666234a05984ff666068128dac93bcb6e7a36b1536d6ca55d36c8393bab66c5593f6c4266080557c8c44d9a2028b166c3c2832366295b65e2a82651007d10a085b22ae8e4b8fdc16b10a6b8513ac1f01083a8dbf7fec77506fb397d1528622ed89889b83779424fd295d260e33df608f15ec59286a8cabecaed6d50a615ebc9f9a63021a9a6ce9f24e4947725b2bffc720f4499ccc88b658f50531ad84409daeb6815f52390f551e4efa57e3d15c7a55e135a02c11a832cff806355f4f5d6ad355cd5b96ff3350e7fe9e256d5ddf7033eb4565fd0b21ec2f27ca897a226be4805bf8d06822a09f9082c08370c802064f648921518c9b2c546eef1a18508875b49d740f923fae51e74e8ad7f8b71bda847a780947221e551ab7cbf888c3dc2a26b285d364ccb5c83836d697769ada7665627073bc5579d4b64799ad5999b31c6936c2ab09d23ba7104f053d540bf7ae7e7cc90b074d5b7a9c9142a8a93d9a89c059859bdb22a7ea4e928f898e0d38cdc23070c09999aa6ca4acd44747a5846e17f32b268ca226b133f2569fe85e299e5ada1884860a3a60aec954ccd96ed7236e53dcd5b75960e0b287938a509e0e6931d6c711089089f0978f53b1d42f39c8beb5257c0503a238be3902c54c9543721031e4f51b7413b05f3616ad0f6b60221d7f20c8daa99b38a93357cb2fe5b07d67b8911bdd24ae79dc40248983c5ff112fbd291a486ae8fc7c5950965622a2de5e21538ff619bbe4f24d7494c9058c0a99c899517b042d458d81c51ba5403940884a59be1e8c608ef7c4d585dbf38d26cb8cf8c6bb4bc7994b5b07eba3494947a07d312e9c11ea6562f0442d1648f67204e0b179548c4cb1db04b3d0554cfa516163c4aad2a1ed0dcdab16233444698e61c904a72129ef26f8f9868659c2bbf0aa30256189225874dbc66766a7c96831e98d7896d005e64121a934d9d0857dd83ba8d18c5593c0b140761f64dcd6c0fbf2ca625a889cc57719f4b561e5b38fb8de9b0e5de691bf8ee7851e0d369b41e31c83340f9f885e160ea87d99083b5b375301c8bd95536fe43dae74f54f70836f23e917f344dc89ccb8d6a8085ad04044f2656d553bf0adb8e4728ebfd5b39d76242b7cea7f296aa3d39072e1f29885bff5ef3e865c9ce04c7d581b4f3e1134b99c812ac1d0cf2c0101b848464dde09cc8b44be5a5346782c083a65204c2bbefde5147cc35e3a63c1b3edc84cd432137aec8ce9f89b72d15769a6fd4c9431671103f7472977887a254494429cce1ecadef0d24cc0fc9b0ea56e9296d0101cdf25377cdb3f33c4c978c3d0f3cb72af67d6aeb2887fd42b7072d27451de177b1f3e31b144bcaf0d7e0f43dfffad721594932c738afbe423096a13ee4bfd177a21a7bbf9c19af00d42e3814e24f66b60299cbd2517ba09c9f90cdf537556f7df5ec98b2fe77016f644127bc138c5935de9b535fafa1093cedd114c1c888c3794a8ff0a27e17258de396be1f747db451935adb81920986e92e9c9d9ea3d724d52caa33f16a8093ff7d5898fc5234b24fe8e9c623dacf7f68f3908512641cc1c4cff3989b46ef6c53c32e48568c0cb52eefa1d1f38a472dd1a1f661f38828142504cbd4375de54fcc8b86ee93eb2a28ccd71ff5b6da555b5e81761ea1a2a1e904b45866bf9a8f80cb4344a00767e3a1959547f92689b67512e3a3c79080e1a0479116cb7503bed0c20ed5b779654b71b01dc70a1f65c175e9c0b4bba69f333e1eb93f66c311abc25d349f2639a7495cfc37acbd7e16b4abd58822ea9e8a4cccfc392131a35cbe7cfe01b2ab6142d55dc65a79a725cbc3d03d7a794989b36159c6449dc8fa84582bd5945e705f17e7e3fc75d779a1875c814186d20f100048e66870c5230fc18b020cca8e872577335bda88a1db507d43d5c9fec0327f4ba62bba85db2857a20f1d4704be1def93e9c9c5c81f1aef7099af772e527671418a68ee0652e489c2323ac47bdf2f6821a7529d810329c71fc2ae1dd0525c6f47df0b3b1871e80863f8614d1e9292a225077fcaa07d0cb1a43fc4e74e04c847596ca55d85739941f3bf9a1b4fffe2a4144d24c27e3fde9a158c75fed7856f274d2f8e88212e077e91fd3afc8b15fdffcf6b152acca84d8a8f207572488b884fa7a84a29ef8a238a3109f1f86d1560fadb4176c27aa40d5a2a5a0133062ed9f17e244d0fb93e94bb7096b3a81d6fb649838b82b30f776501aa439b5b6c359d551fe85e8616f09715ba375d566fbfe6f15f66fee9023b98748b6128a19d9883be7ae7b051c72154d9c77eb23a0b257d460ba4dc0a56d93bd8f9ac4c0a191980e67757621355b9c198069627920ded71eaeef5dcfc49e1d37693481b6861197ed340457d7e48b5f59348b3c12b76684eaea4fa2ef425de94c2d8e26154dea4", 0xe1c}], 0x2, &(0x7f0000001340)=[{0x10, 0x303}, {0x90, 0x105, 0x3, "a107e3b83b2d8c11cf436ff83f1d13e06f56f6a2f32ecb2e8f338d61bc4279cbdb9fb2e80eb383efc86977eaf370710728f2d8d42febb5580de11409648c00e310760b60de90aeea84d6c85eaa06d9519d3d6c90de5b2b642d448859be9fc17364b8bec17c18898e4460437105c6635e8272a4d2d8f791f40636b30953829674"}, {0x10}], 0xb0}, 0x0) [ 1907.313896][T12379] usb 1-1: new high-speed USB device number 29 using dummy_hcd 06:35:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000000)="90337198e04dd27746f8dbbfa4d95dfebca3045ddc6e33212cfce76f1a22798ff88330c6884febdf8bf3a5117798f73496830b81f9e41147cdb1562018c67f12f8949f53bbfec846655ad84625bbe54ac39514e92be19d7a9a81346603e8a6223475d24b9bcdd115c78a5fd401ea863305f5d5ede820909fd2cc561cfd7ddbc8fe18a9b697dc0567c677e9a483154535d89b536147c86a610982754c276205b538fc45f3c3", 0xa5}, {&(0x7f00000000c0)="71ad3992d6d801a2f912dfd7fc7a1eb485837b69f6e48d25803785d67f29f18179ad8db77471220cca8a464e569eadc1975ece147c31a7b0cafdaa975483e1ce56502408d338cf5d9bfd3a1b14627ca90c3a7f9899ace9989d4850139da09dddec691b5b77c79e0ce315ccef50379402a5148a46afa868db5e597c9b3ac98735c01f738444cd569dd9c036561bb30f04bbb866e5534e02870ed0d17c286e1fe8120cd9849fdf1aa7b9a4369aebcf074046d6428bd81c09c56ac1bb9406be49f9f23829eb0c397d12c99a275895f92281282fb17f88134d9d0cb5d9f15eb060c25d68117ace038b598537db864f895b710088e62d11b2133bec2fb52bad521deb474759a6290a57f033e167ceb78a1a2591459e3d8925e7045998249160a940c603f651590004f68c6df4bcf25aa8d0323ee8ce00a1e400709ba59b585c324055c04061f0f0eaacc55f9126d2741e31260d4191969d9877900abdf69b65f066c594a6ed52a22ab83cb927dda97d4793b1f3ef72cd63744dc9156f42b15671bea357283571f6c3f2af2a76713c8d4fa966654db59e994efe96bea2ee71fb70fc34baa9dfafe10af61ee4e01563329a57fd7159469b956884aada2a3d16e8be474d382195e765361ac5696f1f970339df75f6d9a7440e86c87696f960afa880d9ad74cd4128177f48e3201737d3d56ff72d74b48829414d1583ed248a978418cfc0cbd9cf0ce9f6fdd7d00119e10c4bccb76d7bae5c8ed02d8b66062c039c889fe2b0f1199f271059ecf92f860db1f14912935a134ed7dbcdf5a517aa53ce601097a9278d5216e71ad90bef07e220c79349d8368c8953f59fe5c1a584ea0677a2a3d446d4686f9f3a70a2ea95f31683a4ec480f0fe437304f38733efd5dd36ec80c5f80a6e63f868117535cbe995004325502263db2a39d74bdadd50dc6c06f1dffb68a5688d768ac9993f9be03d37819086f3941795bcba3936635f3b303cf7744678cb4bd62347468bfa6198d4e7cc0ed62c2684590cd11781ee50a5a618b6fa0946a5eec116423a236cd507c62b7859466dbb295761a0756b3f1935f41f4570a3a4d3928085cf5ce2723bf76678c5816970e64a828f3bc68998c951f9f5545bfef9667ba960be3f6258d5ec2fdbe0ac7126170a2b274ad65a2d321e4bd12b3a77aa4d5e2516234522d809dfadd29d1112090559e042a220709c11ab4353db3db9131ddb693aae6d3c729743b74209d34e872835d8e56a39409c67bf69d564aa8e39a680fe92ebdbc2d2f315705a4a007f52e8148cb3ff61cbcefb41bcb9059f39664172d9d5063d44ed4a782e4f2952a414720f4204ef8b7578a9524f33a3dadae5d8ce3a313075cba43de70fb96816b33d95a1832b0fd8ad8015870fe0c20181598345e09827d3cee902297a90bf1d5ed4a08f73b10fbe245253e4bed5eec403e468a949f6c38eb36c955c5fa98f2c86381e9ce918d06d0f9643aa834aed990372cf5cade42b825d7b82499597fcb3b9997da76415f8279f0863d0742d66c7e94538a8822fa58cd7dd9a6f654b540285b03ce173067e62277b7172212adea9deaef9d3f950101f30822a2270002f520573f8d6c86c1354cd9f42c10c314024d250211ab6de7439dc490d42de7e669de02f6e840ebb62462d4d783ffb8163c4a2e82809730e518020bc4d2d5e35fda312a22ed6a233d362579d2bfadf98795697015af90935bbe9ba2ec7daba8972686bdbd42c413f24c7b9bb7a0b2dec4a3e1ecd9c0999eb3c751e7979ba9743161233e534bd7fc7d402b12fb56e207c60aa75f44d3e060e8a98fdb032812c306675b7a7fbfe55f42009f202a7d589572dc5954173f4c0306f5c67612f28825f49b3c529f718697f0bbd70be2138524c91f60a5f783ecdb6401b8464002a0bec76bd35947e900a229510cbf1038e7ebabbf7b76942cd67325360e45372e7eae6ac381ab4f97c53251699a7f9e42427d45c1e5b6befa247869b75bda37b62acfcddb14af96a4c41f1a4de570e57591409b8ee483d8d83aa3200951e271d2612989275cdb842185c252ec21c326780712963a6c6207d981150910fe4fed0e34cd96bc7edcf4733ee636efc7621de21a02f23f092026cd2bf3d0af79abcc0fa6577fcb990f6d228cd895d084409cb36639ce24f7875681e82860518effb97e3bd49cf14bef8039f32e589f011970271b4c01b416b8066363f9679fbae3ff9a78ef17dd1033ae2f71fc0091cdc8cf83f195460cb1d587fe7b08152da9682d7abc91169f0daaaeefbffcd64747dd858cf0ffab07a91ae4db886ddb1587d514d63380dd7422fc5f63be6479f52f7380e0632d88fbfbaea1197508ea774153a3379bc248815a7c91353b83fae3a7e1173ff9003c4c7067391ec7bf77e8cabe16dbc94680c3e9e851ef08a28a438108fa94e40e1426114b78c3b687c346f444654d780907b691acf07360424b55e9f27cfed248d0e4e181ee9fe12529d4b357364bc9016bd042ff0966b9e1173383512fccc8bc93cafa1c90055271f197dc48127196c514004e1a74c0a4255e86cb61bf6777c36a0662619f11cc4fecf441ed971ccfb3738771d4fbcb775646e23a7284b2793c92f8c9eaf348ce25c45179656378f722f6694b04205ffbf849403fa5be1081839cbdff527e8e4fa7a666234a05984ff666068128dac93bcb6e7a36b1536d6ca55d36c8393bab66c5593f6c4266080557c8c44d9a2028b166c3c2832366295b65e2a82651007d10a085b22ae8e4b8fdc16b10a6b8513ac1f01083a8dbf7fec77506fb397d1528622ed89889b83779424fd295d260e33df608f15ec59286a8cabecaed6d50a615ebc9f9a63021a9a6ce9f24e4947725b2bffc720f4499ccc88b658f50531ad84409daeb6815f52390f551e4efa57e3d15c7a55e135a02c11a832cff806355f4f5d6ad355cd5b96ff3350e7fe9e256d5ddf7033eb4565fd0b21ec2f27ca897a226be4805bf8d06822a09f9082c08370c802064f648921518c9b2c546eef1a18508875b49d740f923fae51e74e8ad7f8b71bda847a780947221e551ab7cbf888c3dc2a26b285d364ccb5c83836d697769ada7665627073bc5579d4b64799ad5999b31c6936c2ab09d23ba7104f053d540bf7ae7e7cc90b074d5b7a9c9142a8a93d9a89c059859bdb22a7ea4e928f898e0d38cdc23070c09999aa6ca4acd44747a5846e17f32b268ca226b133f2569fe85e299e5ada1884860a3a60aec954ccd96ed7236e53dcd5b75960e0b287938a509e0e6931d6c711089089f0978f53b1d42f39c8beb5257c0503a238be3902c54c9543721031e4f51b7413b05f3616ad0f6b60221d7f20c8daa99b38a93357cb2fe5b07d67b8911bdd24ae79dc40248983c5ff112fbd291a486ae8fc7c5950965622a2de5e21538ff619bbe4f24d7494c9058c0a99c899517b042d458d81c51ba5403940884a59be1e8c608ef7c4d585dbf38d26cb8cf8c6bb4bc7994b5b07eba3494947a07d312e9c11ea6562f0442d1648f67204e0b179548c4cb1db04b3d0554cfa516163c4aad2a1ed0dcdab16233444698e61c904a72129ef26f8f9868659c2bbf0aa30256189225874dbc66766a7c96831e98d7896d005e64121a934d9d0857dd83ba8d18c5593c0b140761f64dcd6c0fbf2ca625a889cc57719f4b561e5b38fb8de9b0e5de691bf8ee7851e0d369b41e31c83340f9f885e160ea87d99083b5b375301c8bd95536fe43dae74f54f70836f23e917f344dc89ccb8d6a8085ad04044f2656d553bf0adb8e4728ebfd5b39d76242b7cea7f296aa3d39072e1f29885bff5ef3e865c9ce04c7d581b4f3e1134b99c812ac1d0cf2c0101b848464dde09cc8b44be5a5346782c083a65204c2bbefde5147cc35e3a63c1b3edc84cd432137aec8ce9f89b72d15769a6fd4c9431671103f7472977887a254494429cce1ecadef0d24cc0fc9b0ea56e9296d0101cdf25377cdb3f33c4c978c3d0f3cb72af67d6aeb2887fd42b7072d27451de177b1f3e31b144bcaf0d7e0f43dfffad721594932c738afbe423096a13ee4bfd177a21a7bbf9c19af00d42e3814e24f66b60299cbd2517ba09c9f90cdf537556f7df5ec98b2fe77016f644127bc138c5935de9b535fafa1093cedd114c1c888c3794a8ff0a27e17258de396be1f747db451935adb81920986e92e9c9d9ea3d724d52caa33f16a8093ff7d5898fc5234b24fe8e9c623dacf7f68f3908512641cc1c4cff3989b46ef6c53c32e48568c0cb52eefa1d1f38a472dd1a1f661f38828142504cbd4375de54fcc8b86ee93eb2a28ccd71ff5b6da555b5e81761ea1a2a1e904b45866bf9a8f80cb4344a00767e3a1959547f92689b67512e3a3c79080e1a0479116cb7503bed0c20ed5b779654b71b01dc70a1f65c175e9c0b4bba69f333e1eb93f66c311abc25d349f2639a7495cfc37acbd7e16b4abd58822ea9e8a4cccfc392131a35cbe7cfe01b2ab6142d55dc65a79a725cbc3d03d7a794989b36159c6449dc8fa84582bd5945e705f17e7e3fc75d779a1875c814186d20f100048e66870c5230fc18b020cca8e872577335bda88a1db507d43d5c9fec0327f4ba62bba85db2857a20f1d4704be1def93e9c9c5c81f1aef7099af772e527671418a68ee0652e489c2323ac47bdf2f6821a7529d810329c71fc2ae1dd0525c6f47df0b3b1871e80863f8614d1e9292a225077fcaa07d0cb1a43fc4e74e04c847596ca55d85739941f3bf9a1b4fffe2a4144d24c27e3fde9a158c75fed7856f274d2f8e88212e077e91fd3afc8b15fdffcf6b152acca84d8a8f207572488b884fa7a84a29ef8a238a3109f1f86d1560fadb4176c27aa40d5a2a5a0133062ed9f17e244d0fb93e94bb7096b3a81d6fb649838b82b30f776501aa439b5b6c359d551fe85e8616f09715ba375d566fbfe6f15f66fee9023b98748b6128a19d9883be7ae7b051c72154d9c77eb23a0b257d460ba4dc0a56d93bd8f9ac4c0a191980e67757621355b9c198069627920ded71eaeef5dcfc49e1d37693481b6861197ed340457d7e48b5f59348b3c12b76684eaea4fa2ef425de94c2d8e26154dea4", 0xe1c}], 0x2}, 0x0) 06:35:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000719c19"], 0x2c}}, 0x0) [ 1907.576749][T12379] usb 1-1: Using ep0 maxpacket: 16 [ 1907.653456][T13102] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 06:35:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local, 0x6}, 0x1c, &(0x7f0000002cc0)=[{&(0x7f0000001600)="bae1c3306d6502e46b37c77baeaa37772e3aebade5144abb39f565ad3045361288f934de8e4c", 0x26}, {&(0x7f0000001640)="b15cfced531b8593ffaf644ef9e1b3dcb5e227cefeffe679b17fa976770ccd0a43888d2eedaaf5bad407f9c72edf022e1ef036155776ad31be97", 0x3a}, {&(0x7f0000001bc0)="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", 0x539}], 0x3}, 0x900) [ 1907.788683][T13104] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 06:35:19 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0x10}}, 0x0) [ 1907.897955][T12379] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1907.907325][T12379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.915725][T12379] usb 1-1: Product: syz [ 1907.920098][T12379] usb 1-1: Manufacturer: syz [ 1907.925069][T12379] usb 1-1: SerialNumber: syz [ 1907.977530][T12379] usb 1-1: config 0 descriptor?? [ 1908.029915][T12379] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1911.293355][T12379] gspca_stk1135: reg_w 0x352 err -71 [ 1911.299840][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1911.306706][T12379] gspca_stk1135: Sensor write failed [ 1911.312163][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1911.318764][T12379] gspca_stk1135: Sensor write failed [ 1911.324419][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1911.330846][T12379] gspca_stk1135: Sensor read failed [ 1911.336490][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1911.343244][T12379] gspca_stk1135: Sensor read failed [ 1911.349277][T12379] gspca_stk1135: Detected sensor type unknown (0x0) [ 1911.356625][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1911.363274][T12379] gspca_stk1135: Sensor read failed [ 1911.368651][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1911.375283][T12379] gspca_stk1135: Sensor read failed [ 1911.380640][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1911.387262][T12379] gspca_stk1135: Sensor write failed [ 1911.392731][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1911.399253][T12379] gspca_stk1135: Sensor write failed [ 1911.404911][T12379] stk1135: probe of 1-1:0.0 failed with error -71 [ 1911.420571][T12379] usb 1-1: USB disconnect, device number 29 06:35:23 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:35:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local, 0x2}, 0x1c, 0x0}, 0x0) 06:35:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}, 0x24040011) 06:35:23 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001280)=ANY=[@ANYBLOB="101000006404"], 0x1010}}, 0x0) 06:35:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local}, 0x1c, &(0x7f0000002cc0)=[{&(0x7f0000001600)="bae1c3306d6502e46b37c77baeaa37772e3aebade5144abb39f565ad3045361288f934de8e", 0x25}, {&(0x7f0000001640)="b15cfced531b8593ffaf644ef9e1b3dcb5e227cefeffe679b17fa976770ccd0a43888d2eedaaf5bad407f9c72edf022e1ef036155776ad31be97cb", 0x3b}, {&(0x7f0000001bc0)="afb2b30be048a6f8ff3c73f472366e7cf1020b82fe5666c6b287d17958cb6d8b5b49e6f39728f8d2d617e8b47b0345d716a41471fe41648106014d4dedf70deeb5ed89f3866a9ffe9c8d179a0e164c1e9b89dda3232bc911b4c43d4208dd7409e94f4b7658ea484f874ebb6823b6084d25d4a4b568ba83303b253d91cee94e22fa603e17de7c9d2efc9308ea9cee5516615526a5fc391597c79dcb1f88926b969578af87ff5de146c55c3af861ee61411644f488b4d3fa75b3e2a8ed8ec966d47b58919b8eb77153f388e6040169b78b7d4cde0363f995419430de67967c858aae533c33c7e2a38a521d8b1c09f843b24d1dd5d80a413b6c0bdc6d49690c36bbdd3953cbc00f9ac0dba00647c439af45f442932cc8a3e617cc8210844d498a9ea040cf3297a3caac1ea973c905a55d25a041250225443b4679f564822ebd9c842f3d26a2ee526da0958e0af491dfe594df186a41351a72a9356d11d1eebb77af4c178a7690ecbc6c5b1110c6f7242e5611e591e17a640310975dee0543c407b09000dc8ef91cb2eb59e2991779a38819ad994f7075152e3055ebe62d2ea9a9c29e916090dc83dde512550177c3d62e73f451d01ecb4d09c5c8db23a7f153520a6c391ff6a66d746cbf00a8f1c9a308b76009cdea5eb11c68507c7732db5f7ca6f9b85163ab5cdf6018420ad16ff6b5d646058787396008ca4534e0bb8a6efa281d85e55187b579b39b46c81a2e7e57f2f4d39f00fc0645ad49d4d5e4d611e7aa81a69e8f191cbf6cabcb3274d2462b3e7b5622f70096a3b125d0281d3f7db22a2fe4c9b23012ee30014dfc5d4a5d9c9fb24d2d5db745c81bd25425d5c89d2f954692234a8adc1272e6a86284075d3869b1589989ccf6b26ef42d8a689264b0899ff7d928097336d9277f126a09889c1d55a571dbcf5e9eb9eda730870f87923e07378cd6da1414cbbe6d85f4447ac8454c7b3484bca59591a94f970a5437e018c33fc82909139c90138344475efaa078df11ef88b02a9eb092fd9177da18c503179e21ab66fce018fc586713213075defb1f5e4d9cc0f4a6fde3629363da8d4b4ef68c86e51ba6ce277f2d41a9ebb0116d110d9925812a2d95443356e39553d24a866e2db76d5a39352fd8d64e8e9c65f760aa0288af5d549c8933c8f158d1da91b789e9d9a420f6ceb0ed3115832f004805bdd4f46c7ffa0d6e96666981187ad90619ee6c5206a4bcd89bea0f77e324d7dabfecee71f3def4f62cafce92fbd8a9818a312d97a3d11767f6900eef8a50cbc5fafe6c45baafcf8b014127a60dcb5b7c485f2d3cfe3348f89bc166f51b71567179c2f04cbe4938d03f74afbc2a145cd7f2c5707812f1a2b9158f2e828ef1fe5420438d0c2333ed0189870c66ab3178bb9fe8a46316f7922c150a1a6331739c660e96c1952d3504e28595bdcaf3136f5cb03bd079a606fbff5a2569924e819c1f1558d3eee06ea94a271e95fcf61c4a8c08b4079aeeea2d3e35fcfaec4cb3dc1770cddfd4d6aab6ad62b435cb34951e48c3555f680f7597a65ba2bfa72f18df193fc34ae26f652aaf6c77a00fac4c852d5644896d1f1b40d589c5e5c1730d4d780615f4b2ff4f7891bd72fcf72264ca756ad808addd9eaa266bfff6f9d0762ecc788bc7d148c8a23f85360dc11aba3595782a115b76bbfdcce94b9fc446bf1988d900a5f557d1886dce645e968a62047abb039f02bea5f29b5546d1e825dc6cf660bebb23e6071e2d22a7f3df0c2ee9d87c2ab6c4e64bb3006c920fa88300d7e9966e46421d049fc2b32591aca238aa293ce8abd660eba28ad7ca10850f3f8fa4e16de1660b50559309af5d4aab11c164481e6c707ef3f2ee9185183574d52d3915b8dfa54a80e7beb51014c0f06352fdc3d7cabfedd3021dc183e5aba930b57c966016530f0d58f93abf7d4cf27e0e6c9f24def0b096e557f115635020195e93c77cc5b49ab45f732c6d5a3894bd93bca6be834eeb357f51670c00985c19c47578f38765027928ddef5c58c7d4612eb8b6522fe7c7177990719aba3dc163bff2696c9691558329933352ccb83e1fc532774652ac9a14aa2458dddb41bb613cc367aa7592e0b39c1e4a23d9cdc1cf5df6278d565ef5fe6f15be31977e2fd7f3e3d7e96f7074b6d6b54293381d73df7c1f49c4ab457665fc3a841a1aad1df9aa24ec2c356a2099bce2fe87863a996c16816951e6f457ae0a6b223831ec3baa65e2a7d62b90a46cf57b759debc467ec90cd22b91cf59ddcacfcc9d07446338cca6093846cf7f4f1b588b27e4dd9be188c66b866dabc590b0cb31fa351cbcd8f9d24c47312be5f5ae00c768611596c6ba66648cf16b39ec7f39570275aa7ec70d4048a85925af8a1e3e2069dd7342e7a6188cad75b97db99208480ae0387dfb37a6d7b00349e4df2c7e60811aa678946911636f3d9b6ac9559b35918143fc58c98cc486bf852fc13a5679654d4fda686d7a69b6f5752318ada071d401da943ef9bd682ee5f9f27983df44cccf2b238656c6b0ee944e52c7182bf00e1577edc8c675620efba0316ffd3cb9fe2b1a40f227466278b2ef40f12341129d06fab17066277402575ccfb75dc2d1216173d1a2583e20c5e9a11db576d610e85456fc43ed5273b69fc39f93c9f5f225a7c177fdeb606493f5bcde3977b8c52c2035d184ebc6dd499cde50dae9e16627dedfddc8ff4e64231e491b2524872928fbb862e9aa4bb1f277460338686a8a585e74a0b3e6d98db54457f2dfbbfa465eb488165e4f7f7e8e02a6aa433925a43fdfaf605ee1f1a925af1e5353349b8fc6b61ca80e8da5892fca7746b0c098620b451a8fd59483f8accb9e4887b640c7496ed31176afb4f9a23d55acc5a68c9647508f10b72a85129b1d626b6a128ae8e0609b415f857d5d8a47a9a695605b512cd99969ea2bfdf9c739b5417c1232ba87a246c064ce5db109c1e0fa7ab307f34029d307a74fd890596836acb6a8a9a5eaa9547140e095acc7ccf0fc8b20caff547a2b94e415e1febe7ae739ef67723793c089a102902a2337ea97b669f797913d8fd9dc92fcf26bfba8d24931719c14f946929a742719cbd6dc188fda7cebe107e532372bf67c6753b1c123de0834f781acb1bd7d59e011d484b3a71e3837123b3c4079af24baf5ec29d8375b1e7b1fe95c8c885a212e48ea518513f1540c03e0dc4ce35274e2228a8af463b5ea17aad7a5b3d18d25ed3c51d26b2866b5d6baa4ccb1cab78f2c526f5bab0f3ecdee87767fde8a486e024525d5024187d8830bf386d93fba60e8ec8b15b272fc3095fce260d5f23376f074a95c59767bc29b9807d78caf2ddf3814b68ef509a81b24ec052abe120164b7f786435ab03085ed767515ccdac807a17431062fc814a710d904dc67f46b6977e0fa6eac57372c116062be017bc848f2a2d6273b88e9bb0a34a838414a32ca70f4b358789996f442cd867d2844f2a247dfa587f9ce06a09dc4456ed186148e7a32f7275164edd3fa5aaf5314af98ddce84078152ed2ec70d5342610dd55565f20492ba7aa3214c84a2eec92a55779", 0x9e0}, {&(0x7f0000001680)="19227a645f25b69acd85fd5c4b4a28e974ac8368bd609ee6a6b3a2a8a3cf043bf5325efb26f7b6037831ccb4ff0a4d5a4fad7991ae4709ee97ec2cde9c7e9cab327c30b311ba5b992e9780195f1995b530255b3b20ae858425ade95595dd60aa6fcb790869e9cb0a7c64ddba119036ac846dcc4b0101a4e22a41859a87427dfe09eb53044092c72afbe2e9c761f61289d7ea08d40f4533957986ac5c44f0a1c73baad657", 0xa4}, {&(0x7f00000004c0)="f2", 0x1}, {&(0x7f0000001780)="e7a9646d07ac852551635dfb7eddc059966a41ea0c6af7258c63f938b61d1edb7ec85088dfbbb9f4bc9d9ea975e0a153eafd35805a204fa68793cdf62c8d1aed8eb1", 0x42}, {&(0x7f0000001840)="d1", 0x7fffe4d9}, {&(0x7f0000002c40)="df", 0x1}], 0x8}, 0x0) 06:35:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:35:23 executing program 5: socket(0x25, 0x5, 0x2) 06:35:24 executing program 2: pipe(&(0x7f0000000400)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 06:35:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local}, 0x1c, &(0x7f0000002cc0)=[{&(0x7f0000001640)="b15cfc", 0x3}], 0x300}, 0x0) 06:35:24 executing program 1: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {}, {0x6, 0x18, {0x0, @bearer=@udp='udp:syz1\x00'}}}}, 0x30}}, 0x0) 06:35:24 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@private0}, 0x14) [ 1912.443433][T30181] usb 1-1: new high-speed USB device number 30 using dummy_hcd 06:35:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000000)=""/38, &(0x7f0000000040)=0x26) [ 1912.714063][T30181] usb 1-1: Using ep0 maxpacket: 16 [ 1913.013316][T30181] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1913.022542][T30181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.031081][T30181] usb 1-1: Product: syz [ 1913.035511][T30181] usb 1-1: Manufacturer: syz [ 1913.040318][T30181] usb 1-1: SerialNumber: syz [ 1913.089079][T30181] usb 1-1: config 0 descriptor?? [ 1913.138905][T30181] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1916.436557][T30181] gspca_stk1135: reg_w 0x352 err -71 [ 1916.443169][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1916.449681][T30181] gspca_stk1135: Sensor write failed [ 1916.455541][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1916.461974][T30181] gspca_stk1135: Sensor write failed [ 1916.469378][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1916.476410][T30181] gspca_stk1135: Sensor read failed [ 1916.481725][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1916.488262][T30181] gspca_stk1135: Sensor read failed [ 1916.493895][T30181] gspca_stk1135: Detected sensor type unknown (0x0) [ 1916.500621][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1916.507196][T30181] gspca_stk1135: Sensor read failed [ 1916.512562][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1916.519163][T30181] gspca_stk1135: Sensor read failed [ 1916.524665][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1916.531040][T30181] gspca_stk1135: Sensor write failed [ 1916.536728][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1916.543295][T30181] gspca_stk1135: Sensor write failed [ 1916.548825][T30181] stk1135: probe of 1-1:0.0 failed with error -71 [ 1916.561869][T30181] usb 1-1: USB disconnect, device number 30 06:35:28 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:35:28 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000003740), 0x0) 06:35:28 executing program 1: socket(0x11, 0x3, 0x3) 06:35:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @remote, 0xa}, 0x1c, 0x0}, 0x0) 06:35:28 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r0, 0x0, 0x0) 06:35:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, 0x0, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:35:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}, 0x0) 06:35:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}, 0x0) 06:35:29 executing program 3: socket(0x1d, 0x0, 0x14) 06:35:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000780)={'caif0\x00', &(0x7f0000000740)=@ethtool_modinfo}) 06:35:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, 0x0, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) [ 1917.603185][T30181] usb 1-1: new high-speed USB device number 31 using dummy_hcd 06:35:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000b0000000c000580070001"], 0x20}}, 0x0) [ 1917.843521][T30181] usb 1-1: Using ep0 maxpacket: 16 [ 1918.125240][T30181] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1918.134775][T30181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.143131][T30181] usb 1-1: Product: syz [ 1918.147424][T30181] usb 1-1: Manufacturer: syz [ 1918.152138][T30181] usb 1-1: SerialNumber: syz [ 1918.233553][T30181] usb 1-1: config 0 descriptor?? [ 1918.279681][T30181] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1921.563326][T30181] gspca_stk1135: reg_w 0x352 err -71 [ 1921.569835][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1921.576608][T30181] gspca_stk1135: Sensor write failed [ 1921.582060][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1921.590610][T30181] gspca_stk1135: Sensor write failed [ 1921.596734][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1921.603314][T30181] gspca_stk1135: Sensor read failed [ 1921.608629][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1921.615199][T30181] gspca_stk1135: Sensor read failed [ 1921.620742][T30181] gspca_stk1135: Detected sensor type unknown (0x0) [ 1921.627834][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1921.634530][T30181] gspca_stk1135: Sensor read failed [ 1921.640111][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1921.647085][T30181] gspca_stk1135: Sensor read failed [ 1921.652406][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1921.658996][T30181] gspca_stk1135: Sensor write failed [ 1921.664621][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1921.671214][T30181] gspca_stk1135: Sensor write failed [ 1921.677039][T30181] stk1135: probe of 1-1:0.0 failed with error -71 [ 1921.691628][T30181] usb 1-1: USB disconnect, device number 31 06:35:34 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:35:34 executing program 5: socket(0x15, 0x5, 0x8001) 06:35:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 06:35:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, 0x0, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:35:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002040)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000002200)=ANY=[@ANYBLOB='$?'], 0x58}}], 0x1, 0x0) 06:35:34 executing program 2: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000440), 0x9b) 06:35:34 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000002c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) 06:35:34 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000010c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001080)={0x0, 0x1010}}, 0x0) 06:35:34 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001280)=ANY=[], 0x1010}}, 0x0) 06:35:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) 06:35:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:35:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getmulticast={0x14, 0x3a, 0x1}, 0x14}}, 0x0) [ 1922.763350][T12379] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1922.976641][ T3121] ieee802154 phy0 wpan0: encryption failed: -22 [ 1922.983370][ T3121] ieee802154 phy1 wpan1: encryption failed: -22 [ 1923.003659][T12379] usb 1-1: Using ep0 maxpacket: 16 [ 1923.334083][T12379] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1923.343415][T12379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.351549][T12379] usb 1-1: Product: syz [ 1923.356076][T12379] usb 1-1: Manufacturer: syz [ 1923.360792][T12379] usb 1-1: SerialNumber: syz [ 1923.371770][T12379] usb 1-1: config 0 descriptor?? [ 1923.419185][T12379] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1926.696098][T12379] gspca_stk1135: reg_w 0x352 err -71 [ 1926.702600][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1926.710279][T12379] gspca_stk1135: Sensor write failed [ 1926.716139][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1926.722557][T12379] gspca_stk1135: Sensor write failed [ 1926.728260][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1926.734829][T12379] gspca_stk1135: Sensor read failed [ 1926.740179][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1926.746786][T12379] gspca_stk1135: Sensor read failed [ 1926.752123][T12379] gspca_stk1135: Detected sensor type unknown (0x0) [ 1926.759303][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1926.765929][T12379] gspca_stk1135: Sensor read failed [ 1926.771342][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1926.778043][T12379] gspca_stk1135: Sensor read failed [ 1926.783579][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1926.790045][T12379] gspca_stk1135: Sensor write failed [ 1926.795669][T12379] gspca_stk1135: serial bus timeout: status=0x00 [ 1926.802085][T12379] gspca_stk1135: Sensor write failed [ 1926.807767][T12379] stk1135: probe of 1-1:0.0 failed with error -71 [ 1926.824336][T12379] usb 1-1: USB disconnect, device number 32 06:35:39 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:35:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local={0xfe, 0x7e}}, 0x1c, 0x0}, 0x0) 06:35:39 executing program 2: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x0, {{}, {0x0, 0x2}, {0x6, 0x18, {0x0, @bearer=@udp='udp:syz1\x00'}}}}, 0x30}}, 0x0) 06:35:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:35:39 executing program 3: socket(0x28, 0x0, 0x8) 06:35:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) [ 1927.383981][T13268] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1927.394308][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 06:35:39 executing program 5: pselect6(0x40, &(0x7f0000002f40), 0x0, 0x0, &(0x7f0000003740), 0x0) [ 1927.505946][T13271] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1927.515753][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 06:35:39 executing program 2: socket$inet(0x2, 0x1, 0x2) 06:35:39 executing program 3: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, r0+10000000}, 0x0) 06:35:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000000)="90337198e04dd27746f8dbbfa4d95dfebca3045ddc6e33212cfce76f1a22798ff88330c6884febdf8bf3a5117798f73496830b81f9e41147cdb1562018c67f12f8949f53bbfec846655ad84625bbe54ac39514e92be19d7a9a81346603e8a6223475d24b9bcdd115c78a5fd401ea863305f5d5ede820909fd2cc561cfd7ddbc8fe18a9b697dc0567c677e9a483154535d89b536147c86a610982754c276205b538fc45f3c3", 0xa5}, {&(0x7f00000000c0)="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", 0xe1c}], 0x2, &(0x7f0000001340)=[{0x18, 0x0, 0x0, "d9"}, {0x10}], 0x28}, 0x0) [ 1927.833036][ T6630] usb 1-1: new high-speed USB device number 33 using dummy_hcd 06:35:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x14, 0x0, 0x4}, 0x14}}, 0x0) recvmmsg$unix(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, &(0x7f0000001c00)) 06:35:40 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0) [ 1928.075219][ T6630] usb 1-1: Using ep0 maxpacket: 16 [ 1928.356134][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1928.365784][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.374161][ T6630] usb 1-1: Product: syz [ 1928.378630][ T6630] usb 1-1: Manufacturer: syz [ 1928.383899][ T6630] usb 1-1: SerialNumber: syz [ 1928.530413][ T6630] usb 1-1: config 0 descriptor?? [ 1928.578921][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1931.863228][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 1931.869894][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1931.876858][ T6630] gspca_stk1135: Sensor write failed [ 1931.882326][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1931.889075][ T6630] gspca_stk1135: Sensor write failed [ 1931.894730][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1931.901283][ T6630] gspca_stk1135: Sensor read failed [ 1931.906853][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1931.913503][ T6630] gspca_stk1135: Sensor read failed [ 1931.918770][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 1931.925789][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1931.933207][ T6630] gspca_stk1135: Sensor read failed [ 1931.938583][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1931.945115][ T6630] gspca_stk1135: Sensor read failed [ 1931.950435][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1931.956998][ T6630] gspca_stk1135: Sensor write failed [ 1931.962389][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1931.968965][ T6630] gspca_stk1135: Sensor write failed [ 1931.974774][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 1931.990612][ T6630] usb 1-1: USB disconnect, device number 33 06:35:44 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:35:44 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000000)=@ethtool_dump}) 06:35:44 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:35:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:35:44 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 06:35:44 executing program 3: r0 = socket(0x2a, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:35:44 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @mcast2}}) 06:35:44 executing program 5: r0 = socket(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @dev, {[@ra={0x94, 0x4}]}}}}}) 06:35:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x815}, 0x14}}, 0x0) 06:35:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) [ 1933.065949][ T6630] usb 1-1: new high-speed USB device number 34 using dummy_hcd 06:35:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {&(0x7f00000000c0)="71ad3992d6d801a2f912dfd7fc7a1eb4", 0x10}], 0x2}, 0x0) 06:35:45 executing program 5: pselect6(0x40, &(0x7f0000002f40), 0x0, &(0x7f0000003700)={0x3}, 0x0, 0x0) [ 1933.313129][ T6630] usb 1-1: Using ep0 maxpacket: 16 [ 1933.595406][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1933.604900][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.613347][ T6630] usb 1-1: Product: syz [ 1933.617618][ T6630] usb 1-1: Manufacturer: syz [ 1933.622320][ T6630] usb 1-1: SerialNumber: syz [ 1933.702249][ T6630] usb 1-1: config 0 descriptor?? [ 1933.750108][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1937.047460][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 1937.054126][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1937.060549][ T6630] gspca_stk1135: Sensor write failed [ 1937.066571][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1937.073159][ T6630] gspca_stk1135: Sensor write failed [ 1937.078688][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1937.085584][ T6630] gspca_stk1135: Sensor read failed [ 1937.090897][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1937.097461][ T6630] gspca_stk1135: Sensor read failed [ 1937.102716][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 1937.109691][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1937.116370][ T6630] gspca_stk1135: Sensor read failed [ 1937.121667][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1937.128506][ T6630] gspca_stk1135: Sensor read failed [ 1937.134105][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1937.140870][ T6630] gspca_stk1135: Sensor write failed [ 1937.146466][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1937.154141][ T6630] gspca_stk1135: Sensor write failed [ 1937.160556][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 1937.177062][ T6630] usb 1-1: USB disconnect, device number 34 06:35:49 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:35:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000180)=0x21, 0x4) 06:35:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01"], 0x1c}}, 0x0) 06:35:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) 06:35:49 executing program 3: syz_genetlink_get_family_id$fou(&(0x7f0000003c00), 0xffffffffffffffff) 06:35:49 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000007b40)) [ 1937.711655][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1937.790303][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 06:35:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x6}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000140)="ba4b62e1c3306d6502e46b37dff8aeaa37772e3aebade5144abbf0f565ad3045361288f934de3d5060de", 0x2a}, {&(0x7f0000001640)="b15cfced531b8593ffaf644ef9e1b3dcb5e227cefeffe679b17fa976770ccd0a43888d2eedaaf5bad407f9c72edf022e1ef036155776ad31be97", 0x3a}, {&(0x7f0000000500)="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", 0x535}], 0x3}, 0x0) 06:35:49 executing program 5: r0 = socket(0x11, 0x3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001c80)={&(0x7f0000001b40), 0xc, &(0x7f0000001c40)={0x0}}, 0x0) 06:35:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @private1}}) 06:35:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1938.223104][ T6630] usb 1-1: new high-speed USB device number 35 using dummy_hcd 06:35:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0000000000000b"], 0x20}}, 0x0) [ 1938.465465][ T6630] usb 1-1: Using ep0 maxpacket: 16 06:35:50 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002680)={0x38, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7dea}]}]}, 0x38}}, 0x0) [ 1938.794044][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1938.803485][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.811774][ T6630] usb 1-1: Product: syz [ 1938.816396][ T6630] usb 1-1: Manufacturer: syz [ 1938.821209][ T6630] usb 1-1: SerialNumber: syz [ 1938.921721][ T6630] usb 1-1: config 0 descriptor?? [ 1938.969655][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1942.243442][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 1942.249960][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1942.258605][ T6630] gspca_stk1135: Sensor write failed [ 1942.264287][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1942.270732][ T6630] gspca_stk1135: Sensor write failed [ 1942.276341][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1942.282982][ T6630] gspca_stk1135: Sensor read failed [ 1942.288341][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1942.294997][ T6630] gspca_stk1135: Sensor read failed [ 1942.300439][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 1942.307437][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1942.314105][ T6630] gspca_stk1135: Sensor read failed [ 1942.319570][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1942.326112][ T6630] gspca_stk1135: Sensor read failed [ 1942.331522][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1942.338065][ T6630] gspca_stk1135: Sensor write failed [ 1942.343730][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1942.350188][ T6630] gspca_stk1135: Sensor write failed [ 1942.356048][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 1942.374414][ T6630] usb 1-1: USB disconnect, device number 35 06:35:54 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:35:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'lo\x00', &(0x7f0000000180)=@ethtool_test}) 06:35:54 executing program 1: pselect6(0x0, 0x0, 0x0, &(0x7f0000003700), &(0x7f0000003740), 0x0) 06:35:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000000000008"], 0x1c}}, 0x0) 06:35:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local, 0x6}, 0x1c, &(0x7f0000002cc0)=[{&(0x7f0000001600)="bae1c3306d6502e46b37c77baeaa37772e3aebade5144abb39f565ad3045361288f934de8e", 0x25}, {&(0x7f0000001640)="b15cfced531b8593ffaf644ef9e1b3dcb5e227cefeffe679b17fa976770ccd0a43888d2eedaaf5bad407f9c72edf022e1ef036155776ad31be97cb", 0x3b}, {&(0x7f0000001bc0)="afb2b30be048a6f8ff3c73f472366e7cf1020b82fe5666c6b287d17958cb6d8b5b49e6f39728f8d2d617e8b47b0345d716a41471fe41648106014d4dedf70deeb5ed89f3866a9ffe9c8d179a0e164c1e9b89dda3232bc911b4c43d4208dd7409e94f4b7658ea484f874ebb6823b6084d25d4a4b568ba83303b253d91cee94e22fa603e17de7c9d2efc9308ea9cee5516615526a5fc391597c79dcb1f88926b969578af87ff5de146c55c3af861ee61411644f488b4d3fa75b3e2a8ed8ec966d47b58919b8eb77153f388e6040169b78b7d4cde0363f995419430de67967c858aae533c33c7e2a38a521d8b1c09f843b24d1dd5d80a413b6c0bdc6d49690c36bbdd3953cbc00f9ac0dba00647c439af45f442932cc8a3e617cc8210844d498a9ea040cf3297a3caac1ea973c905a55d25a041250225443b4679f564822ebd9c842f3d26a2ee526da0958e0af491dfe594df186a41351a72a9356d11d1eebb77af4c178a7690ecbc6c5b1110c6f7242e5611e591e17a640310975dee0543c407b09000dc8ef91cb2eb59e2991779a38819ad994f7075152e3055ebe62d2ea9a9c29e916090dc83dde512550177c3d62e73f451d01ecb4d09c5c8db23a7f153520a6c391ff6a66d746cbf00a8f1c9a308b76009cdea5eb11c68507c7732db5f7ca6f9b85163ab5cdf6018420ad16ff6b5d646058787396008ca4534e0bb8a6efa281d85e55187b579b39b46c81a2e7e57f2f4d39f00fc0645ad49d4d5e4d611e7aa81a69e8f191cbf6cabcb3274d2462b3e7b5622f70096a3b125d0281d3f7db22a2fe4c9b23012ee30014dfc5d4a5d9c9fb24d2d5db745c81bd25425d5c89d2f954692234a8adc1272e6a86284075d3869b1589989ccf6b26ef42d8a689264b0899ff7d928097336d9277f126a09889c1d55a571dbcf5e9eb9eda730870f87923e07378cd6da1414cbbe6d85f4447ac8454c7b3484bca59591a94f970a5437e018c33fc82909139c90138344475efaa078df11ef88b02a9eb092fd9177da18c503179e21ab66fce018fc586713213075defb1f5e4d9cc0f4a6fde3629363da8d4b4ef68c86e51ba6ce277f2d41a9ebb0116d110d9925812a2d95443356e39553d24a866e2db76d5a39352fd8d64e8e9c65f760aa0288af5d549c8933c8f158d1da91b789e9d9a420f6ceb0ed3115832f004805bdd4f46c7ffa0d6e96666981187ad90619ee6c5206a4bcd89bea0f77e324d7dabfecee71f3def4f62cafce92fbd8a9818a312d97a3d11767f6900eef8a50cbc5fafe6c45baafcf8b014127a60dcb5b7c485f2d3cfe3348f89bc166f51b71567179c2f04cbe4938d03f74afbc2a145cd7f2c5707812f1a2b9158f2e828ef1fe5420438d0c2333ed0189870c66ab3178bb9fe8a46316f7922c150a1a6331739c660e96c1952d3504e28595bdcaf3136f5cb03bd079a606fbff5a2569924e819c1f1558d3eee06ea94a271e95fcf61c4a8c08b4079aeeea2d3e35fcfaec4cb3dc1770cddfd4d6aab6ad62b435cb34951e48c3555f680f7597a65ba2bfa72f18df193fc34ae26f652aaf6c77a00fac4c852d5644896d1f1b40d589c5e5c1730d4d780615f4b2ff4f7891bd72fcf72264ca756ad808addd9eaa266bfff6f9d0762ecc788bc7d148c8a23f85360dc11aba3595782a115b76bbfdcce94b9fc446bf1988d900a5f557d1886dce645e968a62047abb039f02bea5f29b5546d1e825dc6cf660bebb23e6071e2d22a7f3df0c2ee9d87c2ab6c4e64bb3006c920fa88300d7e9966e46421d049fc2b32591aca238aa293ce8abd660eba28ad7ca10850f3f8fa4e16de1660b50559309af5d4aab11c164481e6c707ef3f2ee9185183574d52d3915b8dfa54a80e7", 0x539}], 0x3}, 0xe803) 06:35:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) 06:35:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) 06:35:55 executing program 2: socketpair$unix(0x2, 0x5, 0x0, &(0x7f0000000000)) 06:35:55 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0xffffffe1, 0x4) 06:35:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@timestamping={{0x14}}], 0x18}, 0x0) [ 1943.403077][ T6630] usb 1-1: new high-speed USB device number 36 using dummy_hcd 06:35:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local}, 0x1c, &(0x7f0000002cc0)=[{&(0x7f0000001640)="b15cfc", 0x20001643}], 0x1}, 0x0) 06:35:55 executing program 2: r0 = socket(0x25, 0x5, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) [ 1943.663246][ T6630] usb 1-1: Using ep0 maxpacket: 16 [ 1943.974341][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1943.983874][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1943.992112][ T6630] usb 1-1: Product: syz [ 1943.996559][ T6630] usb 1-1: Manufacturer: syz [ 1944.001371][ T6630] usb 1-1: SerialNumber: syz [ 1944.085393][ T6630] usb 1-1: config 0 descriptor?? [ 1944.132032][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1947.395958][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 1947.402452][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1947.409107][ T6630] gspca_stk1135: Sensor write failed [ 1947.415016][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1947.421441][ T6630] gspca_stk1135: Sensor write failed [ 1947.427083][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1947.433899][ T6630] gspca_stk1135: Sensor read failed [ 1947.439265][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1947.445932][ T6630] gspca_stk1135: Sensor read failed [ 1947.451223][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 1947.458288][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1947.464987][ T6630] gspca_stk1135: Sensor read failed [ 1947.470350][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1947.477078][ T6630] gspca_stk1135: Sensor read failed [ 1947.482396][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1947.489107][ T6630] gspca_stk1135: Sensor write failed [ 1947.495684][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1947.502451][ T6630] gspca_stk1135: Sensor write failed [ 1947.508463][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 1947.523673][ T6630] usb 1-1: USB disconnect, device number 36 06:35:59 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:35:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x7000000}, 0x0) 06:35:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) 06:35:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000000000000080029"], 0x1c}}, 0x0) 06:35:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local, 0x3}, 0x1c, 0x0}, 0x0) 06:35:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}) 06:36:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='.', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @sack_perm, @timestamp, @sack_perm, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 06:36:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local, 0x11}, 0x1c, 0x0}, 0x0) 06:36:00 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) getsockname$llc(r0, 0x0, 0x0) [ 1948.553752][T30181] usb 1-1: new high-speed USB device number 37 using dummy_hcd 06:36:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4$packet(r0, 0x0, 0x0, 0xc0800) [ 1948.793102][T30181] usb 1-1: Using ep0 maxpacket: 16 [ 1949.073385][T30181] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1949.082783][T30181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.091218][T30181] usb 1-1: Product: syz [ 1949.095654][T30181] usb 1-1: Manufacturer: syz [ 1949.100370][T30181] usb 1-1: SerialNumber: syz 06:36:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local, 0x1c}, 0x1c, &(0x7f0000002cc0)=[{&(0x7f0000001600)="bae1c3306d6502e46b37c77baeaa37772e3aebade5144abb39f565ad3045361288f934de8e", 0x25}, {&(0x7f0000001640)="b15cfced531b8593ffaf644ef9e1b3dcb5e227cefeffe679b17fa976770ccd0a43888d2eedaaf5bad407f9c72edf022e1ef036155776ad31be97cb", 0x3b}, {&(0x7f0000001bc0)="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", 0x4fd}], 0x3}, 0x0) 06:36:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) [ 1949.277853][T30181] usb 1-1: config 0 descriptor?? [ 1949.332125][T30181] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1952.633786][T30181] gspca_stk1135: reg_w 0x352 err -71 [ 1952.640275][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1952.646965][T30181] gspca_stk1135: Sensor write failed [ 1952.652414][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1952.660071][T30181] gspca_stk1135: Sensor write failed [ 1952.665648][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1952.672077][T30181] gspca_stk1135: Sensor read failed [ 1952.677723][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1952.684550][T30181] gspca_stk1135: Sensor read failed [ 1952.689904][T30181] gspca_stk1135: Detected sensor type unknown (0x0) [ 1952.696852][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1952.703476][T30181] gspca_stk1135: Sensor read failed [ 1952.709030][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1952.715843][T30181] gspca_stk1135: Sensor read failed [ 1952.721159][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1952.727779][T30181] gspca_stk1135: Sensor write failed [ 1952.733426][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1952.739851][T30181] gspca_stk1135: Sensor write failed [ 1952.745628][T30181] stk1135: probe of 1-1:0.0 failed with error -71 [ 1952.761432][T30181] usb 1-1: USB disconnect, device number 37 06:36:05 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:36:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x815}, 0x14}}, 0x0) 06:36:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0}, 0x0) 06:36:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000000)="90337198e04dd27746f8dbbfa4d95dfebca3045ddc6e33212cfce76f1a22798ff88330c6884febdf8bf3a5117798f73496830b81f9e41147cdb1562018c67f12f8949f53bbfec846655ad84625bbe54ac39514e92be19d7a9a81346603e8a6223475d24b9bcdd115c78a5fd401ea863305f5d5ede820909fd2cc561cfd7ddbc8fe18a9b697dc0567c677e9a483154535d89b536147c86a610982754c276205b538fc45f3c3", 0xa5}, {&(0x7f00000000c0)="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", 0xe1c}], 0x2, &(0x7f0000001340)=[{0x10, 0x0, 0x4}, {0x10}, {0x18, 0x0, 0x0, "a1"}, {0x10}], 0x48}, 0x0) 06:36:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000007440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2003, 0x0) 06:36:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) 06:36:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4, @loopback}}) 06:36:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x7, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @loopback}}}}) 06:36:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000000)=@qipcrtr, 0x80) 06:36:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local, 0x8}, 0x1c, 0x0}, 0x0) [ 1953.813090][ T6630] usb 1-1: new high-speed USB device number 38 using dummy_hcd 06:36:05 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000000)) 06:36:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) [ 1954.069250][ T6630] usb 1-1: Using ep0 maxpacket: 16 [ 1954.374014][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1954.383415][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.392592][ T6630] usb 1-1: Product: syz [ 1954.397105][ T6630] usb 1-1: Manufacturer: syz [ 1954.401823][ T6630] usb 1-1: SerialNumber: syz [ 1954.491686][ T6630] usb 1-1: config 0 descriptor?? [ 1954.551513][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1957.798864][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 1957.805606][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1957.812300][ T6630] gspca_stk1135: Sensor write failed [ 1957.818006][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1957.824607][ T6630] gspca_stk1135: Sensor write failed [ 1957.830066][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1957.838067][ T6630] gspca_stk1135: Sensor read failed [ 1957.843918][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1957.850326][ T6630] gspca_stk1135: Sensor read failed [ 1957.855958][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 1957.863624][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1957.870037][ T6630] gspca_stk1135: Sensor read failed [ 1957.875696][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1957.882105][ T6630] gspca_stk1135: Sensor read failed [ 1957.887576][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1957.894269][ T6630] gspca_stk1135: Sensor write failed [ 1957.899929][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1957.906603][ T6630] gspca_stk1135: Sensor write failed [ 1957.912042][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 1957.928213][ T6630] usb 1-1: USB disconnect, device number 38 06:36:10 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:36:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c, 0x0}, 0x0) 06:36:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r3+10000000}}, 0x0) 06:36:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local, 0x1c}, 0x1c, 0x0}, 0x0) 06:36:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @remote, 0xa}, 0x1c, &(0x7f0000002cc0)=[{&(0x7f0000000140)="bae1c3306d5002e46b37c77baeaa37772e3aebade5144abb39f565ad3045361288f934da8efb5c81fdc69d24ceb53c3c46888fa4252df9d27c18ee8a519acbe942f67a53f5dff49dcf4f7ee50065eff11af9aa070223", 0x56}, {&(0x7f0000001640)="b15cfced531b8593ffaf644ef9e1b3dcb5e227cefeffe679b17fa976770ccd0a43888d2eedaaf5bad407f9c72edf022e1ef036155776ad31be97cb", 0x3b}, {&(0x7f0000001bc0)="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", 0x4e8}], 0x3}, 0x0) 06:36:10 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000000)=@ethtool_dump={0x40}}) 06:36:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) 06:36:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r1, 0x501}, 0x14}}, 0x0) 06:36:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000000800)=[{{&(0x7f0000000040)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, 0x0}}], 0x1, 0x0) 06:36:10 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000000)=@ethtool_dump={0x40}}) [ 1958.964179][ T6423] usb 1-1: new high-speed USB device number 39 using dummy_hcd 06:36:10 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_ext={0x1c, 0x2, &(0x7f0000000040)=@raw=[@map_val], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:36:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @loopback}}}}) [ 1959.206812][ T6423] usb 1-1: Using ep0 maxpacket: 16 [ 1959.506506][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1959.515858][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.524380][ T6423] usb 1-1: Product: syz [ 1959.528672][ T6423] usb 1-1: Manufacturer: syz [ 1959.533551][ T6423] usb 1-1: SerialNumber: syz [ 1959.564343][ T6423] usb 1-1: config 0 descriptor?? [ 1959.625193][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1962.876083][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 1962.882585][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1962.889362][ T6423] gspca_stk1135: Sensor write failed [ 1962.895045][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1962.901468][ T6423] gspca_stk1135: Sensor write failed [ 1962.907364][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1962.914113][ T6423] gspca_stk1135: Sensor read failed [ 1962.919462][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1962.926050][ T6423] gspca_stk1135: Sensor read failed [ 1962.931322][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 1962.938321][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1962.944936][ T6423] gspca_stk1135: Sensor read failed [ 1962.950364][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1962.958837][ T6423] gspca_stk1135: Sensor read failed [ 1962.964799][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1962.971342][ T6423] gspca_stk1135: Sensor write failed [ 1962.976914][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 1962.983635][ T6423] gspca_stk1135: Sensor write failed [ 1962.989220][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 1963.001974][ T6423] usb 1-1: USB disconnect, device number 39 06:36:15 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:36:15 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002680)={0x10, r0, 0x1}, 0x14}}, 0x0) 06:36:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000740)={&(0x7f0000000140)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@tclass={{0x14}}], 0x18}, 0x0) 06:36:15 executing program 5: pselect6(0x40, &(0x7f0000000200), 0x0, &(0x7f0000000280)={0x8}, &(0x7f00000002c0)={0x0, 0x989680}, 0x0) 06:36:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:36:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x7}, 0x0) 06:36:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$unix(r0, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22023, 0x0) 06:36:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 06:36:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local, 0x6}, 0x1c, &(0x7f0000002cc0)=[{&(0x7f0000001600)="bae1c3306d6502e46b37c77baeaa37772e3aebade5144abb39f565ad3045361288f934de8e4c", 0x26}, {&(0x7f0000001640)="b15cfced531b8593ffaf644ef9e1b3dcb5e227cefeffe679b17fa976770ccd0a43888d2eedaaf5bad407f9c72edf022e1ef036155776ad31be97", 0x3a}, {&(0x7f0000001bc0)="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", 0x539}], 0x3}, 0x0) 06:36:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 06:36:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x2, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT, @L2TP_ATTR_RECV_SEQ={0x5}]}, 0x24}}, 0x0) [ 1964.053353][T30181] usb 1-1: new high-speed USB device number 40 using dummy_hcd 06:36:16 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x80012001, 0x0) [ 1964.293416][T30181] usb 1-1: Using ep0 maxpacket: 16 [ 1964.575203][T30181] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1964.584734][T30181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.593074][T30181] usb 1-1: Product: syz [ 1964.597352][T30181] usb 1-1: Manufacturer: syz [ 1964.602055][T30181] usb 1-1: SerialNumber: syz [ 1964.708668][T30181] usb 1-1: config 0 descriptor?? [ 1964.759215][T30181] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1968.023142][T30181] gspca_stk1135: reg_w 0x352 err -71 [ 1968.029640][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1968.036323][T30181] gspca_stk1135: Sensor write failed [ 1968.041790][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1968.048351][T30181] gspca_stk1135: Sensor write failed [ 1968.053950][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1968.060383][T30181] gspca_stk1135: Sensor read failed [ 1968.066016][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1968.072436][T30181] gspca_stk1135: Sensor read failed [ 1968.079691][T30181] gspca_stk1135: Detected sensor type unknown (0x0) [ 1968.087038][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1968.093752][T30181] gspca_stk1135: Sensor read failed [ 1968.099115][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1968.105788][T30181] gspca_stk1135: Sensor read failed [ 1968.111574][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1968.118150][T30181] gspca_stk1135: Sensor write failed [ 1968.123802][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1968.130202][T30181] gspca_stk1135: Sensor write failed [ 1968.135911][T30181] stk1135: probe of 1-1:0.0 failed with error -71 [ 1968.149641][T30181] usb 1-1: USB disconnect, device number 40 06:36:20 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:36:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0) 06:36:20 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001280)=ANY=[@ANYBLOB="10"], 0x1010}}, 0x0) 06:36:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x0, 0x40000162, 0x0, 0x0) 06:36:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:36:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) 06:36:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000100)=0x1e, 0x4) 06:36:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r1, 0x501, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}, @FOU_ATTR_IPPROTO={0x5}]}, 0x24}}, 0x0) 06:36:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/51, 0x33}], 0x1}}], 0x1, 0x0, 0x0) [ 1969.173334][ T6630] usb 1-1: new high-speed USB device number 41 using dummy_hcd 06:36:21 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x15, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x40) 06:36:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x18}, 0x0) [ 1969.416126][ T6630] usb 1-1: Using ep0 maxpacket: 16 06:36:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01fffffffffffff000000b"], 0x20}}, 0x0) [ 1969.744117][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1969.753677][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.761816][ T6630] usb 1-1: Product: syz [ 1969.766313][ T6630] usb 1-1: Manufacturer: syz [ 1969.771035][ T6630] usb 1-1: SerialNumber: syz [ 1969.906906][ T6630] usb 1-1: config 0 descriptor?? [ 1969.948790][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1973.253326][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 1973.259864][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1973.266654][ T6630] gspca_stk1135: Sensor write failed [ 1973.272154][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1973.278811][ T6630] gspca_stk1135: Sensor write failed [ 1973.284352][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1973.290841][ T6630] gspca_stk1135: Sensor read failed [ 1973.297349][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1973.304447][ T6630] gspca_stk1135: Sensor read failed [ 1973.309790][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 1973.316846][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1973.323396][ T6630] gspca_stk1135: Sensor read failed [ 1973.328716][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1973.335290][ T6630] gspca_stk1135: Sensor read failed [ 1973.340652][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1973.347373][ T6630] gspca_stk1135: Sensor write failed [ 1973.352775][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1973.359320][ T6630] gspca_stk1135: Sensor write failed [ 1973.364958][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 1973.381670][ T6630] usb 1-1: USB disconnect, device number 41 06:36:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, 0x0}}], 0x1, 0x0) 06:36:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, r4+10000000}}, 0x0) 06:36:25 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:36:25 executing program 3: pselect6(0x0, 0x0, &(0x7f0000003140), 0x0, &(0x7f0000003740), 0x0) 06:36:25 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000010c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001080)={&(0x7f0000001280)=ANY=[@ANYBLOB="101000006404"], 0x1010}}, 0x0) 06:36:25 executing program 5: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f000000efc0)=0xffffffffffffffff, 0x4) 06:36:26 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) 06:36:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0) 06:36:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x60) 06:36:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000740)={&(0x7f0000000140)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@generic]}}}, @tclass={{0x14}}], 0x38}, 0x8000) [ 1974.443587][T30181] usb 1-1: new high-speed USB device number 42 using dummy_hcd 06:36:26 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg(r0, &(0x7f0000002a00)={0x0, 0x0, 0x0}, 0x0) 06:36:26 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x6, 0x18, {0x0, @bearer=@udp='udp:syz1\x00'}}}}, 0x30}}, 0x0) 06:36:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) [ 1974.683166][T30181] usb 1-1: Using ep0 maxpacket: 16 06:36:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}}, 0x0) [ 1975.007284][T30181] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1975.016855][T30181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.025282][T30181] usb 1-1: Product: syz [ 1975.029596][T30181] usb 1-1: Manufacturer: syz [ 1975.034477][T30181] usb 1-1: SerialNumber: syz [ 1975.174632][T30181] usb 1-1: config 0 descriptor?? [ 1975.220373][T30181] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1978.489981][T30181] gspca_stk1135: reg_w 0x352 err -71 [ 1978.496651][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1978.503355][T30181] gspca_stk1135: Sensor write failed [ 1978.508830][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1978.515818][T30181] gspca_stk1135: Sensor write failed [ 1978.523262][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1978.529667][T30181] gspca_stk1135: Sensor read failed [ 1978.535837][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1978.542247][T30181] gspca_stk1135: Sensor read failed [ 1978.547658][T30181] gspca_stk1135: Detected sensor type unknown (0x0) [ 1978.554664][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1978.561038][T30181] gspca_stk1135: Sensor read failed [ 1978.566645][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1978.573212][T30181] gspca_stk1135: Sensor read failed [ 1978.578566][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1978.585374][T30181] gspca_stk1135: Sensor write failed [ 1978.590849][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 1978.597506][T30181] gspca_stk1135: Sensor write failed [ 1978.603221][T30181] stk1135: probe of 1-1:0.0 failed with error -71 [ 1978.615814][T30181] usb 1-1: USB disconnect, device number 42 06:36:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x78}}, 0x0) 06:36:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r1, 0x501, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}]}, 0x1c}}, 0x0) 06:36:30 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:36:30 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f00000000c0)=0x7, 0x4) 06:36:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}]}, 0x2c}}, 0x0) 06:36:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}}, 0x0) 06:36:31 executing program 3: pselect6(0x40, &(0x7f0000002f40), &(0x7f0000003140)={0x1f}, 0x0, &(0x7f0000003740), &(0x7f00000037c0)={&(0x7f0000003780)={[0x10a]}, 0x8}) 06:36:31 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 06:36:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 06:36:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@mcast1, 0x0, r2}) [ 1979.733119][ T6630] usb 1-1: new high-speed USB device number 43 using dummy_hcd 06:36:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000700)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 06:36:31 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}, {0x6, 0x18, {0x0, @bearer=@udp='udp:syz1\x00'}}}}, 0x30}}, 0x0) 06:36:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000700)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x40) 06:36:31 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time_for_children\x00') [ 1979.993269][ T6630] usb 1-1: Using ep0 maxpacket: 16 [ 1980.284287][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1980.293714][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1980.301931][ T6630] usb 1-1: Product: syz [ 1980.306561][ T6630] usb 1-1: Manufacturer: syz [ 1980.311288][ T6630] usb 1-1: SerialNumber: syz [ 1980.472057][ T6630] usb 1-1: config 0 descriptor?? [ 1980.528912][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1983.793667][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 1983.800295][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1983.807090][ T6630] gspca_stk1135: Sensor write failed [ 1983.812663][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1983.819235][ T6630] gspca_stk1135: Sensor write failed [ 1983.824782][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1983.831273][ T6630] gspca_stk1135: Sensor read failed [ 1983.836843][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1983.844414][ T6630] gspca_stk1135: Sensor read failed [ 1983.849762][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 1983.858825][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1983.865520][ T6630] gspca_stk1135: Sensor read failed [ 1983.870834][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1983.877394][ T6630] gspca_stk1135: Sensor read failed [ 1983.882702][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1983.889228][ T6630] gspca_stk1135: Sensor write failed [ 1983.894965][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1983.901500][ T6630] gspca_stk1135: Sensor write failed [ 1983.907178][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 1983.921903][ T6630] usb 1-1: USB disconnect, device number 43 06:36:36 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:36:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local}, 0x1c, &(0x7f0000002cc0)=[{&(0x7f0000001600)="bae1c3306d6502e46b37c77baeaa37772e3aebade5144abb39f565ad3045361288f934de8e", 0x25}, {&(0x7f0000001640)="b15cfced531b8593ffaf644ef9e1b3dcb5e227cefeffe679b17fa976770ccd0a43888d2eedaaf5bad407f9c72edf022e1ef036155776ad31be97cb", 0x3b}, {&(0x7f0000001bc0)="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", 0x9e0}, {&(0x7f0000001680)="19227a645f25b69acd85fd5c4b4a28e974ac8368bd609ee6a6b3a2a8a3cf043bf5325efb26f7b6037831ccb4ff0a4d5a4fad7991ae4709ee97ec2cde9c7e9cab327c30b311ba5b992e9780195f1995b530255b3b20ae858425ade95595dd60aa6fcb790869e9cb0a7c64ddba119036ac846dcc4b0101a4e22a41859a87427dfe09eb53044092c72afbe2e9c761f61289d7ea08d40f4533957986ac5c44f0a1c73baad657", 0xa4}, {&(0x7f00000004c0)="f2", 0x7fffe4d9}, {&(0x7f0000001780)="e7a9646d07ac852551635dfb7eddc059966a41ea0c6af7258c63f938b61d1edb7ec85088dfbbb9f4bc9d9ea975e0a153eafd35805a204fa68793cdf62c8d1aed8eb1", 0x42}, {&(0x7f0000001840)="d1", 0x1}, {&(0x7f0000002c40)="df", 0x1}], 0x8}, 0x0) 06:36:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000040)=@ethtool_regs}) 06:36:36 executing program 2: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x1c, 0x0, 0x0, 0x0, 0x0, {0x0, 0xf0ffff, 0x600}, [@typed={0x5, 0x0, 0x0, 0x0, @binary="01"}]}, 0x1c}}, 0x0) 06:36:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x100, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 06:36:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}}, 0x0) [ 1984.417453][ T3121] ieee802154 phy0 wpan0: encryption failed: -22 [ 1984.424224][ T3121] ieee802154 phy1 wpan1: encryption failed: -22 06:36:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_tos_int={{0x14}}], 0x18}}], 0x1, 0x0) 06:36:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2}}) 06:36:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000007b40)) 06:36:36 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xef, &(0x7f00000000c0)=""/239, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1985.053164][ T6630] usb 1-1: new high-speed USB device number 44 using dummy_hcd 06:36:37 executing program 1: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="5bd4031a92499f8a00e5cf"], 0x20}}, 0x0) 06:36:37 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002680)={0x20, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}}, 0x0) [ 1985.293285][ T6630] usb 1-1: Using ep0 maxpacket: 16 [ 1985.573851][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1985.583427][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.591869][ T6630] usb 1-1: Product: syz [ 1985.596367][ T6630] usb 1-1: Manufacturer: syz [ 1985.601088][ T6630] usb 1-1: SerialNumber: syz [ 1985.660865][ T6630] usb 1-1: config 0 descriptor?? [ 1985.712398][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1988.963210][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 1988.969825][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1988.976468][ T6630] gspca_stk1135: Sensor write failed [ 1988.981961][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1988.988596][ T6630] gspca_stk1135: Sensor write failed [ 1988.994260][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1989.000754][ T6630] gspca_stk1135: Sensor read failed [ 1989.006273][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1989.012769][ T6630] gspca_stk1135: Sensor read failed [ 1989.018536][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 1989.025707][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1989.032385][ T6630] gspca_stk1135: Sensor read failed [ 1989.037885][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1989.044625][ T6630] gspca_stk1135: Sensor read failed [ 1989.050162][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1989.056692][ T6630] gspca_stk1135: Sensor write failed [ 1989.062183][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1989.068746][ T6630] gspca_stk1135: Sensor write failed [ 1989.074599][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 1989.090633][ T6630] usb 1-1: USB disconnect, device number 44 06:36:41 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:36:41 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0, 0x1010}}, 0x0) 06:36:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2}}) 06:36:41 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local}, 0x1c, &(0x7f0000002cc0)=[{&(0x7f0000001640)="b15cfc", 0x7ffff000}], 0x1}, 0x0) 06:36:41 executing program 1: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x68, r0, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) 06:36:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)) timer_settime(0x0, 0x0, 0x0, 0x0) 06:36:41 executing program 1: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local, 0x6}, 0x1c, 0x0}, 0x0) 06:36:41 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000010c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001080)={&(0x7f0000001280)=ANY=[], 0x1010}}, 0x0) 06:36:41 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f00000024c0)=0x7000000, 0x4) 06:36:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0x33fe0}}, 0x0) 06:36:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$unix(r0, 0x0, 0x0, 0x22023, 0x0) [ 1990.073242][ T6630] usb 1-1: new high-speed USB device number 45 using dummy_hcd 06:36:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000140)=0x7fffffff, 0x4) [ 1990.313146][ T6630] usb 1-1: Using ep0 maxpacket: 16 [ 1990.594321][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1990.604640][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1990.612779][ T6630] usb 1-1: Product: syz [ 1990.617514][ T6630] usb 1-1: Manufacturer: syz [ 1990.622230][ T6630] usb 1-1: SerialNumber: syz [ 1990.695794][ T6630] usb 1-1: config 0 descriptor?? [ 1990.742770][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1994.023231][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 1994.029736][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1994.036498][ T6630] gspca_stk1135: Sensor write failed [ 1994.041960][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1994.048817][ T6630] gspca_stk1135: Sensor write failed [ 1994.054700][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1994.061115][ T6630] gspca_stk1135: Sensor read failed [ 1994.066789][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1994.073449][ T6630] gspca_stk1135: Sensor read failed [ 1994.078732][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 1994.086965][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1994.093755][ T6630] gspca_stk1135: Sensor read failed [ 1994.099297][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1994.105936][ T6630] gspca_stk1135: Sensor read failed [ 1994.111241][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1994.117815][ T6630] gspca_stk1135: Sensor write failed [ 1994.123707][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1994.130122][ T6630] gspca_stk1135: Sensor write failed [ 1994.135865][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 1994.151563][ T6630] usb 1-1: USB disconnect, device number 45 06:36:46 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:36:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000140)="ba4b62e1c3306d6502e46b37dff8aeaa37772e3aebade5144abbf0f565ad3045361288f934de3d5060de", 0x2a}, {&(0x7f0000001640)="b15cfced531b8593ffaf644ef9e1b3dcb5e227cefeffe679b17fa976770ccd0a43888d2eedaaf5bad407f9c72edf022e1ef036155776ad31be97", 0x3a}, {&(0x7f0000000500)="afb2b30be048a6f8ff3c73f472366e7cf1020b82fe5666c6b287d17958cb6d8b5b49e6f39728f8d2d617e8b47b0345d716a41471fe41648106014d4dedf70deeb5ed89f3866a9ffe9c8d179a0e164c1e9b89dda3232bc911b4c43d4208dd7409e94f4b7658ea484f874ebb6823b6084d25d4a4b568ba83303b253d91cee94e22fa603e17de7c9d2efc9308ea9cee5516615526a5fc391597c79dcb1f88926b969578af87ff5de146c55c3af861ee61411644f488b4d3fa75b3e2a8ed8ec966d47b58919b8eb77153f388e6040169b78b7d4cde0363f995419430de67967c858aae533c33c7e2a38a521d8b1c09f843b24d1dd5d80a413b6c0bdc6d49690c36bbdd3953cbc00f9ac0dba00647c439af45f442932cc8a3e617cc8210844d498a9ea040cf3297a3caac1ea973c905a55d25a041250225443b4679f564822ebd9c842f3d26a2ee526da0958e0af491dfe594df186a41351a72a9356d11d1eebb77af4c178a7690ecbc6c5b1110c6f7242e5611e591e17a640310975dee0543c407b09000dc8ef91cb2eb59e2991779a38819ad994f7075152e3055ebe62d2ea9a9c29e916090dc83dde512550177c3d62e73f451d01ecb4d09c5c8db23a7f153520a6c391ff6a66d746cbf00a8f1c9a308b76009cdea5eb11c68507c7732db5f7ca6f9b85163ab5cdf6018420ad16ff6b5d646058787396008ca4534e0bb8a6efa281d85e55187b579b39b46c81a2e7e57f2f4d39f00fc0645ad49d4d5e4d611e7aa81a69e8f191cbf6cabcb3274d2462b3e7b5622f70096a3b125d0281d3f7db22a2fe4c9b23012ee30014dfc5d4a5d9c9fb24d2d5db745c81bd25425d5c89d2f954692234a8adc1272e6a86284075d3869b1589989ccf6b26ef42d8a689264b0899ff7d928097336d9277f126a09889c1d55a571dbcf5e9eb9eda730870f87923e07378cd6da1414cbbe6d85f4447ac8454c7b3484bca59591a94f970a5437e018c33fc82909139c90138344475efaa078df11ef88b02a9eb092fd9177da18c503179e21ab66fce018fc586713213075defb1f5e4d9cc0f4a6fde3629363da8d4b4ef68c86e51ba6ce277f2d41a9ebb0116d110d9925812a2d95443356e39553d24a866e2db76d5a39352fd8d64e8e9c65f760aa0288af5d549c8933c8f158d1da91b789e9d9a420f6ceb0ed3115832f004805bdd4f46c7ffa0d6e96666981187ad90619ee6c5206a4bcd89bea0f77e324d7dabfecee71f3def4f62cafce92fbd8a9818a312d97a3d11767f6900eef8a50cbc5fafe6c45baafcf8b014127a60dcb5b7c485f2d3cfe3348f89bc166f51b71567179c2f04cbe4938d03f74afbc2a145cd7f2c5707812f1a2b9158f2e828ef1fe5420438d0c2333ed0189870c66ab3178bb9fe8a46316f7922c150a1a6331739c660e96c1952d3504e28595bdcaf3136f5cb03bd079a606fbff5a2569924e819c1f1558d3eee06ea94a271e95fcf61c4a8c08b4079aeeea2d3e35fcfaec4cb3dc1770cddfd4d6aab6ad62b435cb34951e48c3555f680f7597a65ba2bfa72f18df193fc34ae26f652aaf6c77a00fac4c852d5644896d1f1b40d589c5e5c1730d4d780615f4b2ff4f7891bd72fcf72264ca756ad808addd9eaa266bfff6f9d0762ecc788bc7d148c8a23f85360dc11aba3595782a115b76bbfdcce94b9fc446bf1988d900a5f557d1886dce645e968a62047abb039f02bea5f29b5546d1e825dc6cf660bebb23e6071e2d22a7f3df0c2ee9d87c2ab6c4e64bb3006c920fa88300d7e9966e46421d049fc2b32591aca238aa293ce8abd660eba28ad7ca10850f3f8fa4e16de1660b50559309af5d4aab11c164481e6c707ef3f2ee9185183574d52d3915b8dfa54a80e7beb51014c0f06352fdc3d7cabfedd302", 0x549}], 0x3}, 0x0) 06:36:46 executing program 1: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)="1f", 0x1) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 06:36:46 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local, 0x12}, 0x1c, 0x0}, 0x0) 06:36:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local, 0x7}, 0x1c, 0x0}, 0x0) 06:36:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)) timer_settime(0x0, 0x0, 0x0, 0x0) 06:36:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x20}}, 0x0) 06:36:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)={0x18, r1, 0x1, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) 06:36:46 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @remote}}) 06:36:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="17"], 0x22c}}, 0x0) [ 1995.120530][ T6630] usb 1-1: new high-speed USB device number 46 using dummy_hcd 06:36:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/51, 0x33}, {&(0x7f00000000c0)=""/87, 0x57}], 0x2}}], 0x1, 0x0, 0x0) [ 1995.383299][ T6630] usb 1-1: Using ep0 maxpacket: 16 06:36:47 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x1000, &(0x7f0000000500)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1995.723592][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 1995.733022][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.741152][ T6630] usb 1-1: Product: syz [ 1995.745831][ T6630] usb 1-1: Manufacturer: syz [ 1995.750556][ T6630] usb 1-1: SerialNumber: syz [ 1995.828980][ T6630] usb 1-1: config 0 descriptor?? [ 1995.879108][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1999.143327][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 1999.149940][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1999.156786][ T6630] gspca_stk1135: Sensor write failed [ 1999.162239][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1999.169183][ T6630] gspca_stk1135: Sensor write failed [ 1999.174815][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1999.181225][ T6630] gspca_stk1135: Sensor read failed [ 1999.186854][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1999.193623][ T6630] gspca_stk1135: Sensor read failed [ 1999.198885][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 1999.207549][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1999.214428][ T6630] gspca_stk1135: Sensor read failed [ 1999.220216][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1999.226787][ T6630] gspca_stk1135: Sensor read failed [ 1999.232195][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1999.238749][ T6630] gspca_stk1135: Sensor write failed [ 1999.244460][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 1999.251135][ T6630] gspca_stk1135: Sensor write failed [ 1999.256850][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 1999.271126][ T6630] usb 1-1: USB disconnect, device number 46 06:36:51 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:36:51 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'tunl0\x00', 0x0}) 06:36:51 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff}) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 06:36:51 executing program 5: bind$qrtr(0xffffffffffffffff, 0x0, 0x0) 06:36:51 executing program 1: socket(0x6d, 0x0, 0x0) 06:36:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)) timer_settime(0x0, 0x0, 0x0, 0x0) 06:36:51 executing program 3: pipe(&(0x7f0000000f40)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000100)) 06:36:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002a80)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x1, 0x0) 06:36:52 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "68f979", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @mcast1}}}}, 0x0) 06:36:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) [ 2000.193237][ T6630] usb 1-1: new high-speed USB device number 47 using dummy_hcd 06:36:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) 06:36:52 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xef, &(0x7f00000000c0)=""/239, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2000.433718][ T6630] usb 1-1: Using ep0 maxpacket: 16 [ 2000.716800][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 2000.726277][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.734874][ T6630] usb 1-1: Product: syz [ 2000.739897][ T6630] usb 1-1: Manufacturer: syz [ 2000.744895][ T6630] usb 1-1: SerialNumber: syz [ 2000.802026][ T6630] usb 1-1: config 0 descriptor?? [ 2000.848904][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2004.123491][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 2004.130000][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2004.136854][ T6630] gspca_stk1135: Sensor write failed [ 2004.142329][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2004.148892][ T6630] gspca_stk1135: Sensor write failed [ 2004.154481][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2004.160896][ T6630] gspca_stk1135: Sensor read failed [ 2004.166995][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2004.173751][ T6630] gspca_stk1135: Sensor read failed [ 2004.179112][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 2004.186171][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2004.192673][ T6630] gspca_stk1135: Sensor read failed [ 2004.198251][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2004.205295][ T6630] gspca_stk1135: Sensor read failed [ 2004.210667][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2004.217513][ T6630] gspca_stk1135: Sensor write failed [ 2004.224129][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2004.230591][ T6630] gspca_stk1135: Sensor write failed [ 2004.236779][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 2004.250846][ T6630] usb 1-1: USB disconnect, device number 47 06:36:56 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f00000024c0)=0x7000000, 0x4) 06:36:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0), 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000340)='.', 0x1, 0x95, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @sack_perm, @sack_perm, @sack_perm, @sack_perm], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) 06:36:56 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:36:56 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000300)={0x9}, 0x0, &(0x7f0000000380), 0x0, 0x0) 06:36:56 executing program 2: pselect6(0x40, &(0x7f0000002f40), &(0x7f0000003140)={0x1f}, 0x0, 0x0, 0x0) 06:36:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x0}}, 0x0) [ 2004.817740][T13969] TCP: TCP_TX_DELAY enabled 06:36:56 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @remote}, 0xc) 06:36:56 executing program 1: syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 2005.263709][T30181] usb 1-1: new high-speed USB device number 48 using dummy_hcd 06:36:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@setneightbl={0x28, 0x43, 0x1, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}, @NDTA_PARMS={0xc, 0x6, 0x0, 0x1, [@NDTPA_APP_PROBES={0x8}]}]}, 0x28}}, 0x0) 06:36:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[], 0x22c}}, 0x0) [ 2005.513168][T30181] usb 1-1: Using ep0 maxpacket: 16 06:36:57 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x989680}) 06:36:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) 06:36:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)={0x14, r1, 0x1, 0x0, 0x0, {0x15}}, 0x14}}, 0x0) [ 2005.834110][T30181] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 2005.843770][T30181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.852018][T30181] usb 1-1: Product: syz [ 2005.856691][T30181] usb 1-1: Manufacturer: syz [ 2005.862780][T30181] usb 1-1: SerialNumber: syz 06:36:57 executing program 5: r0 = socket(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @dev}}}}) [ 2006.033255][T30181] usb 1-1: config 0 descriptor?? [ 2006.079796][T30181] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2009.353380][T30181] gspca_stk1135: reg_w 0x352 err -71 [ 2009.359994][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2009.366881][T30181] gspca_stk1135: Sensor write failed [ 2009.372373][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2009.379337][T30181] gspca_stk1135: Sensor write failed [ 2009.385030][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2009.391449][T30181] gspca_stk1135: Sensor read failed [ 2009.397080][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2009.403658][T30181] gspca_stk1135: Sensor read failed [ 2009.408924][T30181] gspca_stk1135: Detected sensor type unknown (0x0) [ 2009.416034][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2009.422470][T30181] gspca_stk1135: Sensor read failed [ 2009.427990][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2009.434628][T30181] gspca_stk1135: Sensor read failed [ 2009.439944][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2009.448292][T30181] gspca_stk1135: Sensor write failed [ 2009.454515][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2009.460950][T30181] gspca_stk1135: Sensor write failed [ 2009.466632][T30181] stk1135: probe of 1-1:0.0 failed with error -71 [ 2009.479227][T30181] usb 1-1: USB disconnect, device number 48 06:37:01 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:37:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x14, 0x0, 0x4}, 0x14}}, 0x0) recvmmsg$unix(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 06:37:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x14, 0x0, 0x4}, 0x14}}, 0x0) recvmmsg$unix(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001c00)) 06:37:01 executing program 1: socketpair$unix(0xf, 0x0, 0x0, &(0x7f0000000000)) 06:37:01 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000200)={0x0, 0x47, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x18, {0x48, @media='udp\x00'}}}}, 0x30}}, 0x0) 06:37:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x0}}, 0x0) 06:37:02 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000002c0)='GPL\x00', 0x5, 0x89, &(0x7f0000000400)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:37:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 06:37:02 executing program 2: pselect6(0x40, &(0x7f0000002f40), &(0x7f0000003140), &(0x7f0000003700)={0x3}, &(0x7f0000003740), &(0x7f00000037c0)={&(0x7f0000003780)={[0x10a]}, 0x8}) 06:37:02 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff}) read$alg(r0, 0x0, 0x0) [ 2010.434007][T30181] usb 1-1: new high-speed USB device number 49 using dummy_hcd 06:37:02 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000300)={0x9}, 0x0, 0x0, 0x0, 0x0) 06:37:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010020000000000000000a00000018000480130001002208acb1907e68ed7481d234cafb16"], 0x2c}}, 0x0) [ 2010.683262][T30181] usb 1-1: Using ep0 maxpacket: 16 [ 2010.964191][T30181] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 2010.973737][T30181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.983459][T30181] usb 1-1: Product: syz [ 2010.987753][T30181] usb 1-1: Manufacturer: syz [ 2010.992557][T30181] usb 1-1: SerialNumber: syz [ 2011.002564][T30181] usb 1-1: config 0 descriptor?? [ 2011.050103][T30181] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2014.306068][T30181] gspca_stk1135: reg_w 0x352 err -71 [ 2014.312574][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2014.319394][T30181] gspca_stk1135: Sensor write failed [ 2014.325286][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2014.331799][T30181] gspca_stk1135: Sensor write failed [ 2014.337660][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2014.344313][T30181] gspca_stk1135: Sensor read failed [ 2014.349693][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2014.356309][T30181] gspca_stk1135: Sensor read failed [ 2014.363720][T30181] gspca_stk1135: Detected sensor type unknown (0x0) [ 2014.370566][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2014.377800][T30181] gspca_stk1135: Sensor read failed [ 2014.383334][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2014.389852][T30181] gspca_stk1135: Sensor read failed [ 2014.395516][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2014.401915][T30181] gspca_stk1135: Sensor write failed [ 2014.407659][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2014.414299][T30181] gspca_stk1135: Sensor write failed [ 2014.419880][T30181] stk1135: probe of 1-1:0.0 failed with error -71 [ 2014.432808][T30181] usb 1-1: USB disconnect, device number 49 06:37:06 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:37:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}], 0x18}}], 0x1, 0x0) 06:37:06 executing program 3: pselect6(0x40, &(0x7f0000002f40), 0x0, &(0x7f0000003700)={0x3}, &(0x7f0000003740), &(0x7f00000037c0)={&(0x7f0000003780)={[0x10a]}, 0x8}) 06:37:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[], 0x2c}}, 0x0) 06:37:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010020000000000000000800000018"], 0x2c}}, 0x0) 06:37:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x0}}, 0x0) 06:37:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}}, 0x0) 06:37:07 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 06:37:07 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/user\x00') 06:37:07 executing program 2: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x0, {{}, {0x0, 0x4101}, {0x6, 0x18, {0x0, @bearer=@udp='udp:syz1\x00'}}}}, 0x30}}, 0x0) 06:37:07 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f00000002c0), 0x10) [ 2015.493070][ T6630] usb 1-1: new high-speed USB device number 50 using dummy_hcd 06:37:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="04"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x30}}, 0x0) clock_gettime(0x0, &(0x7f0000000b80)) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0, 0x0) [ 2015.746729][ T6630] usb 1-1: Using ep0 maxpacket: 16 [ 2016.056977][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 2016.066430][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.074864][ T6630] usb 1-1: Product: syz [ 2016.079163][ T6630] usb 1-1: Manufacturer: syz [ 2016.084091][ T6630] usb 1-1: SerialNumber: syz [ 2016.138209][ T6630] usb 1-1: config 0 descriptor?? [ 2016.189688][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2019.453175][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 2019.459765][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2019.466698][ T6630] gspca_stk1135: Sensor write failed [ 2019.472473][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2019.480350][ T6630] gspca_stk1135: Sensor write failed [ 2019.486195][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2019.492604][ T6630] gspca_stk1135: Sensor read failed [ 2019.498136][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2019.505264][ T6630] gspca_stk1135: Sensor read failed [ 2019.510609][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 2019.517663][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2019.524248][ T6630] gspca_stk1135: Sensor read failed [ 2019.529555][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2019.536113][ T6630] gspca_stk1135: Sensor read failed [ 2019.541420][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2019.548032][ T6630] gspca_stk1135: Sensor write failed [ 2019.553753][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2019.560241][ T6630] gspca_stk1135: Sensor write failed [ 2019.566021][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 2019.583082][ T6630] usb 1-1: USB disconnect, device number 50 06:37:11 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:37:11 executing program 2: clock_gettime(0x2, &(0x7f00000005c0)) 06:37:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x700000000000000}, 0x0) 06:37:11 executing program 3: r0 = socket(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 06:37:11 executing program 5: socket$inet6(0xa, 0xe, 0x0) 06:37:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x5, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:37:12 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003b00)='./cgroup/syz0\x00', 0x200002, 0x0) 06:37:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, 0x0, &(0x7f00000000c0)) 06:37:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000000)="90337198e04dd27746f8dbbfa4d95d", 0xf}, {&(0x7f00000000c0)='q', 0x1}], 0x2}, 0x0) 06:37:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x8, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000200), r0) 06:37:12 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x0, {{}, {0x0, 0x400b}, {0x6, 0x18, {0x0, @bearer=@udp='udp:syz1\x00'}}}}, 0x30}}, 0x0) 06:37:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x0, 0x0, @local}, 0x6, &(0x7f0000002cc0)=[{&(0x7f0000001600)="ba", 0x1}, {&(0x7f0000001640)="b15cfc", 0x3}, {&(0x7f00000004c0)="f2", 0x1}, {&(0x7f0000001840)="d1", 0x1}, {&(0x7f0000002c40)="df", 0x1}], 0x5}, 0x0) [ 2020.624887][T30181] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2020.883277][T30181] usb 1-1: Using ep0 maxpacket: 16 [ 2021.174019][T30181] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 2021.183922][T30181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2021.192232][T30181] usb 1-1: Product: syz [ 2021.197028][T30181] usb 1-1: Manufacturer: syz [ 2021.201734][T30181] usb 1-1: SerialNumber: syz [ 2021.241416][T30181] usb 1-1: config 0 descriptor?? [ 2021.299691][T30181] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2024.546115][T30181] gspca_stk1135: reg_w 0x352 err -71 [ 2024.552645][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2024.559305][T30181] gspca_stk1135: Sensor write failed [ 2024.564990][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2024.571404][T30181] gspca_stk1135: Sensor write failed [ 2024.577135][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2024.583672][T30181] gspca_stk1135: Sensor read failed [ 2024.589042][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2024.595631][T30181] gspca_stk1135: Sensor read failed [ 2024.602777][T30181] gspca_stk1135: Detected sensor type unknown (0x0) [ 2024.610149][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2024.616710][T30181] gspca_stk1135: Sensor read failed [ 2024.622168][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2024.628823][T30181] gspca_stk1135: Sensor read failed [ 2024.634324][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2024.640754][T30181] gspca_stk1135: Sensor write failed [ 2024.646372][T30181] gspca_stk1135: serial bus timeout: status=0x00 [ 2024.652805][T30181] gspca_stk1135: Sensor write failed [ 2024.658657][T30181] stk1135: probe of 1-1:0.0 failed with error -71 [ 2024.671770][T30181] usb 1-1: USB disconnect, device number 51 06:37:17 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:37:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000001600)="ba", 0x1}, {&(0x7f0000000180)="b15c975343c89c4d62872a4edc", 0xffeb}, {&(0x7f00000004c0)="f2", 0x1}, {&(0x7f0000000080)="d9b992823131e1e9b57f2fe7d493e86d9af0afe6152d929142b9adbb0acc20906ddea0caa12401d392c9955b691ee4d799f2ffebe2061551588d1fe3cf43d67eef4445760346a1dd04003cc00f83ac95e6d99cd50387ffc17f12bf683a3eeb2b1d76d08ddf48312c7acfcaf56b648fc38bde8dee2283d7f3d41bfa03e4e513a02f2c63212fe22bb8e2b9d8e6bbb5f46c1730e258a68ffddeb02fd2a8f427edd8a34bf74924bc822cad2ff3f7c0a6442df65286d4a88a8570729e10bb14dd2e584b767858", 0xc4}, {&(0x7f0000002c40)="df", 0x1}, {&(0x7f0000000340)="1a8a4e44fdb8c1de48739676aa15578aea39d83b4fdc70dc850f83901dbca132fd557f4ffc969bf94aab9e511396b2420a67260c15f321b1c00293ad56ba1f58a4e50b04cd03c1c76bb7024d93a1441ca65ce41139d07a675963a5fd74b333d30d387e632ef89f20f88e5ff5c202ccb7923007181b0367767e1547662f6957e4ca34531e8bd43aae1944f4b1d4f48dd206dd2dc7f1af7aa485b5dabfa88cea2c8f1b450b2b715c9a2670082be02ccdbe2f8b31e50a681406960879d04e9d4e133a1d75f5e96d813654a0c231fe8d9b86a8e96b0000000000", 0xd8}], 0x6}, 0x0) 06:37:17 executing program 3: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x511500d385ecb271}, 0x14}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) 06:37:17 executing program 5: pipe(&(0x7f0000000400)={0xffffffffffffffff}) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, 0x0) 06:37:17 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, 0x0, 0x0, 0x2141, 0x0, 0x0) 06:37:17 executing program 1: r0 = socket(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @dev}}}}) 06:37:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}, 0x0) 06:37:17 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad9c2c7c6faf6e66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:37:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:37:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@setneightbl={0x14, 0x43, 0x1}, 0x14}}, 0x0) 06:37:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000000c0)=0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) [ 2025.773412][ T6630] usb 1-1: new high-speed USB device number 52 using dummy_hcd 06:37:17 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x453, 0x0, 0x0, 0x0, "a5"}, 0x14}}, 0x0) [ 2026.013378][ T6630] usb 1-1: Using ep0 maxpacket: 16 [ 2026.189693][ T35] audit: type=1107 audit(1632033438.132:92): pid=14184 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='¥' [ 2026.304408][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 2026.313858][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.322167][ T6630] usb 1-1: Product: syz [ 2026.326837][ T6630] usb 1-1: Manufacturer: syz [ 2026.331654][ T6630] usb 1-1: SerialNumber: syz [ 2026.382395][ T6630] usb 1-1: config 0 descriptor?? [ 2026.431647][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2029.725932][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 2029.732425][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2029.739089][ T6630] gspca_stk1135: Sensor write failed [ 2029.744780][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2029.751194][ T6630] gspca_stk1135: Sensor write failed [ 2029.756787][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2029.763475][ T6630] gspca_stk1135: Sensor read failed [ 2029.768827][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2029.775507][ T6630] gspca_stk1135: Sensor read failed [ 2029.780776][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 2029.787818][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2029.794443][ T6630] gspca_stk1135: Sensor read failed [ 2029.799864][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2029.806569][ T6630] gspca_stk1135: Sensor read failed [ 2029.812003][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2029.818583][ T6630] gspca_stk1135: Sensor write failed [ 2029.825202][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2029.831624][ T6630] gspca_stk1135: Sensor write failed [ 2029.837478][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 2029.851617][ T6630] usb 1-1: USB disconnect, device number 52 06:37:22 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 06:37:22 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, @private1, @remote}}) 06:37:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:37:22 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003b00)='./cgroup/syz0\x00', 0x200002, 0x0) 06:37:22 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xef, &(0x7f00000000c0)=""/239, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:37:22 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000200)={@mcast1}) 06:37:22 executing program 2: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x0, {{}, {0x0, 0x5}, {0x6, 0x18, {0x0, @bearer=@udp='udp:syz1\x00'}}}}, 0x30}}, 0x0) 06:37:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 06:37:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002800), 0x10, &(0x7f0000002d80)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x2, 0x0) 06:37:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000002c0)=ANY=[], 0x78) 06:37:22 executing program 5: pselect6(0x40, &(0x7f0000002f40), 0x0, 0x0, 0x0, 0x0) [ 2030.983223][ T6423] usb 1-1: new high-speed USB device number 53 using dummy_hcd 06:37:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002d80)={&(0x7f00000015c0)={0xa, 0x4e23, 0x0, @local, 0x45}, 0x1c, 0x0}, 0x0) [ 2031.233795][ T6423] usb 1-1: Using ep0 maxpacket: 16 [ 2031.557013][ T6423] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 2031.567733][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2031.576626][ T6423] usb 1-1: Product: syz [ 2031.580910][ T6423] usb 1-1: Manufacturer: syz [ 2031.585744][ T6423] usb 1-1: SerialNumber: syz [ 2031.658477][ T6423] usb 1-1: config 0 descriptor?? [ 2031.709142][ T6423] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2034.983284][ T6423] gspca_stk1135: reg_w 0x352 err -71 [ 2034.989870][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 2034.996853][ T6423] gspca_stk1135: Sensor write failed [ 2035.002392][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 2035.008955][ T6423] gspca_stk1135: Sensor write failed [ 2035.014512][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 2035.020928][ T6423] gspca_stk1135: Sensor read failed [ 2035.026430][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 2035.033155][ T6423] gspca_stk1135: Sensor read failed [ 2035.038422][ T6423] gspca_stk1135: Detected sensor type unknown (0x0) [ 2035.046612][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 2035.053726][ T6423] gspca_stk1135: Sensor read failed [ 2035.059035][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 2035.065666][ T6423] gspca_stk1135: Sensor read failed [ 2035.071119][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 2035.077715][ T6423] gspca_stk1135: Sensor write failed [ 2035.083339][ T6423] gspca_stk1135: serial bus timeout: status=0x00 [ 2035.089851][ T6423] gspca_stk1135: Sensor write failed [ 2035.095562][ T6423] stk1135: probe of 1-1:0.0 failed with error -71 [ 2035.110228][ T6423] usb 1-1: USB disconnect, device number 53 06:37:27 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 06:37:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x20}}, 0x0) 06:37:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x700}, 0x0) 06:37:27 executing program 1: syz_genetlink_get_family_id$l2tp(0xffffffffffffffff, 0xffffffffffffffff) 06:37:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x20}}, 0x0) 06:37:27 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0xfffffffffffffffe, 0x1) write$nbd(r0, &(0x7f0000000240)={0x67446698, 0x0, 0x0, 0x0, 0x0, "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"}, 0x1001) [ 2035.659775][T14256] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2035.715216][T14261] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 06:37:27 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x22, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{}]}, 0x10) 06:37:27 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x82, 0x0, 0x0) 06:37:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) 06:37:27 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x453, 0x0, 0x0, 0x0, "a5"}, 0x14}}, 0x0) 06:37:27 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f000000ca80)='ns/mnt\x00') [ 2036.093186][ T6630] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2036.283308][ T35] audit: type=1107 audit(1632033448.222:93): pid=14265 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='¥' [ 2036.333079][ T6630] usb 1-1: Using ep0 maxpacket: 16 06:37:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8901, &(0x7f00000000c0)={'batadv_slave_0\x00'}) [ 2036.647111][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 2036.656622][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.665079][ T6630] usb 1-1: Product: syz [ 2036.669462][ T6630] usb 1-1: Manufacturer: syz [ 2036.674319][ T6630] usb 1-1: SerialNumber: syz [ 2036.745432][ T6630] usb 1-1: config 0 descriptor?? [ 2036.789796][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2040.093221][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 2040.099808][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2040.106593][ T6630] gspca_stk1135: Sensor write failed [ 2040.112142][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2040.118866][ T6630] gspca_stk1135: Sensor write failed [ 2040.124704][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2040.131904][ T6630] gspca_stk1135: Sensor read failed [ 2040.137511][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2040.144114][ T6630] gspca_stk1135: Sensor read failed [ 2040.149676][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 2040.157041][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2040.164784][ T6630] gspca_stk1135: Sensor read failed [ 2040.170234][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2040.177535][ T6630] gspca_stk1135: Sensor read failed [ 2040.183885][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2040.190492][ T6630] gspca_stk1135: Sensor write failed [ 2040.196215][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2040.202774][ T6630] gspca_stk1135: Sensor write failed [ 2040.208841][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 2040.224888][ T6630] usb 1-1: USB disconnect, device number 54 06:37:32 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0xda, 0x7a, 0x10, 0x174f, 0x6a31, 0xa404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0xd8, 0x94}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 06:37:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x7}, 0x40) 06:37:32 executing program 3: syz_mount_image$msdos(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 06:37:32 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000002040)={0x24, 0x3, 0x0, {0x0, 0x3, 0x0, '+{]'}}, 0x24) 06:37:32 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000038c0)={0x0, 0x1, &(0x7f00000037c0)=@raw=[@jmp={0x5, 0x0, 0x9}], &(0x7f0000003800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:37:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:37:32 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x84000000) 06:37:32 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x34, &(0x7f00000000c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}, 0x4) 06:37:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[{0x10}], 0x10}, 0x0) 06:37:32 executing program 2: mount$9p_fd(0x0, &(0x7f0000000780)='.\x00', 0x0, 0xc0ed0000, &(0x7f0000000840)) 06:37:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) [ 2041.223329][ T6630] usb 1-1: new high-speed USB device number 55 using dummy_hcd 06:37:33 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x7, 0x0, 0x3) [ 2041.463172][ T6630] usb 1-1: Using ep0 maxpacket: 16 [ 2041.744347][ T6630] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=a4.04 [ 2041.753921][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.762067][ T6630] usb 1-1: Product: syz [ 2041.766716][ T6630] usb 1-1: Manufacturer: syz [ 2041.771427][ T6630] usb 1-1: SerialNumber: syz [ 2041.825489][ T6630] usb 1-1: config 0 descriptor?? [ 2041.869630][ T6630] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2045.133202][ T6630] gspca_stk1135: reg_w 0x352 err -71 [ 2045.139708][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2045.146369][ T6630] gspca_stk1135: Sensor write failed [ 2045.151918][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2045.158561][ T6630] gspca_stk1135: Sensor write failed [ 2045.164182][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2045.170606][ T6630] gspca_stk1135: Sensor read failed [ 2045.176152][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2045.183701][ T6630] gspca_stk1135: Sensor read failed [ 2045.189108][ T6630] gspca_stk1135: Detected sensor type unknown (0x0) [ 2045.196255][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2045.202664][ T6630] gspca_stk1135: Sensor read failed [ 2045.208153][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2045.215000][ T6630] gspca_stk1135: Sensor read failed [ 2045.220630][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2045.227229][ T6630] gspca_stk1135: Sensor write failed [ 2045.232609][ T6630] gspca_stk1135: serial bus timeout: status=0x00 [ 2045.239524][ T6630] gspca_stk1135: Sensor write failed [ 2045.245673][ T6630] stk1135: probe of 1-1:0.0 failed with error -71 [ 2045.261919][ T6630] usb 1-1: USB disconnect, device number 55 06:37:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8953, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 06:37:37 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0x5, 0x4) 06:37:37 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0xd, 0x0, 0x0) 06:37:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:37:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0xe, 0x0, 0x0, 0x8}, 0x40) 06:37:37 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 2045.856511][ T3121] ieee802154 phy0 wpan0: encryption failed: -22 [ 2045.863302][ T3121] ieee802154 phy1 wpan1: encryption failed: -22 06:37:38 executing program 3: r0 = fsopen(&(0x7f0000000040)='iso9660\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 06:37:38 executing program 2: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xedc0, &(0x7f0000000300)=ANY=[]) 06:37:38 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x21, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:37:38 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x4, 0x0, 0x0) 06:37:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:37:38 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0x0) io_setup(0x800, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f00000007c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x241f, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 06:37:38 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x2002) 06:37:38 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x15, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:37:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0x7800}}) 06:37:38 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3e, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:37:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)) 06:37:38 executing program 0: r0 = socket(0x2, 0xa, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) 06:37:39 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x16, 0x0, &(0x7f00000001c0)) 06:37:39 executing program 2: r0 = fsopen(&(0x7f0000000100)='romfs\x00', 0x0) fsmount(r0, 0x0, 0x0) 06:37:39 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) 06:37:39 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x8}]}) 06:37:39 executing program 4: r0 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000140)='\xff\xdb\xb7gP\x00\xd5\x87;\xd8\x9a\xd3\x05\x9bvl\xf2\xf8\xa05\xb8\xf3\x8f>\x03\t\xf7\xac\x80\x9e|\x98\x0f\x15q%\xd1\xb6fma\xcb\b\x17a[0D\x92\xa42\x87\xb97\xa1\x0e\x00\x06\x00\x00\x00\x00C\xaf\xb9\x1d\xdc\xbf\x96(&A\xf9\xe1\x00', &(0x7f00000000c0)='syztnl0\x00', 0x0) 06:37:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x8934, &(0x7f0000000000)={'ip6erspan0\x00', @ifru_hwaddr=@link_local}) [ 2047.873159][ T35] audit: type=1326 audit(1632033459.811:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14397 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf6e73549 code=0x0 06:37:40 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x21, 0x0, 0x0) 06:37:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8993, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) 06:37:40 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x1600bd74, 0x0, &(0x7f00000001c0)) 06:37:40 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)) 06:37:40 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x1000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x81, 0xed, 0x8}]}) 06:37:40 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:37:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89b0, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 06:37:40 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003600)={&(0x7f00000023c0)={0x1014, 0x13, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [], [0x0, 0x800, 0x81], 0x0, [0x9, 0x1]}, 0x6, 0x101}, [@INET_DIAG_REQ_BYTECODE={0x41, 0x1, "dcdaec60620134a6575953310908aae62a402b0587352675bb25b99bbe51ffb795d3df4fb2f76ffc5f94faa8d70ceac27a8e9f4ceab0d5bdbe23b25ad3"}, @INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "8884ffd96b88215c6adb3723a27311a903d4207a6abb5f9688fd92ada74ea2b89d72d8d7278ce35a05d712e97d92bce258af75c949e89a523edb6d4717495351b1bf65308e58818aa8217aca04cefd4fc4554f3baa15d837db3f3a66ad916954544460421c2c02c246d2dde0993abdc9c800b17e0f75c7df64b42f72365cba03368949534687d32356cd83756cb5fd9c193a5b7ad3003ee3f15b41eff093347e4b65284e8737ab2ced763a3a455e7d11e509cd10722f46108b3b070e58beb41e9307850a91c0395008a9d48045477629eefd484e"}, @INET_DIAG_REQ_BYTECODE={0xa8, 0x1, "16cd7300dfd10b9c92cfa32287a2c9d0a96e54031f8b1720aef952adf671974467f2192ac36c97901cd032f8c6c9d4e5d8c6997eb290c3987e7e9d1476d48e547e2d59bea6356508d65b58bbece61885a497177cbea7df18cf65296c04c1992f015975a8a959fb4926c6327c1423fd1d4c41dd1e8bdefeef62b5f4b6ae486c2c8937fe68a3f581fd27c2fab0b509e5ac148a7af1f40bcaffe46a1c8044e0d0c5d46f35ba"}, @INET_DIAG_REQ_BYTECODE={0xe04, 0x1, "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"}]}, 0x1014}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) [ 2048.704936][ T35] audit: type=1326 audit(1632033460.651:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14418 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf6f5c549 code=0x0 06:37:40 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 06:37:40 executing program 2: mount$9p_fd(0x7fffffffefff, 0x0, 0x0, 0x0, 0x0) 06:37:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 06:37:41 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) 06:37:41 executing program 0: r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 06:37:41 executing program 2: socketpair(0x10, 0x3, 0x25, &(0x7f0000000000)) 06:37:41 executing program 3: r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x7) 06:37:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)) 06:37:41 executing program 5: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x24082) 06:37:41 executing program 4: r0 = fsopen(&(0x7f0000000080)='overlay\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 06:37:41 executing program 2: syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:37:41 executing program 0: r0 = io_uring_setup(0x6440, &(0x7f0000000080)) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x2113, r0, 0x10000000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:37:42 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000040)={'veth0_to_batadv\x00', @ifru_hwaddr=@broadcast}) [ 2050.219726][T14456] overlayfs: missing 'lowerdir' 06:37:42 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000006180)=[@in={0x2, 0x0, @empty}], 0x10) 06:37:42 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0x103001) write$nbd(r0, 0x0, 0x1001) 06:37:42 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{}]}, 0x10) 06:37:42 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, 0x12, 0x1}, 0x4c}}, 0x0) 06:37:42 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x22, 0x0, &(0x7f00000001c0)) 06:37:42 executing program 5: syz_open_dev$vcsn(0x0, 0x0, 0x0) faccessat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 06:37:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:37:43 executing program 2: r0 = fsopen(&(0x7f0000000080)='msdos\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 06:37:43 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x24, 0x0, 0x0) 06:37:43 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2d, 0x0, 0x0) 06:37:43 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140), &(0x7f0000000180)=0xc) 06:37:43 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x1a, 0x0, &(0x7f00000001c0)) 06:37:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:37:43 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x32, 0x0, &(0x7f00000001c0)) 06:37:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000039c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="350b00007452d1031c7f0e"], 0x24}}, 0x0) 06:37:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)={[{@dots}], [{@subj_type={'subj_type', 0x3d, '\x85\xba\xa1t\xf0\xcb\x11B'}}]}) 06:37:43 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x13, 0x0, 0x0) 06:37:44 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x12, 0x0, 0x0) 06:37:44 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') setns(r0, 0x40000000) 06:37:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:37:44 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000003c0), 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 06:37:44 executing program 3: openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x0, 0x0) 06:37:44 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/timer_list\x00', 0x0, 0x0) 06:37:44 executing program 5: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',rootmode=00000000000000000060000,user_id=']) 06:37:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) 06:37:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:37:44 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x6c) 06:37:44 executing program 3: r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000140)='\xff\xdb\xb7gP\x00\xd5\x87;\xd8\x9a\xd3\x05\x9bvl\xf2\xf8\xa05\xb8\xf3\x8f>\x03\t\xf7\xac\x80\x9e|\x98\x0f\x15q%\xd1\xb6fma\xcb\b\x17a[0D\x92\xa42\x87\xb97\xa1\x0e\x00\x06\x00\x00\x00\x00C\xaf\xb9\x1d\xdc\xbf\x96(&A\xf9\xe1\x00', &(0x7f00000000c0)='syztnl0\x00', 0x0) [ 2052.983948][T14519] fuse: Bad value for 'user_id' [ 2052.997162][T14519] fuse: Bad value for 'user_id' 06:37:45 executing program 0: mount$9p_fd(0x0, &(0x7f0000000780)='.\x00', 0x0, 0x80002, &(0x7f0000000840)) 06:37:45 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x2, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) 06:37:45 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x76, 0x0, 0x0) 06:37:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:37:45 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000080)=':\xe8%{]}&#^[*}\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 06:37:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x89a1, &(0x7f0000000780)={'wpan4\x00'}) 06:37:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@empty}, 0x14) 06:37:45 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x31, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) 06:37:45 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x24, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) 06:37:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:37:46 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002400)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 06:37:46 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f00000000c0), 0x4) 06:37:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0xe, 0x4, 0x0, 0x8}, 0x40) 06:37:46 executing program 5: mount$9p_fd(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0) 06:37:46 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x23, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{}]}, 0x10) 06:37:46 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r1}) 06:37:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001680)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 06:37:46 executing program 0: r0 = socket(0x2, 0xa, 0x0) write$nbd(r0, 0x0, 0x0) 06:37:46 executing program 5: mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRESHEX]) 06:37:46 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x29, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) 06:37:47 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000180)=0x7fff) [ 2055.062266][T14576] 9pnet: Insufficient options for proto=fd [ 2055.093720][T14576] 9pnet: Insufficient options for proto=fd 06:37:47 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) 06:37:47 executing program 5: mount$9p_fd(0x0, &(0x7f0000000780)='.\x00', 0x0, 0x2000022, 0x0) 06:37:47 executing program 3: syz_mount_image$fuse(0x0, &(0x7f00000039c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) 06:37:47 executing program 4: socketpair(0x2c, 0x3, 0x4, &(0x7f0000000140)) 06:37:47 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x1, 0xd4, &(0x7f0000000100)=""/212, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240), 0x10}, 0x78) 06:37:47 executing program 5: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="b2ce", 0x2, 0x7fff}], 0x1a024, &(0x7f0000000300)={[{@nodots}]}) 06:37:47 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r1}) 06:37:47 executing program 3: r0 = fsopen(&(0x7f0000000100)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x2, &(0x7f0000000140)='\xff\xdb\xb7gP\x00\xd5\x87;\xd8\x9a\xd3\x05\x9bvl\xf2\xf8\xa05\xb8\xf3\x8f>\x03\t\xf7\xac\x80\x9e|\x98\x0f\x15q%\xd1\xb6fma\xcb\b\x17a[0D\x92\xa42\x87\xb97\xa1\x0e\x00\x06\x00\x00\x00\x00C\xaf\xb9\x1d\xdc\xbf\x96(&A\xf9\xe1\x00', &(0x7f00000000c0)='syztnl0\x00', 0x0) 06:37:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @empty}}) [ 2056.110316][T14594] loop5: detected capacity change from 0 to 127 06:37:48 executing program 4: r0 = fsopen(&(0x7f0000000040)='cpuset\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 06:37:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) [ 2056.362691][T14608] new mount options do not match the existing superblock, will be ignored 06:37:48 executing program 5: syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x7000000, 0x0, &(0x7f0000000300)=ANY=[]) 06:37:48 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$FUSE_POLL(r0, &(0x7f0000000080)={0x18}, 0x18) 06:37:48 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) shutdown(r0, 0x2) 06:37:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private0}}) 06:37:48 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/time\x00') 06:37:48 executing program 3: mount$9p_fd(0x0, &(0x7f0000000780)='.\x00', 0x0, 0x8cffffff, 0x0) 06:37:49 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000200)=0x10001, 0x4) 06:37:49 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r1}) 06:37:49 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 06:37:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r0, &(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80) 06:37:49 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 06:37:49 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:37:49 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x7, 0x0, 0x0, 0x0) 06:37:49 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x34, 0x0, 0x0, 0x40000000}]}, 0x10) 06:37:49 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 06:37:49 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @multicast}, 0x68, {0x2, 0x0, @multicast1}, 'vlan1\x00'}) 06:37:50 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x6, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:37:50 executing program 3: fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) 06:37:50 executing program 4: mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)=ANY=[]) 06:37:50 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:37:50 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) shutdown(r0, 0x7) 06:37:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000080)="92", 0x1}], 0x1}, 0x4041) 06:37:50 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x4, 0x0, 0x0) 06:37:50 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000002400)='/proc/slabinfo\x00', 0x0, 0x0) 06:37:50 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x6c) 06:37:51 executing program 2: r0 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 06:37:51 executing program 5: r0 = socket(0x2, 0x3, 0x7) recvmsg(r0, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) 06:37:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x30, 0x0, 0x0) 06:37:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x75, 0x0, &(0x7f0000000280)) 06:37:51 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) select(0x40, &(0x7f00000003c0), &(0x7f0000000400)={0x8}, &(0x7f0000000440)={0x5}, &(0x7f00000004c0)) 06:37:51 executing program 0: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 06:37:51 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:37:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8931, &(0x7f0000000780)={'wpan4\x00'}) 06:37:51 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = io_uring_setup(0x6440, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r0], 0x1) 06:37:51 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/cpuinfo\x00', 0x0, 0x0) 06:37:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) 06:37:52 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[], 0x1e8) 06:37:52 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x1600bd74, 0x0, 0x0) 06:37:52 executing program 3: syz_mount_image$msdos(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 06:37:52 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000000040)="af", 0x1}], 0x1, &(0x7f0000001440)=[@ip_ttl={{0x14}}, @ip_retopts={{0x10}}], 0x28}, 0x0) 06:37:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x84, 0x30, 0x0, &(0x7f00000001c0)) 06:37:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) 06:37:52 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2f, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:37:53 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:37:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x14}, 0x14}}, 0x0) 06:37:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0xa, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 06:37:53 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, 0x15, 0x1, 0x0, 0x0, {0x2}}, 0x4c}}, 0x0) 06:37:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000000)=0x9, 0x4) [ 2061.451353][T14734] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 2061.511390][T14737] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 06:37:53 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0xe}, 0x40) 06:37:53 executing program 2: socket(0x26, 0x5, 0x5) 06:37:53 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x1) write$nbd(r0, &(0x7f0000000240)={0x67446698, 0x0, 0x0, 0x0, 0x0, "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"}, 0x1001) 06:37:53 executing program 3: mount$9p_fd(0x0, &(0x7f0000000780)='.\x00', 0x0, 0x0, &(0x7f0000000840)) 06:37:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) 06:37:54 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x18, 0x0, &(0x7f00000001c0)) 06:37:54 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000000040)="af1b91f1ffe08935d73139b464df28757443846d25be43957b4c2f16ee19db2c76c684e39cd537b39412a7aec3923cf0dd2619386e45ce0c50475fe450b7a05ed6bdd9c50218337af0bf97d1ff14c3c1413b2f5a705a8e56a581f74b7b8ea53ce419cb23c37d1f134836e5d614a67ccd5fdd58827ffd066107d2b26f80b85b9f", 0x80}, {&(0x7f0000000100)="00636769419623d913c8669989455fd4633af5873dda90f03b25f916bdc658cd2c9d40fde0f8478c2ccfcf40eb49dbfcf8a9453be9e4abfe83b5f48f06435d1b13c956602c6d78a0c14eea470e433d841751c5749ff98be790cfbaef4b698a3124c3fe450b16fbe3555ae066d9b7ec661b6bb23a593365908f9ea3770d7a4b88e8bdf55ddfe168f368db6c289f59af6cd7f9daa3ecb96789d766a2", 0x9b}, {&(0x7f00000001c0)="ef94296cd4e841a20185a13dd688a53f63c3398a235b8c23a1d6a49d62e252eec2261bd357873ffa48c2a85c724285102c5444ac2800999fdc9a9596cc862b7145c8bcc3dbed706b64dbe5b68c4761e871be6b93c278806824fcc4b7f904e33a4c896beab7e076d10eb0c3cbd150ec5b4f2e5dc7f02512188468f4a009b86ffb67f477d3666a5265b519170384", 0x8d}, {&(0x7f0000000280)="dc890cb35dcb275b8382e4d1eaec", 0xe}, {&(0x7f00000002c0)="54810fe1d55e48dcaff4da9960138ed0a0b34dab2a4b1451ebc117caa30ea97631630338b2656a566aae8d21b377f5618c48089638099ea736adfd0376e7b07523a9146631ad5b64cb7581bf949ce84500f8a1aee0f8c67090e5acf7ea3c73a72ab492d887fa08f7a9f28dcd75e6fbbb8a321f1ab723a54cc45cfd00b53b420378d61db4300d0072aebd30f4756714eb38d628a73949ce9f7d", 0x99}, {&(0x7f0000000380)="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", 0x295}], 0x6}, 0x0) 06:37:54 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:37:54 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), 0xffffffffffffffff) accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000100)="bdeb5ff5c5336fc5346b0cdee498fa0a5c1ae90a646bd8ba53a4fb341a0ea83402207010e133981ed0e1f20e1666e518d5098b1ae97cd3563a5be977e69e62b7de5d0d96882715dda669e34858eee4abcc1481684c3d1f02321bd2610d482a1cd678e5820c0f37a6bdf10871222da97869f81d208a6d4716a7", &(0x7f0000000180)=@buf="61297fc4488a86a5393b3376405e4cca39", 0x4}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r0, 0x800, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048814}, 0x1) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000002440)='.log\x00', 0x101200, 0x44) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000002480)={&(0x7f0000000300)="e22035720e8d41aca21998859eded16177e4e749", &(0x7f0000000340)=""/4096, &(0x7f0000001340)="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", &(0x7f0000002340)="48d2b70d8f7bda4e80a66de83c5844f72d0c0e0714485f3de90a2e4f5996224f67c6ed2d2383b1b3f75cda9ab43a10b179aa2f466330d0dbe4269fbe2720f6d6c7a943f0c8fde89a67bd37d164580ec3e363a73805a0f5b1bf9ed6f5061556c7aa76bf726aec80e47b32ed9cbb0d3c0937f5fdf9aa91ca1998554b878e59ac00e03e46d557896ede3de3c3ee8f3147d84ee47e1ff72398eef4a4534adb37147793b4622ae2b30f0dadb52ddbd32f90fe7558f6d48b30a52b114f0c8a890680618ea6907d6afcc6f3da519ed3859e25d3aaedbda4510d7b64878f7f64f56be50d53a283a921ec9e7533", 0xae14, r2}, 0x38) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003700)={0xc, 0x11, 0x7, 0x1, 0x154741133b27a279, r2, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0xc}, 0x40) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000003740)={&(0x7f00000024c0)="548dcdc2b7a8e69c992c3e9c73c6176a7db5e96a37fb5f37f97f36a28c874dab791a6ea10877d122e6f3685cd5713393cdfe558f1a166fbf070777a6f1f8762b033593e770ee3b5135158e5f06777eebb636dd184497c60873e4d9fdd5f58f9796d415a4", &(0x7f0000002540)=""/203, &(0x7f0000002640)="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", &(0x7f0000003640)="fcd9f6f90403a09266a39e042bab1b7891f38fc70b138a02642930b2f2208975e1bbd20d6f81d7b9f91f82d27eb4dfa7c41b7d83f304474cc5349b4a564011b31f6b469a0a30d4cccd7a2971e7ea2c7f714d48d57c8c14ce513a24daa542c2b5fc149afb6e0fa48b93501319755ea20563e01caae780a0b3bcc3169a366e97c3513c86a019655819d751300b", 0x0, r3}, 0x38) syz_genetlink_get_family_id$net_dm(&(0x7f0000003780), 0xffffffffffffffff) syz_genetlink_get_family_id$net_dm(&(0x7f0000003d40), r1) 06:37:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f0000006a80)={0x0, 0x0, 0x0}, 0x143) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan0\x00', {}, 0x1}) 06:37:54 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:37:54 executing program 5: r0 = socket$inet_sctp(0x2, 0x3, 0x84) getsockopt$inet_buf(r0, 0x0, 0x3, 0x0, &(0x7f00000001c0)) 06:37:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x10}, {0x10}], 0x20}, 0x0) 06:37:55 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@hopopts_2292={{0x18}}, @flowinfo={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x58}}], 0x1, 0x0) 06:37:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f0000006a80)={0x0, 0x0, 0x0}, 0x143) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan0\x00', {}, 0x1}) 06:37:55 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40, 0x401) write$nbd(r0, 0x0, 0x0) 06:37:55 executing program 3: fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) 06:37:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x1) 06:37:55 executing program 4: r0 = fsopen(&(0x7f0000000000)='fuse\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 06:37:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:37:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f0000006a80)={0x0, 0x0, 0x0}, 0x143) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan0\x00', {}, 0x1}) 06:37:55 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0x103001) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FREEZING\x00', 0x9) 06:37:56 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000000)=@raw=[@exit, @btf_id, @ldst, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000000080)='GPL\x00', 0x2, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:37:56 executing program 3: r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000140)='\xff\xdb\xb7gP\x00\xd5\x87;\xd8\x9a\xd3\x05\x9bvl\xf2\xf8\xa05\xb8\xf3\x8f>\x03\t\xf7\xac\x80\x9e|\x98\x0f\x15q%\xd1\xb6fma\xcb\b\x17a[0D\x92\xa42\x87\xb97\xa1\x0e\x00\x06\x00\x00\x00\x00C\xaf\xb9\x1d\xdc\xbf\x96(&A\xf9\xe1\x00', &(0x7f00000000c0)='syztnl0\x00', 0x0) 06:37:56 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[{0x0}], 0x0, 0x0) 06:37:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f0000006a80)={0x0, 0x0, 0x0}, 0x143) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan0\x00', {}, 0x1}) 06:37:56 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x84, 0x7, 0x0, &(0x7f00000001c0)) 06:37:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x1) 06:37:56 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0x103401) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FREEZING\x00', 0xfffffdef) 06:37:56 executing program 4: socketpair(0xa, 0x801, 0x0, &(0x7f0000000080)) 06:37:56 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x204400) 06:37:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:37:57 executing program 5: getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) 06:37:57 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x9, 0x0, 0x0) 06:37:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @local}, 0x14, {0x2, 0x0, @multicast2}, 'veth0\x00'}) 06:37:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a0, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 06:37:57 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) 06:37:57 executing program 2: syz_open_dev$vcsn(&(0x7f0000000840), 0x0, 0x1300) 06:37:57 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x21, 0x0, &(0x7f00000001c0)) 06:37:57 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x42, &(0x7f00000000c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}, 0x4) 06:37:58 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) 06:37:58 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, 0x12, 0x1, 0x0, 0x0, {0x2}}, 0x4c}}, 0x0) 06:37:58 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, 0x17, 0x1}, 0x4c}}, 0x0) 06:37:58 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(0xffffffffffffffff, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r1 = dup(r0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)={0x0, r1}) 06:37:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x12, 0x0, &(0x7f00000001c0)) 06:37:58 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) 06:37:58 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x6c) 06:37:58 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000002a00)='/sys/module/tcp_cubic', 0xce080, 0x0) 06:37:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x15, 0x0, &(0x7f00000001c0)) 06:37:59 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), 0xffffffffffffffff) 06:37:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@deltfilter={0xed4, 0x2d, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xa}, {0x0, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x10000}, @filter_kind_options=@f_route={{0xa}, {0xe8c, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xe80, 0x6, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_pedit={0xe50, 0x0, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}, @TCA_RATE={0x6}]}, 0xed4}, 0x1, 0x0, 0x0, 0x24000003}, 0x0) 06:37:59 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 06:37:59 executing program 0: socketpair(0x2, 0x3, 0x24, &(0x7f0000000080)) 06:37:59 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(0xffffffffffffffff, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r1 = dup(r0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)={0x0, r1}) 06:37:59 executing program 2: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[]) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) 06:37:59 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) 06:37:59 executing program 5: r0 = fsopen(&(0x7f0000000840)='ext3\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 06:37:59 executing program 4: r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 06:37:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x52, 0x0, 0x0) 06:37:59 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x401) write$nbd(r0, &(0x7f0000000240), 0x10) 06:37:59 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(0xffffffffffffffff, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r1 = dup(r0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)={0x0, r1}) 06:38:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x21, 0x0, 0x0) 06:38:00 executing program 4: r0 = fsopen(&(0x7f0000000100)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000140)='\xff\xdb\xb7gP\x00\xd5\x87;\xd8\x9a\xd3\x05\x9bvl\xf2\xf8\xa05\xb8\xf3\x8f>\x03\t\xf7\xac\x80\x9e|\x98\x0f\x15q%\xd1\xb6fma\xcb\b\x17a[0D\x92\xa42\x87\xb97\xa1\x0e\x00\x06\x00\x00\x00\x00C\xaf\xb9\x1d\xdc\xbf\x96(&A\xf9\xe1\x00', &(0x7f00000000c0)='syztnl0\x00', 0x0) 06:38:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x15, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) 06:38:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @local}, 0x0, {0x2, 0x0, @multicast2}, 'veth0\x00'}) 06:38:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x8943, &(0x7f00000005c0)={'veth1_virt_wifi\x00', @ifru_map}) 06:38:00 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x6, 0x0, &(0x7f00000001c0)) 06:38:00 executing program 5: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[]) utime(&(0x7f0000000080)='./file0\x00', 0x0) 06:38:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x16, 0x0, 0x0) 06:38:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) 06:38:00 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3c, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:38:01 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:01 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x83, 0x0, &(0x7f0000000280)) 06:38:01 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) 06:38:01 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000280)=[{0x5}, {}, {}]}, 0x10) 06:38:01 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40, 0x401) write$nbd(r0, &(0x7f0000000240)={0x67446698, 0x0, 0x0, 0x0, 0x0, "fd997341273679641dae3f6a98905f8a6ef8c588b544dfaba69eb4fe7a892287c6c44643f88870bad98c9321a0eae8086b47bdc870c821956e0fbc966d548034984248a8d13bcc7e3210d5d552f42b55f724854e533011ca8a18b9ff5d718dbcad42e0cbe881d66e6bae969bddb9ba5cf4fa37e0ffb5ecfa8556c8b6079396d5aa5b6d2b27217ef672249de509ad7ea14b70e8448cf19abcaf3f49c9a1e05d6afb46e0f876f7632cb2fee5917b697180b41a22437df6d69d8921752201f533f0bd3c659200434ff23d9c974f45e48e25dcd409054db1b8ceacb8488e944d8f08741f0bebf93da42088a901e853e3b84ce1599f869d292b5569dcf008d89ce3de479e21419c0a54012a88806e6481e40167a6af41d33a19db15f86f233af43132b1ff0a1371ba50c1348a7704cfed4583ccec87c3b9c9256c76fae0e750e4f38f28fef7dd5b0f2209f0527a7c7ffe90e6d91dacf317afa3a8dcc5f0e1784f75a17044ff2e0e1df459bbfa14c771bc10d93832c67647563a60e72aebfa8e56e2f96baab2363107a55cc4c8ad2f00f040cf920f4d9e5c499cb10cc348cbcc8bedff08f6c7d6170fcf7a0c19dc956e3be86cdef6e6b22976ba69a2749fadcf818e34a201ec1c89c1331ccea4ab98f92da75a803b5c7eadf19b8d3e7f6577ea8c01c2238e118dacea0b0401dc58c6e92a5d63b808b2eb6213dc0c01db3b9911ce7a1bc97dfab5616140e11eeffbc44de7245344af300a3e7ba9f909bcc9f7e7b1ee2e654187516238d144ef75dfd91548fd8440a738d655c91cc9ce0da0d49b34ec23a4965649d8dc4fbd02eef38bd2fe24ebb73559230b335158f9ee6f1f1b1a608d7f4d5ed32a9114c0561c2f8972d8dae39a35cdb473edc99bf76ff98e509444d69e7e75beffb71113ec7b4b8be5775e4e40287222ff529c136c815e1b838024d912dab71eda28c8cfc2e1999bbff7e0e4238e441a0628da5993c6183907fbf895aebec1cf3400e52618380f7d6789dd822edae1ecd175bcb972975bb22c8f0352b5ee66839f2be70eb2db656e25682d4d330cd29d7e47a7bb444ba6f9a6479458a9990029e3c63f8e0be76db702834e2f35ecc077ab37feca029411fdb981d7e290a942304e8d6de795a10c0fdc75d6ca036e46d4031b067dfc37047426a55071a34b933213f9eaa572cff6f3b75381cd7d441cf3730431b899f3f7cb28b5dc6c89d876f52e5f357be0795cd3a0001cc7332e8e320e436d29b9c53f6a7da30a8be2a5493e6fc3aefd266f74c97c961711c325412e872423870dcd629c6fd806874c3805ce32215c8d65e7fdde191467fdf6bececfce7dd1a494b3c311eb3499502922bc5338fb819554a78d89f517d430c8753509256e61cc5003329ed34a82482de11112f376d2818120c75ba26c5f9561038cc2cc3cddf4d1faa631fa13673644fae2eaad4ec1b4d420e014358fb3724f904b2aa09d2fe102ab943c3890b8f13022084a38df54cd6eae2c0a2b61db581dec28ef22e91bab67fb19f69bde38f95814fcf3bf0f20075a55feed9e8408097a5637f645ef06ec80ae6808c2316f4a4a77f97e55b4e54fa795b745b24c09211cb9e2b471d7593f37aa7043858e2e8109ba80f06adf885c9f989f55b27a274b331b7b9e088c8d7c0bc6430ffd68b9bba7196e190ad7e125760159359a94c3bdbca65b11028379557bd50619f87aa1e64b5592f860e23e27c1c43c35e9c5183486f7d72f41019779054d35de1d3aee72ae3d3334c036814e479c8f17153298c3719f041065908a3e03e03c4bdcc746716f182267eb940b9fd56b966628daf88bc48915e91287a7557aed5ae80f2d256231115f7f2a85c447191228fbc51613e7cc110edac0f599c664ca61589a2eb391468470c81b0af7cd87cc6a3e5fc92b6b052bb27a3b66ca6452004fa43432dcb1a27a7f1bbc847e12d3ee656a8b1160a5370beea5b5537ee8e3b89271c68a2e9acb5eea3142debeeee043ba4db95b5931f0508e840c705d8494a30cc6fa03eccb96c64d8e98f331004c01bafa637e3536ffc40de21e3c907a186dcd81ea77004d95329b897137ff5acfd8a9a61a1442d415d987a03ccd0cf7ed002eb9d8f450fbd9cf3546f3effebde87916b274354bb198ef6bbb58e3be8f1baa38fef01cb9e5fb776e3731c21df02500be565f43c53d303ee7f0e4bc399f52987c819bc22a21ad80dc4de5941dfcfc08774fffe35dedd7661a85ee8b52144a4bb0fc46485e40c8de24025192761ae72b2504c5fac31494d3463d04f9fec9c82efd6451c7ff7065e8155fc8fd1a9e8533148434e8a52c42eea41fb9eb6581bd682a9efb430391c8405626840921ec9610c3bdd2a2e24b87f34e0c1a5d8a26eaf93a552bf154b146ec434e932c78b7da9290aa4a020c6622cebc927e9fdfb2afb4097c2cd2c980adf9426296038c370fd0b27fcdf4981c0778e70c61ca7636043f1c2e3548964b8f96caf280c42aab908c55e034003f8416546e3ed3816c09832c89141a2ef0f3cb060976923909349074dfd293b4d9768b578870baab1798c52b1ab7d0002a1092c33648d223e4fb648fce6646b3f6b11884b01d4f7c0d224a32e6958aed560c2a0b9adabc6fd999b0da63c52ede0cd0e0ccee8a92dcd179fb237601cb0c6c332db73a32d20f98d3345e94263e4952c3f97bd228e67052958cdf1b23b2594bd63da26ecfa57d327f93e664f0b40f2bd0a2d71b161c1ed085b7f7695eec853328cff7bb6a16122b11f25438991f575c5addf8677eb45d90cbb82937c5dd27b4aee1a2e97917fdb1b3a0151f948d8d78008c9c9ef8b614eb70f0a241790afc8f637bf1a92aeb20b9567abe8cd5898e7a879b1e1ad663dd49be4e9d5350e320ccd64b64e307310481b80a3d27ec925065f0b7d9e927b222b422a15df5ca4a93016fa927e0f9a7ba05e6706ed134cc12d540e91a637215df1ad1fb9249a65b97afcf804ecba40d4d39f69c61e45bcad59feefb96c6f3be7afff544e8d853e2e8c307474e03204cb0ccf67aba79d54490499d7114a71eef0bafeb6cb1df30e9696bff44d6c8b7bc036c4e9d032f1b071047233c57275c5bf7917dcb44e2aa39134ff3aec7d96ca99238b8b1dcfb2f59af9ac8fc1634c06315dbf340f0b989601ec7c243f2582f7ccffc15ffccae6bad8253f69d85c1a2647d7e6f1bcbb31bd8911e4041e3c32302d7018280b460141bec481657cafec4887546a350b414b8c7de3fc173df6cad02db952451df479d52f087eea407f762a611b7316d14ba53bf5cd113e9fa3c7f2b3e5ac4f354ddc3bfe2b008e8913442c31ef00a268d9c067d625d64d7b40ce437408aab5e51737da79a1cc624ef8d9e257a57bd222675ff8abbc86bf5050d592cc8ae8f6a23bb6b07bb5e4e5fcfbfbecc6348912295714ad66fa1db60a85c7a42d407137a3a1726e4df1a8484f4f41833ca26b7818498b9095e1c712ed732e3cc349141572e0a118845e32fc09d516c487a0c34dc28ddc73bc5e3c77f364906cffce91051d517f8d3b2e2c13d151a3fa0ce6488f41bf060c5f95891980b55672097fc12557fbc682a0361c1175cf9df41d25db87aea134c994e15180d133415d7b38738f8884d340f23381cbada5e210b93a74d4d88a425c5079f68908e810e5f58c557468da948e1385c5eaf87f3f39317ae4b6735cde8bf4e462cfa92bb1f627c756bc9b3622694f8eaf882f18a6fc281ffd848b2a1579e7371672a07f6bfa2a73362fa49130850f0ab7f44de2cc07ce1eb50ed60ee05ff092b077640c86778d14ab900f3c93e5cabaf8bf6c41b72595ca602a6c3e173be93af9bd34f9801666dc0c31865e0638ea94d1808f5caf15ecb2ad52a3081ecf94c4d2b7ec3be9d1c157187ee55fe2258846254dc265539127fe755c1310500623fb2269706cdd7420c1c028c2436f8700c1c95e8c067b05eb115c756382af57b79f71088f1c8a3727a8b0f9476196cfc3416112e42d3982ab3a7c829b112ae52d6e67c0f120adaf108a9a61afbf452a718fe3cee5231e58bddc7e023f9a881d9ff789e4172abf5cb94992fffc749e8d507649df7f8574495a820c51fdd6b2904d4b95dd8ef9f8d4b57a550b89050f4472561156f21699dd159d8a076b59dd2642103957a815d58ffd6a5dea4cb23aee8b0111398aa828c8569dc70469dfa47a1ba0f863f03a852b3e40805541a41880dda59d38b61eebe7bbd2ae2e98d656a1e5614421d164ff7b90c5b94f9e59c89a7579bacfa3d828a0165a7931c60a0d492f960c2fc39a1970d19936290d958e9df7dc4371a8b1e00a169c49e8625dd40568d7e4b6c1ba434e5eff36df56049b23a5fa9b7add95d111e7fae6737723d5532dffb95487848a39413c3f89d40aae661359723912a51aaa855919ec10a5cb94b00aa964743b9517d87f01c60df62d2853bc190fa3b52ecc8284c141a1314e336ea1f72b12b0d2ef71de0184d6d127a4d3df174383610ab20f2a5f3d85cb515fbe68df2a4f02fc9f596b11e2d1ffd7e0bc17fb31d6e74f16fae220d1371b3e3fc2edd0ca654c9e409fad5a524a9c38f3f8bb39278c9736ad4b2bd50b7f671dffc7e4283db81209165af20252cfc95b55bc9d659214ad6cbd8a45d48f4e7eb9c92d35f11ecc3a5fb5c4b1ea787e69efc7f4184568717abfbf4b41c3925714c167d8e199787b38d846e622cdc0366886be9a4a58740370d02ff0fc51e9d774c42ff888a287b6c7779268f069cbd359496d99433d7bc9db25b227b69852aa2400c25145b2f2a5e0294b7c5571dc2f803cdc667959357aff41803924e46548ad5de4c7d4b4981c2dec4665337e18a337f10174cfc4eb484c338e19fe509ca5f1c655133b90187431001b3c999bfeecdaf5d2ef9237c44d5d6baa6bd77d518d6a1d67e835fc126c8633f8509dd21d45c5a88ea61cbd404fd985f8c29c0f5838fd3c764f9e98b811856bec2790275e007eab9045d94b1a5451ff1eb3e4f97dac9cffad75f5f51da7fa2d6a27e8301141896d34ca4e6f8bb6e4f2a6539bb6544822d3fb68fc8c45a2f6a5fdffcb9715366fa5af1d662a4f9757209429944156a69d1a6c1fee7c39d902ec60f5aa4be043a01f49a9a348566fef778decd2323fc5d0927903a5730105d35c075b6ddf95f828c208ae94b76ba485fa3fe7b63de429f395a5a44b302aefbe3d908f6ff44a79e3d103df635f823dfd4fc4315bb6e53c888b2ef12e245c7fc28584ba597824a75467d9ae8574b2bd8edb85744675aca4b87fa5dd8906abffd26534296d9d8b47aa827113f1459fc78b42c67d21df835e83f90730ad37d00122b907c6d410e62950a2004566d21c192c377b1676cdbd1951ce69f924f38a2d40e15889c5c7db7d848dabb56127cbf4e701184c48b9673c7fb920129b08d4c855358253adee00f07126cca6921418dcd9a3e119c4c7067c546f6d9345a3d251906d7b862be7111001e2c709857080d745b076b6ca398a6efd694c7faab21480bf953c3fd75aa0a9b5988691591df48bc59297491ef036bab9909afa381d32a48cdce062a586745ca0a22feffccf439bbfde3e8cd149cbcf3e13d98c81fb0659a58fb8c4ab178a4e85e624622ea9ee27a58"}, 0xfa3) 06:38:01 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x42, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:38:01 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:01 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x1000, &(0x7f0000000140)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:38:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x84, 0x0, 0x0, &(0x7f00000001c0)) 06:38:01 executing program 0: pselect6(0x40, &(0x7f0000004340), &(0x7f0000004380)={0x4}, 0x0, &(0x7f0000004400)={0x77359400}, 0x0) 06:38:01 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x5b, 0x103001) write$nbd(r0, 0x0, 0x1001) 06:38:02 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0xc2801) write$tun(r0, &(0x7f0000000240)={@val, @void, @eth={@broadcast, @remote, @val, {@llc_tr={0x11, {@llc={0x0, 0x0, "d8"}}}}}}, 0x1d) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FREEZING\x00', 0xfffffdef) 06:38:02 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:02 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @vsock={0x28, 0x0, 0x0, @hyper}, @tipc, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="99b5012232b0"}}) 06:38:02 executing program 4: fsopen(&(0x7f0000000000)='fuseblk\x00', 0x0) 06:38:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@deltfilter={0x12bc, 0x2d, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xa}, {0x0, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x10000}, @TCA_CHAIN={0x8, 0xb, 0x100}, @filter_kind_options=@f_route={{0xa}, {0x126c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x3ffc00, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xecc, 0x9, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x597, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, 0xff, 0xa53, 0x8, 0x8001, 0x6, 0x7fffffff, 0x10, 0x5, 0x8da1, 0x1, 0x7fffffff, 0xa0, 0x2, 0xfffffffd, 0x7, 0x0, 0x6, 0x1, 0x6b85, 0x20, 0x9, 0x7, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x5, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x93bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0x8000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xff, 0x5, 0x0, 0x80000000, 0x9, 0x8, 0x4, 0x1, 0x0, 0x81, 0x7, 0x6, 0xff, 0x8, 0x8000, 0x8001, 0x3, 0x6ac, 0x4, 0x741, 0x38, 0x101, 0xfffffff9, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x2, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x3, 0x10000, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd54, 0x53a, 0x7, 0xffffffff, 0x0, 0x9000000, 0x1f, 0x80000000, 0xffff, 0x9, 0x1000, 0x7ff, 0x8, 0x401, 0x4, 0x8000, 0x0, 0x7, 0x80000001, 0x0, 0x50, 0x4a, 0x4, 0x0, 0x3, 0x1, 0x3, 0x96000000]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x2a}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x0, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}, @TCA_RATE={0x6}]}, 0x12bc}, 0x1, 0x0, 0x0, 0x24000003}, 0x0) 06:38:02 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:02 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x29, 0x0, 0x0) 06:38:03 executing program 4: getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000200)}], 0x801000, &(0x7f0000000300)={[{@dots}]}) 06:38:03 executing program 0: io_setup(0x0, &(0x7f0000000000)) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 06:38:03 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff}, 0xc) 06:38:03 executing program 5: mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 06:38:03 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:03 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x14, 0x0, &(0x7f00000001c0)) 06:38:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, 0x0) [ 2071.998708][T14983] 9pnet: Could not find request transport: 0xffffffffffffffff 06:38:04 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0xb, 0x0, 0x0) [ 2072.077164][T14983] 9pnet: Could not find request transport: 0xffffffffffffffff 06:38:04 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r0, 0x0) 06:38:04 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:38:04 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x5, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:38:04 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 06:38:04 executing program 2: syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x20241) 06:38:04 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f00000001c0)) 06:38:05 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2, 0x0, 0x0) 06:38:05 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, 0x14, 0x1, 0x0, 0x0, {0x11}}, 0x4c}}, 0x0) 06:38:05 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) 06:38:05 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}, 0x4) 06:38:05 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x101200, 0x0) 06:38:05 executing program 4: r0 = fsopen(&(0x7f0000000000)='romfs\x00', 0x0) io_setup(0x20, &(0x7f00000014c0)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r1, 0x2, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 06:38:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89b1, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) 06:38:05 executing program 2: r0 = socket(0x11, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000010c0), r0) 06:38:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @remote}, 0x0, {0x2, 0x0, @dev}, 'veth0_to_batadv\x00'}) 06:38:06 executing program 5: fsopen(&(0x7f0000000140)='cpuset\x00', 0x0) 06:38:06 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1600bd60, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{}]}, 0x10) 06:38:06 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, 0x12, 0x1, 0x0, 0x0, {0xa}}, 0x4c}}, 0x0) 06:38:06 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:06 executing program 2: mount$9p_fd(0x0, &(0x7f0000000780)='.\x00', 0x0, 0x80002, 0x0) 06:38:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) 06:38:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8947, &(0x7f0000000780)={'wpan4\x00'}) 06:38:07 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) 06:38:07 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x7, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:38:07 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x42, &(0x7f00000000c0)={0x0, &(0x7f0000000280)}, 0x10) 06:38:07 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) 06:38:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={0x0}}, 0x0) 06:38:07 executing program 3: socketpair(0xa, 0x3, 0x87, &(0x7f0000000080)) 06:38:07 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x103001) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FREEZING\x00', 0x9) 06:38:07 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x14, 0x0, 0x0) 06:38:08 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@deltfilter={0xed8, 0x2d, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xa}, {0x0, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0xe98, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x0, 0x0, 0x0, 0x0, {0x0, 0x1}}}]}, @TCA_ROUTE4_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x0, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7d}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}, @TCA_RATE={0x6}]}, 0xed8}, 0x1, 0x0, 0x0, 0x24000003}, 0x0) 06:38:08 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{}]}, 0x10) 06:38:08 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) 06:38:08 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000080)={'caif0\x00', @ifru_names}) 06:38:08 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x1, 0x0, &(0x7f00000001c0)) 06:38:08 executing program 0: socketpair(0x21, 0x80000, 0x1, &(0x7f0000000000)) 06:38:08 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x5421, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) 06:38:08 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000003580)={&(0x7f00000001c0)=@nfc_llcp={0x2, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, "4d7e4358de8a3dce620455b4f03d0969f195b56d69f96c6379dc8ddea85226ff869ce52660305f42f64995e51cc4a66fd771c31112524a86e6a0ab71de9e82"}, 0x80, &(0x7f0000003380)=[{&(0x7f0000000240)='t', 0x1}], 0x1}, 0x3e8) 06:38:09 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) 06:38:09 executing program 5: socketpair(0xa, 0x0, 0x0, &(0x7f00000002c0)) 06:38:09 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002400)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 06:38:09 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:09 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f00000003c0), 0x2, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 06:38:09 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0x103001) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FREEZING\x00', 0xfffffdef) 06:38:09 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0xc2801) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FREEZING\x00', 0xfffffdef) 06:38:09 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000014000100000000e5ffffffff01", @ANYBLOB="00f474ee635044ed"], 0x4c}}, 0x0) 06:38:09 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000000040)="af1b91f1ffe08935d73139b464df28757443846d25be43957b4c2f16ee19db2c76c684e39cd537b39412a7aec3923cf0dd2619386e45ce0c50475fe450b7a05ed6bdd9c50218337af0bf97d1ff14c3c1413b2f5a705a8e56a581f74b7b8ea53ce419cb23c37d1f134836e5d614a67ccd5fdd58827ffd066107d2b26f80b85b", 0x7f}, {&(0x7f0000000100)="00636769419623d913c8669989455fd4633af5873dda90f03b25f916bdc658cd2c9d40fde0f8478c2ccfcf40eb49dbfcf8a9453be9e4abfe83b5f48f06435d1b13c956602c6d78a0c14eea470e433d841751c5749ff98be790cfbaef4b698a3124c3fe450b16fbe3555ae066d9b7ec661b6bb23a593365908f9ea3770d7a4b88e8bdf55ddfe168f368db6c289f59af6cd7f9daa3ecb96789d766a2", 0x9b}, {&(0x7f00000001c0)="ef94296cd4e841a20185a13dd688a53f63c3398a235b8c23a1d6a49d62e252eec2261bd357873ffa48c2a85c724285102c5444ac2800999fdc9a9596cc862b7145c8bcc3dbed706b64dbe5b68c4761e871be6b93c278806824fcc4b7f904e33a4c896beab7e076d10eb0c3cbd150ec5b4f2e5dc7f02512188468f4a009b86ffb67f477d3666a5265b519170384", 0x8d}, {&(0x7f0000000280)="dc890cb35dcb275b8382e4d1eaec", 0xe}, {&(0x7f00000002c0)="54810fe1d55e48dcaff4da9960138ed0a0b34dab2a4b1451ebc117caa30ea97631630338b2656a566aae8d21b377f5618c48089638099ea736adfd0376e7b07523a9146631ad5b64cb7581bf949ce84500f8a1aee0f8c67090e5acf7ea3c73a72ab492d887fa08f7a9f28dcd75e6fbbb8a321f1ab723a54cc45cfd00b53b420378d61db4300d0072aebd30f4756714eb38d628a73949ce9f7d", 0x99}, {&(0x7f0000000380)="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", 0x296}], 0x6}, 0x0) 06:38:09 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1000, 0xc2801) write$tun(r0, &(0x7f0000000240)={@val, @void, @eth={@broadcast, @remote, @val, {@llc_tr={0x11, {@llc={0x0, 0x0, "d8"}}}}}}, 0x1d) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FREEZING\x00', 0xfffffdef) 06:38:10 executing program 0: r0 = socket(0x26, 0x5, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) 06:38:10 executing program 4: r0 = fsopen(&(0x7f0000000100)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)='#.-\'%[!\xa8l\x00', 0x0) 06:38:10 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x74, 0x0, &(0x7f0000000280)) 06:38:10 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:11 executing program 2: io_setup(0x100, &(0x7f0000000000)=0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r1, 0x0}]) 06:38:11 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x64, 0x0, 0x0) 06:38:11 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xf, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:38:11 executing program 5: syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x421, &(0x7f0000000240)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}) 06:38:11 executing program 0: syz_mount_image$msdos(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)) 06:38:11 executing program 4: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0xfffffffffffffe35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:38:11 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x19, 0x0, &(0x7f00000001c0)) 06:38:11 executing program 3: mount$9p_fd(0x21000000, 0x0, 0x0, 0x0, 0x0) 06:38:11 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x1) write$nbd(r0, &(0x7f0000000240)={0x67446698, 0x0, 0x0, 0x0, 0x0, "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"}, 0xfffffffffffffdef) 06:38:11 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x77, 0x0, 0x0) 06:38:11 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, 0x0, 0x0) 06:38:12 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) 06:38:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 06:38:12 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 06:38:12 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0xc2801) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FREEZING\x00', 0xfffffdef) 06:38:12 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000040)={'vlan0\x00', @ifru_data=0x0}) 06:38:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000003c00)={0x6, 0x0, 0x0, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x40) 06:38:12 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x1) write$nbd(r0, &(0x7f0000000240), 0x10) 06:38:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 06:38:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000016c0)={&(0x7f0000000300)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast1}}}], 0x20}, 0x0) 06:38:13 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20, 0x0, r2}, 0x20) 06:38:13 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) 06:38:13 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8910, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) 06:38:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000038c0)={0x18, 0x1, &(0x7f00000037c0)=@raw=[@func], &(0x7f0000003800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:38:13 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x22, 0x0, 0x0) 06:38:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{}, {}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 06:38:14 executing program 3: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0xedc000000000, 0x0, 0x0) 06:38:14 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) 06:38:14 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000100)={0x0, 0x32f8}}, 0x0) 06:38:14 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000e, 0x12, r0, 0x8000000) 06:38:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x306, @dev}, 0x2, {0x2, 0x0, @loopback}, 'veth1_to_bond\x00'}) 06:38:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8946, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) 06:38:14 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:38:15 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:15 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000100)={0x0, 0x41, "0aed4a68055485c9f17bcc4f51b903b0a271410c90bca1be47d1d9b84ac3bb739c1af8a0cfa9f7a6e72088d5d56daed4ae31dd5948fc6208f422a76c4097a7fba3"}) 06:38:15 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 06:38:15 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x3, 0x0, 0x0) [ 2083.182051][T15216] 9pnet: Insufficient options for proto=fd 06:38:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x5, 0x0, 0x0) 06:38:15 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000b80), 0x10) 06:38:15 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, 0x14, 0x1, 0x0, 0x0, {0x2c}}, 0x4c}}, 0x0) 06:38:15 executing program 2: fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) 06:38:16 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x7b, 0x0, &(0x7f0000000280)) 06:38:16 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000040)={'gre0\x00', @ifru_data=0x0}) 06:38:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @empty}}) 06:38:16 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x3, 0x0, &(0x7f0000000080)={0x0, 0x0}) 06:38:16 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:27 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000980)=@raw=[@map={0x18, 0x0, 0x1, 0x0, 0x1}], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 06:38:27 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x16}]}) 06:38:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x9c) 06:38:27 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@dev, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "519129", 0x44, 0x2f, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}}}}}, 0x0) 06:38:27 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x1, 0xd4, &(0x7f0000000100)=""/212, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:38:27 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) [ 2095.328641][ T35] audit: type=1326 audit(1632033507.270:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15255 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf6e84549 code=0x0 06:38:27 executing program 2: openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x6001, 0x0) 06:38:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000003c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x40) 06:38:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 06:38:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8927, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) 06:38:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) 06:38:27 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f00000001c0)=0x700) 06:38:28 executing program 5: r0 = socket(0x26, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x7fe) [ 2096.182426][ T35] audit: type=1326 audit(1632033508.120:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15255 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf6e84549 code=0x0 06:38:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(morus640,vmac(seed-generic))\x00'}, 0x58) 06:38:28 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x72, 0x0, 0x0) 06:38:28 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x28, r1, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0) 06:38:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x11, 0x0, 0x0) 06:38:28 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{0x64}]}, 0x10) 06:38:28 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:38:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000100)={'bond_slave_1\x00', @ifru_data=0x0}) 06:38:29 executing program 2: getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) 06:38:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8922, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) 06:38:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) 06:38:29 executing program 4: mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=']) 06:38:29 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000000040)="af1b91f1ffe08935d73139b464df28757443846d25be43957b4c2f16ee19db2c76c684e39cd537b39412a7aec3923cf0dd2619386e45ce0c50475fe450b7a05ed6bdd9c50218337af0bf97d1ff14c3c1413b2f5a705a8e56a581f74b7b8ea53ce419cb23c37d1f134836e5d614a67ccd5fdd58827ffd066107d2b26f80b85b9f", 0x80}, {&(0x7f0000000100)="00636769419623d913c8669989455fd4633af5873dda90f03b25f916bdc658cd2c9d40fde0f8478c2ccfcf40eb49dbfcf8a9453be9e4abfe83b5f48f06435d1b13c956602c6d78a0c14eea470e433d841751c5749ff98be790cfbaef4b698a3124c3fe450b16fbe3555ae066d9b7ec661b6bb23a593365908f9ea3770d7a4b88e8bdf55ddfe168f368db6c289f59af6cd7f9daa3ecb96789d766", 0x9a}, {&(0x7f00000001c0)="ef94296cd4e841a20185a13dd688a53f63c3398a235b8c23a1d6a49d62e252eec2261bd357873ffa48c2a85c724285102c5444ac2800999fdc9a9596cc862b7145c8bcc3dbed706b64dbe5b68c4761e871be6b93c278806824fcc4b7f904e33a4c896beab7e076d10eb0c3cbd150ec5b4f2e5dc7f02512188468f4a009b86ffb67f477d3666a5265b519170384", 0x8d}, {&(0x7f0000000280)="dc890cb35dcb275b8382e4d1eaec", 0xe}, {&(0x7f00000002c0)="54810fe1d55e48dcaff4da9960138ed0a0b34dab2a4b1451ebc117caa30ea97631630338b2656a566aae8d21b377f5618c48089638099ea736adfd0376e7b07523a9146631ad5b64cb7581bf949ce84500f8a1aee0f8c67090e5acf7ea3c73a72ab492d887fa08f7a9f28dcd75e6fbbb8a321f1ab723a54cc45cfd00b53b420378d61db4300d0072aebd30f4756714eb38d628a73949ce9f7d", 0x99}, {&(0x7f0000000380)="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", 0x296}], 0x6}, 0x0) 06:38:29 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000240)={0x0, {{0x2, 0x0, @local}}}, 0x108) [ 2097.668503][T15318] ip6tnl0: mtu less than device minimum [ 2097.788291][T15324] 9pnet: Insufficient options for proto=fd [ 2097.834059][T15324] 9pnet: Insufficient options for proto=fd 06:38:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={@dev, @local, @dev, 0x0, 0x12b, 0x0, 0x0, 0x0, 0x1410011}) 06:38:29 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x7, 0x0, &(0x7f0000000200)=0x7) 06:38:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x82, 0x0, &(0x7f0000000280)) 06:38:30 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:38:30 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x7, 0x0, 0x0) 06:38:30 executing program 4: getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) socketpair(0x2, 0x0, 0xffffdbf2, &(0x7f00000002c0)) 06:38:30 executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) pselect6(0x40, &(0x7f0000000400), &(0x7f0000000440)={0x1f}, 0x0, 0x0, 0x0) 06:38:30 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x32, &(0x7f00000000c0)={0x2000000000000039, &(0x7f0000000000)=[{}, {}, {}]}, 0x4) 06:38:30 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x19, 0x0, 0x0) 06:38:30 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:30 executing program 5: r0 = io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0xf4a0}) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x10000000) 06:38:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x16, 0x0, 0x0) 06:38:31 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x72cbff35d017f28a, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000180)=0x7fff) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 06:38:31 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0xd, 0x0, 0x0) 06:38:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000003580)={&(0x7f00000001c0)=@nfc_llcp={0x2, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, "4d7e4358de8a3dce620455b4f03d0969f195b56d69f9576379dc8ddea85205ff869ce52660305f42f64995487c9e286fd771c31112524a86e6a0ab71de9e82"}, 0x80, &(0x7f0000003380)=[{&(0x7f0000000000)='t', 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000002580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f00000024c0)=[{&(0x7f0000000080)="92", 0x1}], 0x1}, 0x0) 06:38:31 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x300}, 0x0) 06:38:31 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2b, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{}]}, 0x10) 06:38:31 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x1a, 0x0, &(0x7f0000000280)) 06:38:31 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x50, 0x12, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x7}]}, 0x50}}, 0x0) 06:38:32 executing program 4: perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:38:32 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x200, 0x204400) 06:38:32 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:32 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x1a, 0x0, 0x0) 06:38:32 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) utime(&(0x7f0000000080)='./file0\x00', 0x0) 06:38:32 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x8, 0x0, 0x0) 06:38:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x7d, 0x0, 0x0) 06:38:32 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000280)=[{0x15}, {}]}, 0x10) 06:38:32 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:32 executing program 2: r0 = socket(0x26, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) 06:38:32 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x300}, 0x0) 06:38:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x25, 0x0, 0x0) 06:38:33 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:38:33 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/cgroups\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 06:38:33 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:33 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000100)={0x0}}, 0x0) 06:38:33 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) 06:38:33 executing program 0: syz_open_dev$vcsn(&(0x7f00000003c0), 0x2, 0x200) 06:38:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8937, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 06:38:33 executing program 5: mount$9p_fd(0x0, &(0x7f0000000780)='.\x00', 0x0, 0x1020, 0x0) 06:38:33 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:33 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x7c, 0x0, 0x0) 06:38:34 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1000, 0xc2801) write$tun(r0, &(0x7f0000000240)={@val, @void, @eth={@broadcast, @remote, @val, {@llc_tr={0x11, {@llc={0x0, 0x0, "d8"}}}}}}, 0x1d) 06:38:34 executing program 0: r0 = fsopen(&(0x7f0000000100)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='\xff\xdb\xb7gP\x00\xd5\x87;\xd8\x9a\xd3\x05\x9bvl\xf2\xf8\xa05\xb8\xf3\x8f>\x03\t\xf7\xac\x80\x9e|\x98\x0f\x15q%\xd1\xb6fma\xcb\b\x17a[0D\x92\xa42\x87\xb97\xa1\x0e\x00\x06\x00\x00\x00\x00C\xaf\xb9\x1d\xdc\xbf\x96(&A\xf9\xe1\x00', &(0x7f00000000c0)='syztnl0\x00', 0x0) 06:38:34 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000003580)={&(0x7f00000001c0)=@nfc_llcp={0x2, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, "4d7e4358de8a3dce620455b4f03d0969f195b56d69f96c6379dc8ddea85226ff869ce52660305f42f64995e51cc4a66fd771c31112524a86e6a0ab71de9e82"}, 0x80, &(0x7f0000003380)=[{&(0x7f0000000240)='t', 0x1}], 0x1}, 0x0) getsockname(r0, 0x0, &(0x7f0000000080)) 06:38:34 executing program 5: mount$9p_fd(0x0, &(0x7f0000000780)='.\x00', 0x0, 0x8000b, 0x0) 06:38:34 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:34 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x1600bd74, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) 06:38:34 executing program 3: r0 = fsopen(&(0x7f0000000100)='romfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 06:38:34 executing program 0: clock_gettime(0x4, &(0x7f0000000440)) 06:38:34 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000100)) 06:38:35 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000038c0)={0x18, 0x2, &(0x7f00000037c0)=@raw=[@jmp, @func], &(0x7f0000003800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:38:35 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:35 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000000)=@in={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}, @init={0x18}, @prinfo={0x18, 0x84, 0x5, {0x20}}], 0x60}, 0x0) 06:38:35 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), 0x1) 06:38:35 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002f40)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:38:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x65, 0x0, 0x0) 06:38:35 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x90) 06:38:35 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0)) 06:38:35 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:35 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x84, 0x6, 0x0, &(0x7f00000001c0)) 06:38:36 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x31, 0x0, &(0x7f00000001c0)) 06:38:36 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x9, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{}]}, 0x10) 06:38:36 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x71, 0x0, 0x0) 06:38:36 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:36 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x80141, 0x0) write$FUSE_BMAP(r0, 0x0, 0x0) 06:38:36 executing program 0: r0 = fsopen(&(0x7f0000000080)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 06:38:36 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2d, &(0x7f0000000040)=[{}]}) 06:38:36 executing program 3: socketpair(0x21, 0x80000, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), 0xffffffffffffffff) 06:38:36 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x12, 0x0, 0x0) 06:38:36 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 06:38:36 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:36 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0xc, 0x0, 0x0) 06:38:37 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x6c) 06:38:37 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) accept4$inet(r0, 0x0, 0x0, 0x0) 06:38:37 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xb, &(0x7f0000000100)={&(0x7f0000000280)={0x54, 0x12, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x54}}, 0x0) 06:38:37 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(0xffffffffffffffff, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:37 executing program 3: fsopen(&(0x7f0000000040)='bpf\x00', 0x0) 06:38:37 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x10, 0x0, 0x0) 06:38:37 executing program 2: socketpair(0x21, 0x80000, 0x0, &(0x7f0000000000)) 06:38:37 executing program 5: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x2000, 0x0, &(0x7f0000000300)=ANY=[]) 06:38:37 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) 06:38:37 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x7a, 0x0, &(0x7f0000000280)) 06:38:38 executing program 0: perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) 06:38:38 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(0xffffffffffffffff, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:38 executing program 2: r0 = fsopen(&(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='\xff\xdb\xb7gP\x00\xd5\x87;\xd8\x9a\xd3\x05\x9bvl\xf2\xf8\xa05\xb8\xf3\x8f>\x03\t\xf7\xac\x80\x9e|\x98\x0f\x15q%\xd1\xb6fma\xcb\b\x17a[0D\x92\xa42\x87\xb97\xa1\x0e\x00\x06\x00\x00\x00\x00C\xaf\xb9\x1d\xdc\xbf\x96(&A\xf9\xe1\x00', &(0x7f00000000c0)='syztnl0\x00', 0x0) 06:38:38 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x1) write$nbd(r0, &(0x7f0000000240)={0x67446698, 0x0, 0x0, 0x0, 0x0, "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"}, 0xfffffdef) 06:38:38 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002500), 0xc840, 0x0) 06:38:38 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) read$FUSE(r0, &(0x7f0000004b00)={0x2020}, 0x2020) 06:38:38 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(0xffffffffffffffff, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) 06:38:38 executing program 2: syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)) 06:38:39 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) [ 2107.229619][ T35] audit: type=1326 audit(1632033519.170:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15557 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf6f5c549 code=0x0 06:38:39 executing program 3: faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x6e3, 0x2, &(0x7f0000000280)=[{&(0x7f0000000200)="cb88958d5fddba1b9bab1620f8e8536098f6918a9ddfab7153ecab97aed6b8286812b6", 0x23, 0x10001}, {&(0x7f0000000400)="28c8d0b849db2b8743fab1a22281d873a5cf385fed6d0de91240428c1c8b702150dc456e499e412e7d2a867ac20eb6a44f1193678d87aa5a705f0369a8c77d1181a5e9095cd4046aae13a5a2f7bc8b58b168b66bba1012a9e2581817e0efe29f79f0f5a4e17d82597853c8a7c976dc80a9343c3563cfca21979a14426027c557610730859ac57e66a1c0b699561750cc1c9b55c3f8dfb4883336024ef7bdc1f5edbe077dd3e1a43c4510f17922b71ee67722e49eb724e3f006251500022784dedc52b27782cd8c4058a4902f9f1cfba7e27d886ec101db761f3ba9a0934b4b7af6ee8d6bfdb450ee0064d384b181b991444b", 0xf2, 0x6a04}], 0x801000, &(0x7f0000000300)={[{@dots}, {@dots}, {@nodots}, {@nodots}], [{@subj_type={'subj_type', 0x3d, '\x85\xba\xa1t\xf0\xcb\x11B'}}, {@uid_lt}, {@appraise}, {@smackfsdef={'smackfsdef', 0x3d, '^^e*&'}}, {@context={'context', 0x3d, 'root'}}, {@euid_eq}]}) [ 2107.296693][ T3121] ieee802154 phy0 wpan0: encryption failed: -22 [ 2107.303440][ T3121] ieee802154 phy1 wpan1: encryption failed: -22 06:38:39 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, 0x0, 0x0, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x8934, 0x0) 06:38:39 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x3, 0x0, 0x0) 06:38:39 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x2, 0x0, &(0x7f00000001c0)) 06:38:40 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x2287}, 0x9c) [ 2108.044363][ T35] audit: type=1326 audit(1632033519.990:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15557 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf6f5c549 code=0x0 06:38:40 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x23, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) 06:38:40 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, 0x0, 0x0, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:40 executing program 5: socketpair(0xa, 0x3, 0x3, &(0x7f0000000040)) 06:38:40 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x6e, 0x0, 0x0) 06:38:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000003e00)={&(0x7f0000003d00), 0xc, &(0x7f0000003dc0)={0x0}}, 0x0) 06:38:40 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x84, 0x3, 0x0, &(0x7f00000001c0)) 06:38:40 executing program 2: r0 = io_uring_setup(0x6440, &(0x7f0000000080)) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x13, r0, 0x10000000) 06:38:40 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2}}, @const]}}, &(0x7f0000000100)=""/168, 0x3e, 0xa8, 0x1}, 0x20) 06:38:40 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, 0x0, 0x0, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:40 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x21, 0x0, 0x0) 06:38:40 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0xd, 0x0, &(0x7f00000001c0)) 06:38:41 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:38:41 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18, 0x0, r1}, 0x18) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 06:38:41 executing program 5: pselect6(0x40, &(0x7f0000004340)={0x7}, 0x0, 0x0, &(0x7f0000004400)={0x77359400}, 0x0) 06:38:41 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00), 0x0, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:41 executing program 0: syz_open_dev$vcsn(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000080), 0x4) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x6e3, 0x2, &(0x7f0000000280)=[{&(0x7f0000000200)="cb88958d5fddba1b9bab1620f8e8536098f6918a9ddfab7153ecab97aed6b8286812b647dfdf707bbf7747178fb130f50a0966e5691c8d830932f455", 0x3c, 0x10001}, {&(0x7f0000000400)="28c8d0b849db2b8743fab1a22281d873a5cf385fed6d0de91240428c1c8b702150dc456e499e412e7d2a867ac20eb6a44f1193678d87aa5a705f0369a8c77d1181a5e9095cd4046aae13a5a2f7bc8b58b168b66bba1012a9e2581817e0efe29f79f0f5a4e17d82597853c8a7c976dc80a9343c3563cfca21979a14426027c557610730859ac57e66a1c0b699561750cc1c9b55c3f8dfb4883336024ef7bdc1f5edbe077dd3e1a43c4510f17922b71ee67722e49eb724e3f006251500022784dedc52b27782cd8c4058a4902f9f1cfba7e27d886ec101db761f3ba9a0934b4b7af6ee8d6bfdb450ee0064d384b181b991444b64", 0xf3, 0x6a04}], 0x801000, &(0x7f0000000300)={[{@dots}, {@nodots}], [{@uid_lt}, {@appraise}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '^^e*&'}}]}) 06:38:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8913, &(0x7f0000000780)={'wpan4\x00'}) 06:38:41 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 06:38:41 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x7, 0x0, 0x0) 06:38:41 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x32, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:38:41 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00), 0x0, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:42 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xc, 0x0, 0x0) 06:38:42 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockname(r0, 0x0, &(0x7f0000000080)) 06:38:42 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0xb, 0x0, 0x0) 06:38:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000003e00)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003dc0)={0x0}}, 0x0) 06:38:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x891d, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) 06:38:42 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00), 0x0, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:42 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:38:42 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x4, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) 06:38:42 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2d, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:38:42 executing program 0: syz_emit_ethernet(0x82, &(0x7f0000000000)={@dev, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "519129", 0x4c, 0x2f, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, {[@dstopts={0x67}]}}}}}, 0x0) 06:38:43 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{0x0}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}}, 0x0) 06:38:43 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000280)=0x4) 06:38:43 executing program 2: syz_open_dev$vcsn(&(0x7f00000003c0), 0x2, 0x0) 06:38:43 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80000043, 0x0) 06:38:43 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) 06:38:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000380)) 06:38:43 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{0x0}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:43 executing program 4: clock_getres(0x5bb736434854c8a2, 0x0) 06:38:43 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x1) 06:38:43 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:38:43 executing program 0: socketpair(0x10, 0x80002, 0x9, &(0x7f0000003800)) 06:38:44 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{}]}, 0x10) 06:38:44 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{0x0}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:44 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x4, 0x6a842) write$cgroup_freezer_state(r0, 0x0, 0xfdef) 06:38:44 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x15, 0x0, 0x0) 06:38:44 executing program 2: fchmodat(0xffffffffffffffff, &(0x7f0000000f00)='./file0\x00', 0x0) 06:38:44 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:38:44 executing program 5: bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0}, 0x38) 06:38:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x0, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) 06:38:44 executing program 3: futimesat(0xffffffffffffffff, &(0x7f0000003c40)='./file0\x00', &(0x7f0000003c80)={{}, {0x0, 0x2710}}) 06:38:44 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r1}) 06:38:45 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)) 06:38:45 executing program 2: fchmodat(0xffffffffffffffff, &(0x7f0000000f00)='./file0\x00', 0x0) 06:38:45 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000001400), 0x210402, 0x0) 06:38:45 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000180)={0xfffffffe}) 06:38:45 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0xf427dd27d7a4d31f) 06:38:45 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000014000100000000e5ffffffff0132a9a6748e6084ff"], 0x4c}}, 0x0) 06:38:45 executing program 2: r0 = fsopen(&(0x7f0000000000)='pstore\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='\xff\xdb\xb7gP\x00\xd5\x87;\xd8\x9a\xd3\x05\x9bvl\xf2\xf8\xa05\xb8\xf3\x8f>\x03\t\xf7\xac\x80\x9e|\x98\x0f\x15q%\xd1\xb6fma\xcb\b\x17a[0D\x92\xa42\x87\xb97\xa1\x0e\x00\x06\x00\x00\x00\x00C\xaf\xb9\x1d\xdc\xbf\x96(&A\xf9\xe1\x00', &(0x7f00000000c0)='syztnl0\x00', 0x0) 06:38:45 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0xf, 0x0, &(0x7f00000001c0)) 06:38:45 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000003580)={&(0x7f00000001c0)=@nfc_llcp={0x2, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, "4d7e4358de8a3dce620455b4f03d0969f195b56d69f9576379dc8ddea85205ff869ce52660305f42f64995487c9e286fd771c31112524a86e6a0ab71de9e82"}, 0x80, &(0x7f0000003380)=[{&(0x7f0000000000)='t', 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000002580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f00000024c0)=[{&(0x7f0000000080)="92", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x4041) 06:38:46 executing program 0: r0 = fsopen(&(0x7f0000000000)='fusectl\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 06:38:46 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000280)={'filter\x00', 0x4, "5491d2bf"}, &(0x7f0000000300)=0x28) 06:38:46 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r1}) 06:38:46 executing program 2: mount$9p_fd(0x0, &(0x7f0000000780)='.\x00', 0x0, 0x86486, 0x0) 06:38:46 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8942, &(0x7f0000000000)={'macvtap0\x00', @ifru_names}) 06:38:46 executing program 3: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8cffffff, &(0x7f0000000300)=ANY=[]) 06:38:46 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x79, 0x0, 0x0) 06:38:46 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000080)={@empty}, 0x14) 06:38:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000003e00)={&(0x7f0000003d00), 0xc, 0x0}, 0x0) 06:38:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x75, 0x0, 0x0) 06:38:47 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$sock(r0, &(0x7f00000045c0)={0x0, 0x0, 0x0}, 0x0) 06:38:47 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0xc2801) write$cgroup_freezer_state(r0, 0x0, 0x0) 06:38:47 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) 06:38:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x2f, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) [ 2115.610608][T15759] 9pnet: Insufficient options for proto=fd 06:38:47 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r1}) 06:38:47 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000003c0), 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x9, 0x4) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x100) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x6e3, 0x2, &(0x7f0000000280)=[{&(0x7f0000000200)="cb88958d5fddba1b9bab1620f8e8536098f6918a9ddfab7153ecab97aed6b8286812b6", 0x23, 0x10001}, {&(0x7f0000000400)="28c8d0b849db2b8743fab1a22281d873a5cf385fed6d0de91240428c1c8b702150dc456e499e412e7d2a867ac20eb6a44f1193678d87aa5a705f0369a8c77d1181a5e9095cd4046aae13a5a2f7bc8b58b168b66bba1012a9e2581817e0efe29f79f0f5a4e17d82597853c8a7c976dc80a9343c3563cfca21979a14426027c557610730859ac57e66a1c0b699561750cc1c9b55c3f8dfb4883336024ef7bdc1f5edbe077dd3e1a43c4510f17922b71ee67722e49eb724e3f006251500022784dedc52b27782cd8c4058a4902f9f1cfba7e27d886ec101db761f3ba9a0934b4b7af6ee8d6bfdb450ee0064d384", 0xec, 0x6a04}], 0x801000, &(0x7f0000000300)={[{@dots}, {@nodots}, {@dots}, {@nodots}, {@nodots}], [{@subj_type={'subj_type', 0x3d, '\x85\xba\xa1t\xf0\xcb\x11B'}}, {@uid_lt}, {@appraise}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '^^e*&'}}, {@context={'context', 0x3d, 'root'}}]}) 06:38:47 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x22, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) 06:38:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xfffffffffffffd8d}}, 0x0) 06:38:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000003700)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc}, 0x40) 06:38:47 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f00000003c0), 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) [ 2116.022705][T15765] loop5: detected capacity change from 0 to 256 06:38:48 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) [ 2116.227214][T15777] loop5: detected capacity change from 0 to 256 06:38:48 executing program 4: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc0ed0000, &(0x7f0000000300)=ANY=[]) 06:38:48 executing program 2: mount$9p_fd(0x0, &(0x7f0000000780)='.\x00', 0x0, 0x40040, 0x0) 06:38:48 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@const={0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000100)=""/168, 0x28, 0xa8, 0x1}, 0x20) 06:38:48 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) 06:38:48 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) 06:38:49 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:49 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) 06:38:49 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000038c0)={0x18, 0x2, &(0x7f00000037c0)=@raw=[@jmp, @func], &(0x7f0000003800)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:38:49 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x17, 0x0, &(0x7f00000001c0)) 06:38:49 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x7b, 0x0, 0x0) 06:38:49 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000000040)="af1b91f1ffe08935d73139b464df28757443846d25be43957b4c2f16ee19db2c76c684e39cd537b39412a7aec3923cf0dd2619386e45ce0c50475fe450b7a05ed6bdd9c50218337af0bf97d1ff14c3c1413b2f5a705a8e56a581f74b7b8ea53ce419cb23c37d1f134836e5d614a67ccd5fdd58827ffd066107d2b26f80b85b9f", 0x80}, {&(0x7f0000000100)="00636769419623d913c8669989455fd4633af5873dda90f03b25f916bdc658cd2c9d40fde0f8478c2ccfcf40eb49dbfcf8a9453be9e4abfe83b5f48f06435d1b13c956602c6d78a0c14eea470e433d841751c5749ff98be790cfbaef4b698a3124c3fe450b16fbe3555ae066d9b7ec661b6bb23a593365908f9ea3770d7a4b88e8bdf55ddfe168f368db6c289f59af6cd7f9daa3ecb96789d766a2", 0x9b}, {&(0x7f00000001c0)="ef94296cd4e841a20185a13dd688a53f63c3398a235b8c23a1d6a49d62e252eec2261bd357873ffa48c2a85c724285102c5444ac2800999fdc9a9596cc862b7145c8bcc3dbed706b64dbe5b68c4761e871be6b93c278806824fcc4b7f904e33a4c896beab7e076d10eb0c3cbd150ec5b4f2e5dc7f02512188468f4a009b86ffb67f477d3666a5265b519170384", 0x8d}, {&(0x7f0000000280)="dc890cb35dcb275b8382e4d1eaec", 0xe}, {&(0x7f00000002c0)="54810fe1d55e48dcaff4da9960138ed0a0b34dab2a4b1451ebc117caa30ea97631630338b2656a566aae8d21b377f5618c48089638099ea736adfd0376e7b07523a9146631ad5b64cb7581bf949ce84500f8a1aee0f8c67090e5acf7ea3c73a72ab492d887fa08f7a9f28dcd75e6fbbb8a321f1ab723a54cc45cfd00b53b420378d61db4300d0072aebd30f4756714eb38d628a73949ce9f7d", 0x99}, {&(0x7f0000000380)="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", 0x296}], 0x6}, 0x0) 06:38:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0xc0189436, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) 06:38:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000180)=ANY=[]}) 06:38:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}, 0x0) 06:38:49 executing program 0: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0) 06:38:50 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:38:50 executing program 5: mount$9p_fd(0xf0ffffffffffff, 0x0, 0x0, 0x0, 0x0) 06:38:50 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:50 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x31, 0x0, 0x0) 06:38:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x2, 0x4) 06:38:50 executing program 3: faccessat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 06:38:50 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xd, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x40) 06:38:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x29, 0x0, &(0x7f00000001c0)) 06:38:50 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x34, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:38:50 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2e, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{}]}, 0x10) 06:38:51 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2d, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{}]}, 0x10) 06:38:51 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x1600bd7e, 0x0, 0x0) 06:38:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x22, 0x0, 0x0) 06:38:51 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0xfffffffffffffee3) 06:38:51 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) 06:38:51 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 06:38:51 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x64, 0x0, 0x0, 0x40000000}]}, 0x10) 06:38:51 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) 06:38:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000140)=@pppol2tp, 0x80, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2}, 0x103) 06:38:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x894a, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) 06:38:52 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x29, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{}]}, 0x10) 06:38:52 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x1) write$nbd(r0, 0x0, 0x0) 06:38:52 executing program 5: io_setup(0x101, &(0x7f0000000000)=0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001340)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0}]) 06:38:52 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{0x34}]}, 0x10) 06:38:52 executing program 4: faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x801000, &(0x7f0000000300)) 06:38:52 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) shutdown(r0, 0x1) 06:38:52 executing program 3: syz_open_dev$vcsn(&(0x7f0000000600), 0x0, 0x400602) 06:38:53 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 06:38:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x7d, 0x0, &(0x7f0000000280)) 06:38:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x700}}) 06:38:53 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x7, 0x0, &(0x7f00000001c0)) 06:38:53 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x23, 0x0, 0x0) 06:38:53 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x3, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x168df}, 0x78) 06:38:53 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000140)={0x2020}, 0x2020) 06:38:53 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x6c) 06:38:53 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000280)) 06:38:54 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2f, &(0x7f00000000c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}, 0x4) 06:38:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8943, &(0x7f0000000780)={'wpan4\x00'}) 06:38:54 executing program 5: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[]) lsetxattr$security_ima(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=@ng, 0x2, 0x0) 06:38:54 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 06:38:54 executing program 4: faccessat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x6e3, 0x2, &(0x7f0000000280)=[{&(0x7f0000000200)="cb88958d5fddba1b9bab1620f8e8536098f6918a9ddfab7153ecab97aed6b8286812b647dfdf707bbf7747178fb130f50a0966e5691c8d830932f455cf8ff671cb29e02147b5", 0x46, 0x10001}, {&(0x7f0000000400)="28c8d0b849db2b8743fab1a22281d873a5cf385fed6d0de91240428c1c8b702150dc456e499e412e7d2a867ac20eb6a44f1193678d87aa5a705f0369a8c7", 0x3e, 0x6a04}], 0x801000, &(0x7f0000000300)={[{@dots}, {@nodots}, {@dots}, {@nodots}, {@nodots}], [{@subj_type={'subj_type', 0x3d, '\x85\xba\xa1t\xf0\xcb\x11B'}}, {@uid_lt}, {@appraise}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '^^e*&'}}, {@context={'context', 0x3d, 'root'}}, {@euid_eq}]}) 06:38:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40002020) 06:38:54 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40, 0x401) write$nbd(r0, &(0x7f0000000240)={0x67446698, 0x0, 0x0, 0x0, 0x0, "fd997341273679641dae3f6a98905f8a6ef8c588b544dfaba69eb4fe7a892287c6c44643f88870bad98c9321a0eae8086b47bdc870c821956e0fbc966d548034984248a8d13bcc7e3210d5d552f42b55f724854e533011ca8a18b9ff5d718dbcad42e0cbe881d66e6bae969bddb9ba5cf4fa37e0ffb5ecfa8556c8b6079396d5aa5b6d2b27217ef672249de509ad7ea14b70e8448cf19abcaf3f49c9a1e05d6afb46e0f876f7632cb2fee5917b697180b41a22437df6d69d8921752201f533f0bd3c659200434ff23d9c974f45e48e25dcd409054db1b8ceacb8488e944d8f08741f0bebf93da42088a901e853e3b84ce1599f869d292b5569dcf008d89ce3de479e21419c0a54012a88806e6481e40167a6af41d33a19db15f86f233af43132b1ff0a1371ba50c1348a7704cfed4583ccec87c3b9c9256c76fae0e750e4f38f28fef7dd5b0f2209f0527a7c7ffe90e6d91dacf317afa3a8dcc5f0e1784f75a17044ff2e0e1df459bbfa14c771bc10d93832c67647563a60e72aebfa8e56e2f96baab2363107a55cc4c8ad2f00f040cf920f4d9e5c499cb10cc348cbcc8bedff08f6c7d6170fcf7a0c19dc956e3be86cdef6e6b22976ba69a2749fadcf818e34a201ec1c89c1331ccea4ab98f92da75a803b5c7eadf19b8d3e7f6577ea8c01c2238e118dacea0b0401dc58c6e92a5d63b808b2eb6213dc0c01db3b9911ce7a"}, 0x20f) [ 2122.821902][T15927] loop4: detected capacity change from 0 to 256 06:38:54 executing program 5: syz_emit_ethernet(0x14a, &(0x7f0000000000)={@dev, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "519129", 0x114, 0x2f, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, {[@dstopts={0x0, 0x19, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, @enc_lim, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo, @generic={0x0, 0x50, "11d4176dcabeace22ba23595850bd82e255d03e3dfe43d7326acb7a878b5a49f8414b223a11f3b1c7b56f7f8509cedf1241445710e337686f8a66a144ce4a17a4586383a333cd8a17fc0c11882ecec42"}, @hao={0xc9, 0x10, @mcast2}, @jumbo]}]}}}}}, 0x0) 06:38:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="73797a746e6c300000890a1fcb2d2d3bad"]}) 06:38:55 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xe, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:38:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000003580)={&(0x7f00000001c0)=@nfc_llcp={0x2, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, "4d7e4358de8a3dce620455b4f03d0969f195b56d69f9576379dc8ddea85205ff869ce52660305f42f64995487c9e286fd771c31112524a86e6a0ab71de9e82"}, 0x80, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000002580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f00000024c0)=[{&(0x7f0000000080)="92", 0x1}, {0x0}], 0x2}, 0x0) 06:38:55 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={0x0}}, 0x0) 06:38:55 executing program 2: socketpair(0xa, 0x3, 0x0, &(0x7f0000000080)) 06:38:55 executing program 3: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',rootmode=00000000000000000060000,user_id']) 06:38:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) [ 2123.904536][T15956] fuse: Bad value for 'user_id' [ 2123.920299][T15956] fuse: Bad value for 'user_id' 06:38:55 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 06:38:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000039c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="350b00007452d1031c7f0e140e0e9f"], 0x24}}, 0x0) 06:38:55 executing program 5: syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x2000, 0x0, &(0x7f0000000300)=ANY=[]) 06:38:56 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000280)=[{0x5}, {}, {0x6}]}, 0x10) 06:38:56 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x2, 0x0, 0x0, 0x40000000}]}, 0x10) 06:38:56 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xb, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:38:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@tipc, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="26fe4d0cd0", 0x3}, {&(0x7f0000000100)="d3c05fb6d8e2da816fb6b33245312e53e88bd674aa2a2c69545fa183ae2a4918153107c83a181db9099faf93b70e2f71a7ed3b51fb3603e03c78678dce17ba1b9df6987b782e6553717be33f688867915af4a0da1bc29886b97f27fcfb7a134a9089314732ed469e26eeba172214057817389b4ef72a26dc7022", 0x7a}, {&(0x7f0000000500)="21cf27df362d9a8477158ec06db8a9fb3e18e91e6f98101028422e498f45d03b9ac8d322da94a851b954cc3f5aeecc2d3bee43d4040268b1de4bef0d29162ec3b96d06f99f81516855ba8590e8094d84cff26010a5a865e52f10706099baf45dde030422b69515d6aba61587b2cdce43eeabfd3632757cb1378452f933cefec3f582bcfab78071892883b05650de5cbea996e1c8e6546400"/164, 0x92}, {&(0x7f0000000240)="f792f14832e9f49290dc8a17505556067cd1a7ec8115b04e6666e041db55464379c73fbe6562f75a6c6d99d3aa92edd76c94f90d9006ecaa6c1fe7949586170e8e9f111b7ed452d8c560bef055ff298fb6eb903ebc8cda0a56ecd82019609117f9fae5cf2f5efa7a4055b231d4b0335109b326ad57a04264bc102e1d5e3b526c6c2873811ed9e4db4de370422e9df506596f266915af209ea9a8c4aec88900d304705d47e1668bc39e574e01d1ebbc58eb12b687db6e8209fe6b69bbae370776b8d55abbb198d0adb4ae35d725489be5fe81731e9a338a9abdeda356ca", 0xdd}, {&(0x7f0000000340)="15b402fb226769ee7f8d7cd9d42e9b3c96ff8e200b909650897d2172feae6dc6d32d080c86ade11eb6bf480453d5e56f8df027ec96b4e691ed822f73d2e6acf700e21fcdd14ab7bd51f3d5ff45d38045689d8660fe5c4b35e7aea3824e12bc9c5550a3ed12b6053ab63d292e0e694676c46681eb9ded8b050a0a91ec433d8a00046015bca710ec7c8d051721382e9298e03412038839fda90df863e1a37b9d6fa204ea298e9418aaf28b28e938fb32ebe8e456d8d58f54c81ab56cd7d4899296e175", 0xc2}], 0x197}, 0x40) 06:38:56 executing program 5: r0 = fsopen(&(0x7f0000000100)='romfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000001c0)='rw\x00', 0x0, 0x0) 06:38:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x17, 0x0, 0x0) 06:38:56 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) 06:38:56 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2d, &(0x7f0000000200)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @multicast1}}}, 0x108) 06:38:56 executing program 0: syz_mount_image$msdos(&(0x7f0000000180), 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)) 06:38:57 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)) 06:38:57 executing program 5: fsopen(&(0x7f0000000100)='romfs\x00', 0x0) 06:38:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000003780), r1) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={0x0}}, 0x0) 06:38:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000003780), r1) syz_genetlink_get_family_id$net_dm(&(0x7f0000003d40), r0) 06:38:57 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000280)=[{0x5}, {}, {0x16}]}, 0x10) 06:38:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8d, 0x0) 06:38:57 executing program 5: socketpair(0x10, 0x80002, 0x0, &(0x7f0000003800)) 06:38:57 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000280)=[{}, {0x6}]}, 0x10) 06:38:57 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000480)) select(0x40, &(0x7f00000003c0), &(0x7f0000000400)={0x8}, &(0x7f0000000440)={0x5}, 0x0) 06:38:58 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1d, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{}]}, 0x10) 06:38:58 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x21, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) 06:38:58 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{0x15}]}, 0x10) 06:38:58 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)) 06:38:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x2f, 0x2, 0x20, 0x45, 0x8, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, 0x80, 0x73, 0x7fff}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r2, 0x4, 0x4, 0x0, 0x3, 0x3b, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x40, 0x7, 0x7b47}}) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f00000006c0)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8a00230a}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001603ff0000000b00000016c3016045df990e237000800000b10000", @ANYRES32=0x0, @ANYBLOB="14000200fe88000000000000000000000000010114000100"/40], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x2, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@private1, @in6=@empty}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000500)=0xe8) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000240)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x0, 0x8, 0x23, @mcast1, @private1, 0x8000, 0x8, 0x8001, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', r5, 0x29, 0x1, 0x7, 0x3, 0x20, @empty, @private0, 0x20, 0x10, 0x1f, 0x4}}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl2\x00', r5, 0x4, 0x4, 0x7, 0x8, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x10, 0x1, 0x2, 0x9}}) 06:38:58 executing program 0: socketpair(0x34, 0x0, 0x0, &(0x7f0000000000)) 06:38:58 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:38:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x7, 0x0, 0x0, 0x0) 06:38:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x18, 0x0, 0x0) 06:38:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={0x0}}, 0x0) 06:38:59 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x54, 0x12, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x54}}, 0x0) 06:38:59 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r0, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r1}, 0x18) 06:38:59 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000540)='($O&\t', &(0x7f0000000500)='./file0\x00', r0) 06:38:59 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/187, &(0x7f00000000c0)=0xbb) 06:38:59 executing program 4: io_setup(0x20, &(0x7f00000014c0)) 06:39:00 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/167, 0xa7}], 0x1, 0x0, 0x0) dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)) 06:39:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 06:39:00 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0x103001) write$nbd(r0, &(0x7f0000000240)=ANY=[], 0x1001) 06:39:00 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) 06:39:00 executing program 5: r0 = fsopen(&(0x7f0000000000)='romfs\x00', 0x0) io_setup(0x20, &(0x7f00000014c0)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r1, 0x2, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 06:39:00 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f00000000c0)={0x6}, 0x0, 0x0, 0x0) 06:39:00 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{}]}, 0x10) 06:39:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x6, 0x0, 0x0) 06:39:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x0, 0x0, 0x0) 06:39:00 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8948, &(0x7f00000000c0)={'rose0\x00', @ifru_flags}) 06:39:01 executing program 3: syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)={[{@dots}, {@nodots}], [{@subj_type={'subj_type', 0x3d, '\x85\xba\xa1t\xf0\xcb\x11B'}}]}) 06:39:01 executing program 0: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000200)="cb", 0x1, 0x10001}, {&(0x7f0000000400)='(', 0x1}], 0x0, 0x0) 06:39:01 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000016c0)={&(0x7f0000000300)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @multicast1}}}], 0x20}, 0x0) 06:39:01 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f0000000100)=""/168, 0x26, 0xa8, 0x1}, 0x20) 06:39:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2d, &(0x7f0000000200)={0x10001, {{0x2, 0x0, @local}}, {{0x2, 0x0, @multicast1}}}, 0x108) 06:39:01 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x200, 0x204400) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, 0x0) 06:39:01 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{}, {}, 0x8, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 06:39:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8910, &(0x7f0000000780)={'wpan4\x00'}) 06:39:01 executing program 2: clock_gettime(0x6, &(0x7f0000000240)) 06:39:01 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000300)) 06:39:01 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000038c0)={0x18, 0x1, &(0x7f00000037c0)=@raw=[@jmp], &(0x7f0000003800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:39:02 executing program 3: r0 = fsopen(&(0x7f0000000100)='romfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 06:39:02 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) 06:39:02 executing program 4: perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25c24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:39:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0xc0189436, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @empty}}) 06:39:02 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40, 0x401) write$nbd(r0, &(0x7f0000000240)={0x67446698, 0x0, 0x0, 0x0, 0x0, "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"}, 0xfa4) 06:39:02 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000000040)={0x20, 0x0, r1, {0x0, 0x4}}, 0x20) 06:39:02 executing program 4: syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), 0xffffffffffffffff) 06:39:02 executing program 3: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0) 06:39:02 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40, 0x401) write$nbd(r0, &(0x7f0000000240), 0x10) 06:39:03 executing program 2: r0 = fsopen(&(0x7f0000000180)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000100)='cgroup\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) 06:39:03 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003600)={&(0x7f00000023c0)={0x54, 0x13, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x54}}, 0x0) 06:39:03 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x10, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{}]}, 0x10) 06:39:03 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, 0x0) 06:39:03 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x9, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:39:03 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='debug']) 06:39:03 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x19, 0x0, 0x0) 06:39:03 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000100)={&(0x7f0000000280)={0x54, 0x12, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x54}}, 0x0) 06:39:03 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x24, 0x0, 0x0) 06:39:03 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0]) 06:39:04 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0xc2801) write$tun(r0, 0x0, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FREEZING\x00', 0xfffffdef) 06:39:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8921, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 06:39:04 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) 06:39:04 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @multicast2}, {0x0, @dev}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'geneve1\x00'}) [ 2132.322699][T16168] 9pnet: Insufficient options for proto=fd [ 2132.498354][ T35] audit: type=1326 audit(1632033544.440:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16171 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf6f54549 code=0x0 06:39:04 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}) 06:39:04 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2}, 0x103) 06:39:04 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0xb, 0x0, &(0x7f00000001c0)) 06:39:04 executing program 1: fsopen(&(0x7f0000000100)='bdev\x00', 0x0) 06:39:05 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x41, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:39:05 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x48, {0x2, 0x0, @dev}, 'veth0_to_batadv\x00'}) 06:39:05 executing program 5: mount$9p_fd(0x0, &(0x7f0000000780)='.\x00', 0x0, 0x1000000, 0x0) 06:39:05 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f00000000c0)={0x0, 0x0}, 0x10) [ 2133.322250][ T35] audit: type=1326 audit(1632033545.260:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16171 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf6f54549 code=0x0 06:39:05 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x1001) 06:39:05 executing program 2: syz_open_dev$vcsn(&(0x7f0000000080), 0x1000, 0x40002) 06:39:05 executing program 3: r0 = socket(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 06:39:05 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000014001fffffff00e5ffffffff01"], 0x4c}}, 0x0) 06:39:05 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x29, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:39:05 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000038c0)={0x0, 0x0, 0x0, &(0x7f0000003800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:39:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x1}, 0x40) 06:39:06 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 06:39:06 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{}]}, 0x10) 06:39:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000038c0)={0x18, 0x1, &(0x7f00000037c0)=@raw=[@jmp], &(0x7f0000003800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:39:06 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) 06:39:06 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x300}, 0x0) 06:39:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000003580)={&(0x7f00000001c0)=@nfc_llcp={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "4d7e4358de8a3dce620455b4f03d0969f195b56d69f96c6379dc8ddea85226ff869ce52660305f42f64995e51cc4a66fd771c31112524a86e6a0ab71de9e82"}, 0x80, &(0x7f0000003380)=[{&(0x7f0000000240)='Z', 0x1}], 0x1}, 0x200000c3) 06:39:06 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x83, 0x0, 0x0) 06:39:06 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/cgroups\x00', 0x0, 0x0) 06:39:06 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x5b, 0x103001) write$nbd(r0, &(0x7f0000000240)=ANY=[], 0x1001) 06:39:06 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0xc, 0x0, &(0x7f00000001c0)) 06:39:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x25, 0x0, 0x0) 06:39:07 executing program 0: io_setup(0x401, &(0x7f0000000000)=0x0) io_destroy(r0) 06:39:07 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) 06:39:07 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x6b, 0x0, 0x0) 06:39:07 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003600)={&(0x7f00000023c0)={0xec4, 0x13, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [], [0x0, 0x800, 0x81], 0x0, [0x9, 0x1]}, 0x6, 0x101}, [@INET_DIAG_REQ_BYTECODE={0x41, 0x1, "dcdaec60620134a6575953310908aae62a402b0587352675bb25b99bbe51ffb795d3df4fb2f76ffc5f94faa8d70ceac27a8e9f4ceab0d5bdbe23b25ad3"}, @INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "8884ffd96b88215c6adb3723a27311a903d4207a6abb5f9688fd92ada74ea2b89d72d8d7278ce35a05d712e97d92bce258af75c949e89a523edb6d4717495351b1bf65308e58818aa8217aca04cefd4fc4554f3baa15d837db3f3a66ad916954544460421c2c02c246d2dde0993abdc9c800b17e0f75c7df64b42f72365cba03368949534687d32356cd83756cb5fd9c193a5b7ad3003ee3f15b41eff093347e4b65284e8737ab2ced763a3a455e7d11e509cd10722f46108b3b070e58beb41e9307850a91c0395008a9d48045477629eefd484e"}, @INET_DIAG_REQ_BYTECODE={0xa5, 0x1, "16cd7300dfd10b9c92cfa32287a2c9d0a96e54031f8b1720aef952adf671974467f2192ac36c97901cd032f8c6c9d4e5d8c6997eb290c3987e7e9d1476d48e547e2d59bea6356508d65b58bbece61885a497177cbea7df18cf65296c04c1992f015975a8a959fb4926c6327c1423fd1d4c41dd1e8bdefeef62b5f4b6ae486c2c8937fe68a3f581fd27c2fab0b509e5ac148a7af1f40bcaffe46a1c8044e0d0c5d4"}, @INET_DIAG_REQ_BYTECODE={0xcb1, 0x1, "5e6ee95d05e5b2356ee40181f8bf4811906a093d2dfedb7b357707f1ed3bf9ee0b4e58f44d77c55655ce6c38b5c231a7d0156c7dc8933e89125000f264fc599e6d39d2e7c57bf5de92f1d26096e7a403c9d684d904ea582a1f827ac88ee62a6bfae80e3a14492f5a74d7fb4f5fa314be4bbe30998b3a207def9c98c024aa0bc7a6b6a602d9d95717f94d3db67b5072e8c169cf9022f5ac15a2746b12f2c5cd24d6f768a7de97fe64589aeaacbd9b2e4b167e7587a56a855c2cea5c0d59d688cbc4bd66ad98a61ac3d30447f544ab1ee485562f6ef6c8f82bbfa9f31363fec8ce3e15131923a34f2bab0f12a7caa177927e59463e077859bcd81daa917ea2d60cf7ffda4ab8e3ae5102f29c28bde67b4649f8c02839732dc97fc235b3405ef0d66a11f4b15fa7c8df4932c7cc463d76a403e386343388de72e8bf23c07d15044dd4d3d8b250a674d7c3cf19c8f3157b68143519379bf5ed2b3a4df509eae03aeb8a9cfadaa6875fc4df1c1f9403e960fd6b39cc0095553920eea95547b587f19cf5f7eb1e0fc67566db6cad7ecaf1ba7ef7edc7313ee0e7afd5ad6bd1be005a03a9fabad739f675f15d199e59103b138bcfbb43384cf4657164376cf6494f6ad16d9e203f584ed8da5f4b76742e07d0da79bb2efef2009834ee9770de85607b50dd4b1f0453ce8e92a97139b6abe17d66e2b4eaa16da1d1a9ea524478afa0fcd04e6a3f5ec4ab0f713897c489aa4d08ff78fcc17479b93c24f9ac4b9872e4adadc35d1bbe4685b40ae80aa034a2a314e48d195960dde8dfc648ec2848c96eff7054b9ed6ce048135864dccbeec0618021cd18b4a9782416aa9194de8a79ef76dad6fe921f1c4d2a5c0f3cceeec932f2cb5593da27d88102953ce70d0ccffdd86b4cc32d1a785aab8eef5ae10b09e72fc2b26175b4b24e4f88b6db5f127b239028b7c9d48dad34be7aa1a80e02b8630423da2dd3bec291219474d8e12c3f3aa60e73def557827c4fd9496087cb995e0db6909e37ac7979cbc876f80c9a1e3acf77901fbe07d7491791812b4dec2ef8493dbaacdb42f900e4310715832c7b7806535d4a5cc8396c062943d4fe0213deec134ec3f2e5c949083b5c94a51e5f3219ccbddfa9591a937d0f2840a1904390c83203f2cb12863fb074b4db1d04336b7153faa0327d042d148ad65a94f3ea41007eca9bf8f4e43a04eb750e6d4991966e7820a8626c8c2676199c2ebc9b70f435bfd29726cb934917a91e45ef0f4cb9085cdc494539cfa0614cc803b3544946a1dc4fd3f861a256cd934e121b5f210e3403958a14c55a26251358cfa45228f78ca45dd10170829b60f9c896b1f9e2f24e8ec0d4087a46225600b1936ce516a038124740de8aadbb9c3d829ea73d538bfa02ae7bbc4772efdfa7352476d78cd8b8c7645851fce8bff8ed3fecfc0cec89fcf338758415396ff1424aa56e94688f03d60fa082a8bd9edd6b61afca47517eaf5ab16f034a33a1246787d209d326300c9288ebdd9c59b2c76ba7991f27f0bfe1a67e23f71fe115d15ae5ee92c9e5b1d15307e442a01fd6d6fedc1bd34393e6114ee809fabda0f3ab3d833a9717979996e674e11cdc26c84a6fc5e8c62e7f1ea1f91cee556c514854ffb4bf7a92b2609e957536aa2222af67aa39f04c7cc249b6f6963c40d8a9b6ae316f1901dbc0a12f021c4a338ce971d1b7a7365a1d419ed162a2f0f01dbeadf86f3696847a2bd5bda3229bfbe0fb48b792e8bea03ce3ee0c84d5745a56e558498b9864aab024834dac64232f6f95c27795839436f2fa1c01709139e5ff30a73a9a954eefb46ff0add6200c3346a75a04661a2cd2adce0e9d77b404f804240d7826cce87b64a65e3440f8e81b7dc3ff6a9a5f946d270ef6a79db246f3b5e571444997f5854e1f39fd9c525965f11fc647d96f691b0e42ec042f9e64ad7b0c250019d3db1de62280fa6012dbefc307a82f07d22858f749b06653c61e3b3670a3d873b067780abf4850a5ece801dcab01bc08dbd1c3adfd23b39836a8b3af5037393e05cde336bdc3c781918e312413aea2243fdd6392722f1a50ab7eb6bfb35f8a6de664d1ca11775ea4f9c9bc8367d65716b525a6d13434319aed67d4cb815d957f959b12ea8285ca5b58ced5fcadb2ec989db3c3cbbf5986e33779e88a95bbd6cf6427e75fe986c15e4192aa679b90a102314747d1a7bd7f6eaa29867a69fd5bb5fa8712e84e0621e4b7938fa5bfc14afbc57326cfefa061e2bbb52f8e6ca3a79fbed66bf900c6bd0cf50443db74de5e8336940172d81b2c3511d66f9e601108917eddfd839e46c213cf200c6b1aea9161c99d236e64d1daabcf162622642b10b6dadbfc7f275643ee3fa3ba95e8380f7f0cd08e69c9a1eecec9e308e2f27d5ba2f76e9ba95ece77bb7d7848d38526351659d811771dcf12b08a8b4cd118beeb255fd7f4fb2c09158e32c75bdd88fdcf4f56ac9351e8b3717b934f350dccbcd50bd52fb85832d2caa7d1978af77ae807ce70e218d533397b609898a67eb35be45cb19f8f846dee5ca22d6a06d2fc66727e05be4529febae9644e32af68159300d799b6c173a66461a109a60982c3208f43749bc3f5d65a8bf65911ea74fe094ce2606f244b523c4cc606eb25c551e3382b34f5c8651601374e45db037482ae78f3d22548716385f24d41451d16f9657823be508bcc923bbe7718c825317892105d4a4401c9cd9911d394eb93ea22cfc66f4a48020a75cef3f5343258a0062c81a774921eaea3c73d41282fd427a83956cb0b127cdd9663fd15202af454f9853f09f176be33f71730248b7a4e537a47c6be4db8ce3eab925cdcad6efecb8160707fb7cfb7539a39595d64942ce10f88c5b1dd99ddb57ce66b004f8546da2eb3260c9b5318d699faba0defc9bdb92d55802439153102b3873e0721e32ab93286d458e2d78957a05c5ee32d0ab6173f6caab6fd3f87f6a7d8ff4f09de718adf589f24df8785457ba0b6e4c42e0e9727eaa2ea96233be3a4d81f833fee76ba8027b39d531b55b1ecd75f79e0f0429f0523b0aa3b19f7f02ee2f39d77c8bf8613541b73aad038d9d3b320760ba76de5f2c28ed6d17013f0692f7ccd89c37a008dc96e8545b64102d132dbe9f9770dcd7e65b0b83b7604f7cacffc4e1897cd3539b1cad5a909961b245877cd352c950e3e8ae608a715e52305d2c3ff3bb29cb37f8afea0994a37f694ee809b806803e70490e07d50453881f4890722416c771e5e6b2abc1f78433b84f3a1e8799758cc0064ca80e4accb36a6abab45993b9bd578197ae0fb2d105d0bc91671cf7cc0b3b602d62b057629720b12d8f133631882d3147780e6b597b9c9717fd0e693d5eb73e7260f06f75cb87ff7014e7c6badc2f30b46538926a8a8d2017b4cee45c17221f3a6b95c9844536bd63baeab9059583205fa4a60fc8d9e549084fd43804a82a7a2978f0e6dc60f345faa7a88f51b6bef3fa5ee46f6bb652db6f582b9ae89cbe4c5f4a27a0e1b5704088120c4fdeb8f7cf75983dd84e7677cbc1d3e9336adc69ab2d4892535d62856e2d08f965b5e0da14fe8314da8deb2bd17a557ebce9cbe8245fa49e89c54acc588e4b4cdd8080a148638540f6ef3db4831ca305115941f57b53636cf9c56d99e8208c1136dec5151406dbcf6a3e0c34dd6d037bfe78f151d3ed7c898ca6bbbf068a5c3dfcd48411327828dfabcc9c3ac646f3c865f45270b98c65419c36a149f3472cf552d6d049f9af3c2631fcef6b33904f0173a25da1773308069bb295b2f11089d3019fef4f9f64c8990e6f0e5b0cab969b862a898c4dcbcf789e7f3347654df8ddbb50b2ada46c7761693b341b0ea436fa8978c425691293c1281da603e4c3a34712f6909f3976347bdcfbf082f63816111079cf0b32da1949dd474154a7059940753bcc11ab5257e595e0fa9dc7759db36044051d03026baa1609948e239e42e1b65ce2a88f1ca40ff2a9f25dfa072dd2bdba6876fc43e73ca1465bdab457fe2c71f4bced1228ae03f65b77a3215503eeea97c2bdc384914d1dcc7e59511d60be95c9b0fa01bdf7112d0c100aa7004262ce2b54dd2f4a5d2d3323ebe4db487b0a9fd7da3923555e6cd5cfeef07411deb67adfa6e686a1ad86f2f5574a15f7f9d2cb30f9ef392532cad791935254582d81af1ccb5f6cf2151ffba58fbf788bcedccd1e57bad3c5ca2ac21a1bca6f624c620b0a17e110156ce6e734c3338b138c0db56597f4e9de5b362ba2aac61ba99297933a18bfc9950bfe001232bdf6a112df26a5fcef6ad7702912a73c9a6ce6e9d1551d56363b24533ec206e430886f2e1d0516f3090761e6cb05dc6c7ffd7bc9edda430b2ef7d94454e1b82a32e60c136da176b227fc8481cf7b17ce27ac983131975e6e680a5abb015158d0e5d02a5e6994db71d7ac46996bdaf8f84fc3a68c1d9851b1e559a64c80e677c87888e24d2fe35edc9d30a48b541c60e86ef17e4d9c63d1dd559c96b248323359d710f03315953fe4baed626117b4ff2a34a71963f85bbc82cdccb5aecf71935099dcb0961a66333e0dd785d1c0ec97d0560"}]}, 0xec4}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) 06:39:07 executing program 4: fsopen(&(0x7f0000000000)='proc\x00', 0x0) 06:39:07 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000014000100000000000000000010"], 0x4c}}, 0x0) 06:39:07 executing program 2: r0 = fsopen(&(0x7f0000000100)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) 06:39:07 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f00000000c0)=0x98) 06:39:07 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[], 0x38) 06:39:07 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000340)='./file0\x00', 0x0) 06:39:08 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x13, 0x0, &(0x7f00000001c0)) 06:39:08 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000280)=[{0x5}, {0x6}]}, 0x10) 06:39:08 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0xc2801) write$cgroup_freezer_state(r0, 0x0, 0xfdef) 06:39:08 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x5}]}) 06:39:08 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x6, 0x0, 0x0) 06:39:08 executing program 1: syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x6080, &(0x7f0000000100)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}}) 06:39:08 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) 06:39:08 executing program 5: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, 0x0) 06:39:08 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1600bd59, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:39:08 executing program 0: socketpair(0x28, 0x2, 0x28, &(0x7f0000000080)) 06:39:08 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{0x16}]}, 0x10) 06:39:09 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x3, 0x0, &(0x7f00000001c0)) 06:39:09 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x50, 0x12, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}}, 0x0) 06:39:09 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1000, 0xc2801) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FREEZING\x00', 0xfffffdef) 06:39:09 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:39:09 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2d, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) 06:39:09 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000100)=0x401, 0x4) 06:39:09 executing program 5: syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000300)=ANY=[]) 06:39:09 executing program 1: r0 = fsopen(&(0x7f0000000100)='romfs\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000280)='&&\x00', 0x0, r1) 06:39:09 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) write$cgroup_freezer_state(r0, 0x0, 0x0) 06:39:09 executing program 4: socketpair(0xa, 0x3, 0x24, &(0x7f0000000080)) 06:39:09 executing program 0: socketpair(0x25, 0x3, 0x24, &(0x7f0000000080)) 06:39:10 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x14, &(0x7f00000000c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}, 0x4) 06:39:10 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) 06:39:10 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, 0x14, 0x1, 0x0, 0x0, {0x2}}, 0x4c}}, 0x0) 06:39:10 executing program 0: r0 = fsopen(&(0x7f0000000000)='romfs\x00', 0x0) io_setup(0x20, &(0x7f00000014c0)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r1, 0x2, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:39:10 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x54, 0x12, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x8}]}, 0x54}}, 0x0) 06:39:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8947, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) 06:39:10 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) 06:39:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x8, 0x0, &(0x7f00000001c0)) 06:39:10 executing program 0: mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB]) 06:39:10 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:39:11 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x306, @local}, 0x14, {0x2, 0x0, @multicast2}, 'veth0\x00'}) 06:39:11 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x14, 0x0, 0x0) 06:39:11 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @multicast2}, {0x0, @dev}, 0x42, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'geneve1\x00'}) 06:39:11 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x120) [ 2139.278634][T16332] 9pnet: Insufficient options for proto=fd [ 2139.320266][T16332] 9pnet: Insufficient options for proto=fd 06:39:11 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000000040)="af", 0x1}], 0x1}, 0x0) 06:39:11 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000014000100000000e5ffffffff01"], 0x4c}}, 0x0) 06:39:11 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x78, 0x0, 0x0) 06:39:11 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x7c, 0x0, &(0x7f0000000280)) 06:39:11 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x10, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:39:11 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1600bd60, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:39:12 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 06:39:12 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x4c}, 0x4c}, 0x8}, 0x0) 06:39:12 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x28, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:39:12 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0xc2801) write$cgroup_freezer_state(r0, 0x0, 0xf0ffffff7f0000) 06:39:12 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000006180)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in={0x2, 0x0, @empty}], 0x2c) 06:39:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r0, &(0x7f0000001540)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80) 06:39:12 executing program 2: r0 = fsopen(&(0x7f0000000100)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x2, &(0x7f0000000140)='\xff\xdb\xb7gP\x00\xd5\x87;\xd8\x9a\xd3\x05\x9bvl\xf2\xf8\xa05\xb8\xf3\x8f>\x03\t\xf7\xac\x80\x9e|\x98\x0f\x15q%\xd1\xb6fma\xcb\b\x17a[0D\x92\xa42\x87\xb97\xa1\x0e\x00\x06\x00\x00\x00\x00C\xaf\xb9\x1d\xdc\xbf\x96(&A\xf9\xe1\x00', 0x0, 0x0) 06:39:12 executing program 3: socketpair(0x2, 0x0, 0xffffdbf2, &(0x7f00000002c0)) 06:39:12 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 06:39:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x28, r1, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0) 06:39:13 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x32, &(0x7f00000000c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}, 0x4) 06:39:13 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, 0x14, 0x1}, 0x4c}}, 0x0) 06:39:13 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) 06:39:13 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) pidfd_open(r1, 0x0) 06:39:13 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x5, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{}]}, 0x10) 06:39:13 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="73797a746e6c300000890a1fcb2d2d3bad5768af47b324"]}) 06:39:13 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x23, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:39:13 executing program 3: r0 = socket$inet(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) 06:39:13 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 06:39:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000003d40), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000003e00)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003dc0)={0x0}}, 0x0) 06:39:13 executing program 2: syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x700000000000000, 0x0, &(0x7f0000000300)=ANY=[]) 06:39:14 executing program 4: mount$9p_fd(0x0, &(0x7f0000000780)='.\x00', 0x0, 0x291412, 0x0) 06:39:14 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x1e, 0x0, 0x0) 06:39:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8943, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) 06:39:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000480)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x80, 0x0}, 0x0) 06:39:14 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2b, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:39:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) 06:39:14 executing program 0: perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25c24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:39:14 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x2}, 0x0) 06:39:14 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000000040)={0x20, 0x0, r1}, 0x20) 06:39:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0xa, 0x0, 0x0) 06:39:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700}}) 06:39:15 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x1600bd7e, 0x0, &(0x7f00000001c0)) 06:39:15 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2e, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:39:15 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x18, 0x0, 0x0) 06:39:15 executing program 3: mount$9p_fd(0x0, &(0x7f0000000780)='.\x00', 0x0, 0xedc0, 0x0) 06:39:15 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000038c0)={0x0, 0x1, &(0x7f00000037c0)=@raw=[@jmp], &(0x7f0000003800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:39:15 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 06:39:15 executing program 2: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x7, 0x0, &(0x7f0000000300)=ANY=[]) 06:39:15 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$FUSE_POLL(r0, &(0x7f0000000080)={0x18}, 0xfffffffffffffdef) [ 2143.847559][T16441] sctp: [Deprecated]: syz-executor.5 (pid 16441) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2143.847559][T16441] Use struct sctp_sack_info instead 06:39:15 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) 06:39:15 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0}, 0x20) 06:39:16 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x4, 0x0, 0x0) 06:39:16 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x6, 0x4) 06:39:16 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4(r0, 0x0, 0x0, 0x0) 06:39:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8923, &(0x7f0000000780)={'wpan4\x00'}) 06:39:16 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x50, 0x12, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}, 0x300}, 0x0) 06:39:16 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x22, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:39:16 executing program 1: syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), 0xffffffffffffffff) 06:39:16 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 06:39:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x4020940d, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) 06:39:17 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000038c0)={0x18, 0x2, &(0x7f00000037c0)=@raw=[@jmp, @func], &(0x7f0000003800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:39:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f0000006a80)={0x0, 0x0, 0x0}, 0x143) 06:39:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 06:39:17 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000014000102000000e5ffffffff01"], 0x4c}}, 0x0) 06:39:17 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40, 0x401) write$nbd(r0, &(0x7f0000000240)={0x67446698, 0x0, 0x0, 0x0, 0x0, "fd997341273679641dae3f6a98905f8a6ef8c588b544dfaba69eb4fe7a892287c6c44643f88870bad98c9321a0eae8086b47bdc870c821956e0fbc966d548034984248a8d13bcc7e3210d5d552f42b55f724854e533011ca8a18b9ff5d718dbcad42e0cbe881d66e6bae969bddb9ba5cf4fa37e0ffb5ecfa8556c8b6079396d5aa5b6d2b27217ef672249de509ad7ea14b70e8448cf19abcaf3f49c9a1e05d6afb46e0f876f7632cb2fee5917b697180b41a22437df6d69d8921752201"}, 0xcd) 06:39:17 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x6, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{}]}, 0x10) 06:39:17 executing program 4: syz_emit_ethernet(0x9a, &(0x7f0000000000)={@dev, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "519129", 0x64, 0x2f, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, {[@dstopts={0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @private1}]}]}}}}}, 0x0) 06:39:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ifreq(r0, 0x894a, &(0x7f0000000640)={'wlan1\x00', @ifru_flags}) 06:39:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80) 06:39:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000640)={'wpan0\x00'}) 06:39:17 executing program 2: io_uring_setup(0x71ad, &(0x7f0000000000)={0x0, 0x0, 0x2}) io_uring_setup(0x1b1e, &(0x7f0000000080)={0x0, 0xcc24}) 06:39:18 executing program 5: fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) 06:39:18 executing program 4: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1020, &(0x7f0000000300)=ANY=[]) 06:39:18 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x0, 0x0, 0x7) 06:39:18 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x30, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}}, 0x108) 06:39:18 executing program 1: perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88424, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:39:18 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x54, 0x12, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x54}}, 0x0) 06:39:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) 06:39:18 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x56}, 0x18) 06:39:18 executing program 4: syz_mount_image$msdos(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) 06:39:18 executing program 3: mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x0, 0x0) 06:39:18 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0xffffffff}, 0x40) 06:39:18 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x25, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 06:39:19 executing program 2: r0 = socket(0x11, 0xa, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0) 06:39:19 executing program 0: r0 = fsopen(&(0x7f0000000100)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, &(0x7f0000000140)='\xff\xdb\xb7gP\x00\xd5\x87;\xd8\x9a\xd3\x05\x9bvl\xf2\xf8\xa05\xb8\xf3\x8f>\x03\t\xf7\xac\x80\x9e|\x98\x0f\x15q%\xd1\xb6fma\xcb\b\x17a[0D\x92\xa42\x87\xb97\xa1\x0e\x00\x06\x00\x00\x00\x00C\xaf\xb9\x1d\xdc\xbf\x96(&A\xf9\xe1\x00', 0x0, 0x0) 06:39:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xc, &(0x7f0000000080)=""/156, &(0x7f0000000140)=0x9c) 06:39:19 executing program 3: fsopen(&(0x7f0000000040)='9p\x00', 0x0) 06:39:19 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000300)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) 06:39:19 executing program 1: mount$9p_fd(0x0, &(0x7f0000000780)='.\x00', 0x0, 0xc0ed0000, 0x0) 06:39:19 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, 0x12, 0x1}, 0x4c}}, 0x0) 06:39:19 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x84, 0x2, 0x0, 0x0) 06:39:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @remote}, {0x1}, 0xe, {0x2, 0x0, @empty}, 'macvtap0\x00'}) 06:39:19 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000002580)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f00000024c0)=[{&(0x7f0000000080)="9271d37daf", 0x5}], 0x1}, 0x4041) 06:39:20 executing program 5: mount$fuse(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x140400, 0x0) 06:39:20 executing program 2: r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f00000001c0)='\xff\xdb\xb7gP\x00\xd5\x87;\xd8\x9a\xd3\x05\x9bvl\xf2\xf8\xa05\xb8\xf3\x8f>\x03\t\xf7\xac\x80\x9e|\x98\x0f\x15q%\xd1\xb6fma\xcb\b\x17a[D\x92\xa42\x87\xb97\xa1\x0e\x00\x06\x00\x00\x00\x00C\xaf\xb9\x1d\xdc\xbf\x96(&A\xb0\xe1\x00\x00qb>/\xc3\x85\xfa\xf8\xf1/\xaf\x8f]\x1c3(\xac\xe5\xbc1-8\x15\x13\xe2\xbev[\x15\f\xd1 \xad\x856\xdc\xb5~oW\x05X9\xfc\x82wQ\x03\x1b\xc3\xa5\x8e\x0f3\x9b\xa4\x88sp\xe8@wW\xb7dO\x85\xd7:1\xaa\xac\x81R-\xbf!\xd6\xd13\xce\x05ez\xb8\xf9v\xc7\xce\x8c;\x95C\\\x1e\x90\xefr\xf9\x13\xb7\x94\xf7I:\xc6\x02\xac>t\xe5^\xbf\r\x99\x80`B\xa2(\xbd\x7f4\xdc:\xad\x02\xc6l\xd3\xe8\x9cf\xac\x1d~C\xca\x16\x06\xec\xcf\\Rw|\n\xa6\xcbF\xc6\t\x1d\xa3\xc5\x98\xff\xbc\xe7m1\x01\xaf\xb24\x9c \xfc\xf9#\xb9\xe5|\xa3\x18\x82h)\xcb{\x02\xa6b\x19\x88\xc4\\V\xf5\x18\x80\x1b\xa2JN{6\"\xfd\xfc2\x05=\x82@\xa6\x84f\xd6\b\x15\xef:X\x8eA\x93\xea\xdf\xcb\xdc\xd0e\x830\xb0W1f\x03\\Mh\xf4\xd1s\x86\x8f\x1c\x88\xa8+0a\xc68v+9L\xb4\xf2\xdb', &(0x7f00000000c0)='syztnl0\x00', 0x0) 06:39:20 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001180)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 06:39:20 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f00000001c0)) 06:39:20 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000380)={'macvlan1\x00', @ifru_addrs=@xdp}) 06:39:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000003d40), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000003e00)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d80)={0x14}, 0x14}}, 0x0) 06:39:20 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8912, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 06:39:20 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x28, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{}]}, 0x10) 06:39:20 executing program 2: r0 = syz_io_uring_setup(0x4f81, &(0x7f0000001280), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001300), &(0x7f0000001340)) syz_io_uring_setup(0x41c0, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 06:39:20 executing program 0: ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 06:39:21 executing program 3: r0 = getpgrp(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x4) 06:39:21 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0x401c5820, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7f5095e8"}, 0x0, 0x0, @fd}) 06:39:21 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x83, 0x0, 0x0) 06:39:21 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7f5095e8"}, 0x0, 0x0, @fd}) 06:39:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001740)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000004280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[@rights={{0x10}}], 0x10}}], 0x1, 0x0) 06:39:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000180)={0x0, 0x0}, 0x10) 06:39:21 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0045878, 0x0) 06:39:21 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x9}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0xfff]}, 0x8}) 06:39:22 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 06:39:22 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0x4020940d, 0x0) [ 2150.358232][T16575] not chained 150000 origins [ 2150.362851][T16575] CPU: 1 PID: 16575 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 2150.362874][T16575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2150.362874][T16575] Call Trace: [ 2150.362874][T16575] dump_stack+0x25a/0x2f6 [ 2150.362874][T16575] kmsan_internal_chain_origin+0x6f/0x110 [ 2150.362874][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2150.362874][T16575] ? kmsan_get_metadata+0x11b/0x180 06:39:22 executing program 3: syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB=',permit_directio,smackfsdef=+},obj_role=\\,rootcontext=']) [ 2150.362874][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2150.362874][T16575] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2150.413131][T16575] ? __msan_instrument_asm_store+0x18a/0x1c0 [ 2150.422953][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2150.422953][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2150.422953][T16575] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 2150.439847][T16575] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2150.439847][T16575] ? should_fail+0x75/0x9c0 [ 2150.439847][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2150.439847][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2150.439847][T16575] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2150.439847][T16575] ? kmsan_unpoison_memory+0xeb/0x120 [ 2150.439847][T16575] ? _copy_from_user+0x219/0x310 [ 2150.439847][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2150.439847][T16575] __msan_chain_origin+0xcb/0x140 [ 2150.439847][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2150.439847][T16575] get_compat_msghdr+0x108/0x2c0 [ 2150.439847][T16575] ? __sys_recvmmsg+0x51c/0x6f0 [ 2150.439847][T16575] do_recvmmsg+0x1063/0x2120 [ 2150.439847][T16575] ? __msan_poison_alloca+0x15a/0x1a0 [ 2150.439847][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2150.439847][T16575] ? kmsan_internal_check_memory+0xb5/0x520 [ 2150.439847][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2150.439847][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2150.439847][T16575] ? __msan_poison_alloca+0x15a/0x1a0 [ 2150.439847][T16575] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2150.439847][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2150.439847][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2150.439847][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2150.439847][T16575] do_fast_syscall_32+0x3c/0x80 [ 2150.439847][T16575] do_SYSENTER_32+0x1b/0x20 [ 2150.439847][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2150.439847][T16575] RIP: 0023:0xf6e73549 [ 2150.439847][T16575] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2150.439847][T16575] RSP: 002b:00000000f444c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2150.439847][T16575] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2150.439847][T16575] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2150.439847][T16575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2150.439847][T16575] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2150.439847][T16575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2150.439847][T16575] Uninit was stored to memory at: [ 2150.439847][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2150.439847][T16575] __msan_chain_origin+0xcb/0x140 [ 2150.439847][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2150.439847][T16575] get_compat_msghdr+0x108/0x2c0 [ 2150.439847][T16575] do_recvmmsg+0x1063/0x2120 [ 2150.439847][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2150.439847][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2150.439847][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2150.439847][T16575] do_fast_syscall_32+0x3c/0x80 [ 2150.439847][T16575] do_SYSENTER_32+0x1b/0x20 [ 2150.439847][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2150.439847][T16575] [ 2150.439847][T16575] Uninit was stored to memory at: [ 2150.439847][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2150.439847][T16575] __msan_chain_origin+0xcb/0x140 [ 2150.439847][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2150.439847][T16575] get_compat_msghdr+0x108/0x2c0 [ 2150.439847][T16575] do_recvmmsg+0x1063/0x2120 [ 2150.439847][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2150.439847][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2150.439847][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2150.439847][T16575] do_fast_syscall_32+0x3c/0x80 [ 2150.439847][T16575] do_SYSENTER_32+0x1b/0x20 [ 2150.439847][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2150.439847][T16575] [ 2150.439847][T16575] Uninit was stored to memory at: [ 2150.439847][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2150.439847][T16575] __msan_chain_origin+0xcb/0x140 [ 2150.439847][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2150.439847][T16575] get_compat_msghdr+0x108/0x2c0 [ 2150.439847][T16575] do_recvmmsg+0x1063/0x2120 [ 2150.439847][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2150.439847][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2150.439847][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2150.439847][T16575] do_fast_syscall_32+0x3c/0x80 [ 2150.439847][T16575] do_SYSENTER_32+0x1b/0x20 [ 2150.439847][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2150.439847][T16575] [ 2150.439847][T16575] Uninit was stored to memory at: [ 2150.439847][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2150.439847][T16575] __msan_chain_origin+0xcb/0x140 [ 2150.439847][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2150.439847][T16575] get_compat_msghdr+0x108/0x2c0 [ 2150.439847][T16575] do_recvmmsg+0x1063/0x2120 [ 2150.439847][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2150.439847][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2150.439847][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2150.439847][T16575] do_fast_syscall_32+0x3c/0x80 [ 2150.439847][T16575] do_SYSENTER_32+0x1b/0x20 [ 2150.439847][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2150.439847][T16575] [ 2150.439847][T16575] Uninit was stored to memory at: [ 2150.439847][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2150.439847][T16575] __msan_chain_origin+0xcb/0x140 [ 2150.439847][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2150.439847][T16575] get_compat_msghdr+0x108/0x2c0 [ 2150.439847][T16575] do_recvmmsg+0x1063/0x2120 [ 2150.439847][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2150.439847][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2150.439847][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2150.439847][T16575] do_fast_syscall_32+0x3c/0x80 [ 2150.439847][T16575] do_SYSENTER_32+0x1b/0x20 [ 2150.439847][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2150.439847][T16575] [ 2150.439847][T16575] Uninit was stored to memory at: [ 2150.439847][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2150.439847][T16575] __msan_chain_origin+0xcb/0x140 [ 2150.439847][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2150.439847][T16575] get_compat_msghdr+0x108/0x2c0 [ 2150.439847][T16575] do_recvmmsg+0x1063/0x2120 [ 2150.439847][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2150.439847][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2150.439847][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2150.439847][T16575] do_fast_syscall_32+0x3c/0x80 [ 2150.439847][T16575] do_SYSENTER_32+0x1b/0x20 [ 2150.439847][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2150.439847][T16575] [ 2150.439847][T16575] Uninit was stored to memory at: [ 2150.439847][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2150.439847][T16575] __msan_chain_origin+0xcb/0x140 [ 2150.439847][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2150.439847][T16575] get_compat_msghdr+0x108/0x2c0 [ 2150.439847][T16575] do_recvmmsg+0x1063/0x2120 [ 2150.439847][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2150.439847][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2150.439847][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2150.439847][T16575] do_fast_syscall_32+0x3c/0x80 [ 2150.439847][T16575] do_SYSENTER_32+0x1b/0x20 [ 2150.439847][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2150.439847][T16575] [ 2150.439847][T16575] Local variable ----msg_sys@do_recvmmsg created at: [ 2150.439847][T16575] do_recvmmsg+0xc1/0x2120 [ 2150.439847][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2151.859699][T16575] not chained 160000 origins [ 2151.862871][T16575] CPU: 1 PID: 16575 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 2151.862871][T16575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2151.880025][T16575] Call Trace: [ 2151.880025][T16575] dump_stack+0x25a/0x2f6 [ 2151.880025][T16575] kmsan_internal_chain_origin+0x6f/0x110 [ 2151.880025][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2151.880025][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2151.880025][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2151.913010][T16575] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2151.913010][T16575] ? __msan_instrument_asm_store+0x18a/0x1c0 [ 2151.913010][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2151.913010][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2151.913010][T16575] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 2151.943179][T16575] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2151.943179][T16575] ? should_fail+0x75/0x9c0 [ 2151.943179][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2151.943179][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2151.943179][T16575] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2151.973034][T16575] ? kmsan_unpoison_memory+0xeb/0x120 [ 2151.973034][T16575] ? _copy_from_user+0x219/0x310 [ 2151.973034][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2151.973034][T16575] __msan_chain_origin+0xcb/0x140 [ 2151.973034][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2151.973034][T16575] get_compat_msghdr+0x108/0x2c0 [ 2151.973034][T16575] ? __sys_recvmmsg+0x51c/0x6f0 [ 2151.973034][T16575] do_recvmmsg+0x1063/0x2120 [ 2152.013127][T16575] ? __msan_poison_alloca+0x15a/0x1a0 [ 2152.013127][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2152.013127][T16575] ? kmsan_internal_check_memory+0xb5/0x520 [ 2152.031074][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2152.031074][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2152.031074][T16575] ? __msan_poison_alloca+0x15a/0x1a0 [ 2152.031074][T16575] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2152.031074][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2152.031074][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2152.063090][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2152.063090][T16575] do_fast_syscall_32+0x3c/0x80 [ 2152.063090][T16575] do_SYSENTER_32+0x1b/0x20 [ 2152.063090][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.063090][T16575] RIP: 0023:0xf6e73549 [ 2152.063090][T16575] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2152.093011][T16575] RSP: 002b:00000000f444c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2152.093011][T16575] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2152.123078][T16575] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2152.123078][T16575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2152.123078][T16575] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2152.123078][T16575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2152.153128][T16575] Uninit was stored to memory at: [ 2152.153128][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2152.153128][T16575] __msan_chain_origin+0xcb/0x140 [ 2152.153128][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2152.180092][T16575] get_compat_msghdr+0x108/0x2c0 [ 2152.183079][T16575] do_recvmmsg+0x1063/0x2120 [ 2152.183079][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2152.195121][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2152.195121][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2152.195121][T16575] do_fast_syscall_32+0x3c/0x80 [ 2152.195121][T16575] do_SYSENTER_32+0x1b/0x20 [ 2152.195121][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.195121][T16575] [ 2152.195121][T16575] Uninit was stored to memory at: [ 2152.195121][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2152.234888][T16575] __msan_chain_origin+0xcb/0x140 [ 2152.234888][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2152.234888][T16575] get_compat_msghdr+0x108/0x2c0 [ 2152.234888][T16575] do_recvmmsg+0x1063/0x2120 [ 2152.234888][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2152.234888][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2152.234888][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2152.234888][T16575] do_fast_syscall_32+0x3c/0x80 [ 2152.273052][T16575] do_SYSENTER_32+0x1b/0x20 [ 2152.273052][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.273052][T16575] [ 2152.273052][T16575] Uninit was stored to memory at: [ 2152.293561][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2152.293561][T16575] __msan_chain_origin+0xcb/0x140 [ 2152.293561][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2152.293561][T16575] get_compat_msghdr+0x108/0x2c0 [ 2152.293561][T16575] do_recvmmsg+0x1063/0x2120 [ 2152.293561][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2152.293561][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2152.293561][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2152.293561][T16575] do_fast_syscall_32+0x3c/0x80 [ 2152.293561][T16575] do_SYSENTER_32+0x1b/0x20 [ 2152.293561][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.293561][T16575] [ 2152.293561][T16575] Uninit was stored to memory at: [ 2152.293561][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2152.293561][T16575] __msan_chain_origin+0xcb/0x140 [ 2152.293561][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2152.293561][T16575] get_compat_msghdr+0x108/0x2c0 [ 2152.293561][T16575] do_recvmmsg+0x1063/0x2120 [ 2152.293561][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2152.293561][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2152.293561][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2152.293561][T16575] do_fast_syscall_32+0x3c/0x80 [ 2152.293561][T16575] do_SYSENTER_32+0x1b/0x20 [ 2152.293561][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.293561][T16575] [ 2152.293561][T16575] Uninit was stored to memory at: [ 2152.293561][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2152.293561][T16575] __msan_chain_origin+0xcb/0x140 [ 2152.293561][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2152.293561][T16575] get_compat_msghdr+0x108/0x2c0 [ 2152.293561][T16575] do_recvmmsg+0x1063/0x2120 [ 2152.293561][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2152.293561][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2152.293561][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2152.293561][T16575] do_fast_syscall_32+0x3c/0x80 [ 2152.293561][T16575] do_SYSENTER_32+0x1b/0x20 [ 2152.293561][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.293561][T16575] [ 2152.293561][T16575] Uninit was stored to memory at: [ 2152.293561][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2152.293561][T16575] __msan_chain_origin+0xcb/0x140 [ 2152.293561][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2152.293561][T16575] get_compat_msghdr+0x108/0x2c0 [ 2152.293561][T16575] do_recvmmsg+0x1063/0x2120 [ 2152.293561][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2152.293561][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2152.293561][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2152.293561][T16575] do_fast_syscall_32+0x3c/0x80 [ 2152.293561][T16575] do_SYSENTER_32+0x1b/0x20 [ 2152.293561][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.293561][T16575] [ 2152.293561][T16575] Uninit was stored to memory at: [ 2152.293561][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2152.293561][T16575] __msan_chain_origin+0xcb/0x140 [ 2152.293561][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2152.293561][T16575] get_compat_msghdr+0x108/0x2c0 [ 2152.293561][T16575] do_recvmmsg+0x1063/0x2120 [ 2152.293561][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2152.293561][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2152.293561][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2152.293561][T16575] do_fast_syscall_32+0x3c/0x80 [ 2152.293561][T16575] do_SYSENTER_32+0x1b/0x20 [ 2152.293561][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.293561][T16575] [ 2152.293561][T16575] Local variable ----msg_sys@do_recvmmsg created at: [ 2152.293561][T16575] do_recvmmsg+0xc1/0x2120 [ 2152.293561][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2152.831055][T16575] not chained 170000 origins [ 2152.832874][T16575] CPU: 1 PID: 16575 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 2152.832874][T16575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2152.832874][T16575] Call Trace: [ 2152.832874][T16575] dump_stack+0x25a/0x2f6 [ 2152.832874][T16575] kmsan_internal_chain_origin+0x6f/0x110 [ 2152.832874][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2152.832874][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2152.832874][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2152.832874][T16575] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2152.832874][T16575] ? __msan_instrument_asm_store+0x18a/0x1c0 [ 2152.832874][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2152.832874][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2152.832874][T16575] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 2152.832874][T16575] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2152.832874][T16575] ? should_fail+0x75/0x9c0 [ 2152.832874][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2152.832874][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2152.832874][T16575] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2152.832874][T16575] ? kmsan_unpoison_memory+0xeb/0x120 [ 2152.832874][T16575] ? _copy_from_user+0x219/0x310 [ 2152.832874][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2152.832874][T16575] __msan_chain_origin+0xcb/0x140 [ 2152.832874][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2152.832874][T16575] get_compat_msghdr+0x108/0x2c0 [ 2152.973169][T16575] ? __sys_recvmmsg+0x51c/0x6f0 [ 2152.973169][T16575] do_recvmmsg+0x1063/0x2120 [ 2152.973169][T16575] ? __msan_poison_alloca+0x15a/0x1a0 [ 2152.973169][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2152.973169][T16575] ? kmsan_internal_check_memory+0xb5/0x520 [ 2152.973169][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2152.973169][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2152.973169][T16575] ? __msan_poison_alloca+0x15a/0x1a0 [ 2152.973169][T16575] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2152.973169][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2152.973169][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2152.973169][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2152.973169][T16575] do_fast_syscall_32+0x3c/0x80 [ 2152.973169][T16575] do_SYSENTER_32+0x1b/0x20 [ 2152.973169][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.973169][T16575] RIP: 0023:0xf6e73549 [ 2152.973169][T16575] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2152.973169][T16575] RSP: 002b:00000000f444c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2152.973169][T16575] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2152.973169][T16575] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2152.973169][T16575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2152.973169][T16575] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2152.973169][T16575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2152.973169][T16575] Uninit was stored to memory at: [ 2152.973169][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2152.973169][T16575] __msan_chain_origin+0xcb/0x140 [ 2152.973169][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2152.973169][T16575] get_compat_msghdr+0x108/0x2c0 [ 2152.973169][T16575] do_recvmmsg+0x1063/0x2120 [ 2152.973169][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2152.973169][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2152.973169][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2152.973169][T16575] do_fast_syscall_32+0x3c/0x80 [ 2152.973169][T16575] do_SYSENTER_32+0x1b/0x20 [ 2152.973169][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.973169][T16575] [ 2152.973169][T16575] Uninit was stored to memory at: [ 2152.973169][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2152.973169][T16575] __msan_chain_origin+0xcb/0x140 [ 2152.973169][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2152.973169][T16575] get_compat_msghdr+0x108/0x2c0 [ 2152.973169][T16575] do_recvmmsg+0x1063/0x2120 [ 2152.973169][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2152.973169][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2152.973169][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2152.973169][T16575] do_fast_syscall_32+0x3c/0x80 [ 2152.973169][T16575] do_SYSENTER_32+0x1b/0x20 [ 2152.973169][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.973169][T16575] [ 2152.973169][T16575] Uninit was stored to memory at: [ 2152.973169][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2152.973169][T16575] __msan_chain_origin+0xcb/0x140 [ 2152.973169][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2152.973169][T16575] get_compat_msghdr+0x108/0x2c0 [ 2152.973169][T16575] do_recvmmsg+0x1063/0x2120 [ 2152.973169][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2152.973169][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2152.973169][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2152.973169][T16575] do_fast_syscall_32+0x3c/0x80 [ 2152.973169][T16575] do_SYSENTER_32+0x1b/0x20 [ 2152.973169][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.973169][T16575] [ 2152.973169][T16575] Uninit was stored to memory at: [ 2152.973169][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2152.973169][T16575] __msan_chain_origin+0xcb/0x140 [ 2152.973169][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2152.973169][T16575] get_compat_msghdr+0x108/0x2c0 [ 2152.973169][T16575] do_recvmmsg+0x1063/0x2120 [ 2152.973169][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2152.973169][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2152.973169][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2152.973169][T16575] do_fast_syscall_32+0x3c/0x80 [ 2152.973169][T16575] do_SYSENTER_32+0x1b/0x20 [ 2152.973169][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.973169][T16575] [ 2152.973169][T16575] Uninit was stored to memory at: [ 2152.973169][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2152.973169][T16575] __msan_chain_origin+0xcb/0x140 [ 2152.973169][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2152.973169][T16575] get_compat_msghdr+0x108/0x2c0 [ 2152.973169][T16575] do_recvmmsg+0x1063/0x2120 [ 2152.973169][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2152.973169][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2152.973169][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2152.973169][T16575] do_fast_syscall_32+0x3c/0x80 [ 2152.973169][T16575] do_SYSENTER_32+0x1b/0x20 [ 2152.973169][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.973169][T16575] [ 2152.973169][T16575] Uninit was stored to memory at: [ 2152.973169][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2152.973169][T16575] __msan_chain_origin+0xcb/0x140 [ 2152.973169][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2152.973169][T16575] get_compat_msghdr+0x108/0x2c0 [ 2152.973169][T16575] do_recvmmsg+0x1063/0x2120 [ 2152.973169][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2152.973169][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2152.973169][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2152.973169][T16575] do_fast_syscall_32+0x3c/0x80 [ 2152.973169][T16575] do_SYSENTER_32+0x1b/0x20 [ 2152.973169][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.973169][T16575] [ 2152.973169][T16575] Uninit was stored to memory at: [ 2152.973169][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2152.973169][T16575] __msan_chain_origin+0xcb/0x140 [ 2152.973169][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2152.973169][T16575] get_compat_msghdr+0x108/0x2c0 [ 2152.973169][T16575] do_recvmmsg+0x1063/0x2120 [ 2152.973169][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2152.973169][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2152.973169][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2152.973169][T16575] do_fast_syscall_32+0x3c/0x80 [ 2152.973169][T16575] do_SYSENTER_32+0x1b/0x20 [ 2152.973169][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.973169][T16575] [ 2152.973169][T16575] Local variable ----msg_sys@do_recvmmsg created at: [ 2152.973169][T16575] do_recvmmsg+0xc1/0x2120 [ 2152.973169][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2153.794388][T16575] not chained 180000 origins [ 2153.799073][T16575] CPU: 0 PID: 16575 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 2153.802891][T16575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2153.802891][T16575] Call Trace: [ 2153.802891][T16575] dump_stack+0x25a/0x2f6 [ 2153.802891][T16575] kmsan_internal_chain_origin+0x6f/0x110 [ 2153.802891][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2153.802891][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2153.802891][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2153.802891][T16575] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2153.802891][T16575] ? __msan_instrument_asm_store+0x18a/0x1c0 [ 2153.802891][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2153.802891][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2153.802891][T16575] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 2153.802891][T16575] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2153.802891][T16575] ? should_fail+0x75/0x9c0 [ 2153.802891][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2153.802891][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2153.802891][T16575] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2153.802891][T16575] ? kmsan_unpoison_memory+0xeb/0x120 [ 2153.802891][T16575] ? _copy_from_user+0x219/0x310 [ 2153.802891][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2153.802891][T16575] __msan_chain_origin+0xcb/0x140 [ 2153.802891][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2153.802891][T16575] get_compat_msghdr+0x108/0x2c0 [ 2153.802891][T16575] ? __sys_recvmmsg+0x51c/0x6f0 [ 2153.802891][T16575] do_recvmmsg+0x1063/0x2120 [ 2153.802891][T16575] ? __msan_poison_alloca+0x15a/0x1a0 [ 2153.802891][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2153.802891][T16575] ? kmsan_internal_check_memory+0xb5/0x520 [ 2153.802891][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2153.802891][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2153.802891][T16575] ? __msan_poison_alloca+0x15a/0x1a0 [ 2153.802891][T16575] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2153.802891][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2153.802891][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2153.802891][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2153.802891][T16575] do_fast_syscall_32+0x3c/0x80 [ 2153.802891][T16575] do_SYSENTER_32+0x1b/0x20 [ 2153.802891][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2153.802891][T16575] RIP: 0023:0xf6e73549 [ 2153.802891][T16575] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2153.802891][T16575] RSP: 002b:00000000f444c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2153.802891][T16575] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2153.802891][T16575] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2153.802891][T16575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2153.802891][T16575] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2153.802891][T16575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2153.802891][T16575] Uninit was stored to memory at: [ 2153.802891][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2153.802891][T16575] __msan_chain_origin+0xcb/0x140 [ 2153.802891][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2153.802891][T16575] get_compat_msghdr+0x108/0x2c0 [ 2153.802891][T16575] do_recvmmsg+0x1063/0x2120 [ 2153.802891][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2153.802891][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2153.802891][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2153.802891][T16575] do_fast_syscall_32+0x3c/0x80 [ 2153.802891][T16575] do_SYSENTER_32+0x1b/0x20 [ 2153.802891][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2153.802891][T16575] [ 2153.802891][T16575] Uninit was stored to memory at: [ 2153.802891][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2153.802891][T16575] __msan_chain_origin+0xcb/0x140 [ 2153.802891][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2153.802891][T16575] get_compat_msghdr+0x108/0x2c0 [ 2153.802891][T16575] do_recvmmsg+0x1063/0x2120 [ 2153.802891][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2153.802891][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2153.802891][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2153.802891][T16575] do_fast_syscall_32+0x3c/0x80 [ 2153.802891][T16575] do_SYSENTER_32+0x1b/0x20 [ 2153.802891][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2153.802891][T16575] [ 2153.802891][T16575] Uninit was stored to memory at: [ 2153.802891][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2153.802891][T16575] __msan_chain_origin+0xcb/0x140 [ 2153.802891][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2153.802891][T16575] get_compat_msghdr+0x108/0x2c0 [ 2153.802891][T16575] do_recvmmsg+0x1063/0x2120 [ 2153.802891][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2153.802891][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2153.802891][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2153.802891][T16575] do_fast_syscall_32+0x3c/0x80 [ 2153.802891][T16575] do_SYSENTER_32+0x1b/0x20 [ 2153.802891][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2153.802891][T16575] [ 2153.802891][T16575] Uninit was stored to memory at: [ 2153.802891][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2153.802891][T16575] __msan_chain_origin+0xcb/0x140 [ 2153.802891][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2153.802891][T16575] get_compat_msghdr+0x108/0x2c0 [ 2153.802891][T16575] do_recvmmsg+0x1063/0x2120 [ 2153.802891][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2153.802891][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2153.802891][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2153.802891][T16575] do_fast_syscall_32+0x3c/0x80 [ 2153.802891][T16575] do_SYSENTER_32+0x1b/0x20 [ 2153.802891][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2153.802891][T16575] [ 2153.802891][T16575] Uninit was stored to memory at: [ 2153.802891][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2153.802891][T16575] __msan_chain_origin+0xcb/0x140 [ 2153.802891][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2153.802891][T16575] get_compat_msghdr+0x108/0x2c0 [ 2153.802891][T16575] do_recvmmsg+0x1063/0x2120 [ 2153.802891][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2153.802891][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2153.802891][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2153.802891][T16575] do_fast_syscall_32+0x3c/0x80 [ 2153.802891][T16575] do_SYSENTER_32+0x1b/0x20 [ 2153.802891][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2153.802891][T16575] [ 2153.802891][T16575] Uninit was stored to memory at: [ 2153.802891][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2153.802891][T16575] __msan_chain_origin+0xcb/0x140 [ 2153.802891][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2153.802891][T16575] get_compat_msghdr+0x108/0x2c0 [ 2153.802891][T16575] do_recvmmsg+0x1063/0x2120 [ 2153.802891][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2153.802891][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2153.802891][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2153.802891][T16575] do_fast_syscall_32+0x3c/0x80 [ 2153.802891][T16575] do_SYSENTER_32+0x1b/0x20 [ 2153.802891][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2153.802891][T16575] [ 2153.802891][T16575] Uninit was stored to memory at: [ 2153.802891][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2153.802891][T16575] __msan_chain_origin+0xcb/0x140 [ 2153.802891][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2153.802891][T16575] get_compat_msghdr+0x108/0x2c0 [ 2153.802891][T16575] do_recvmmsg+0x1063/0x2120 [ 2153.802891][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2153.802891][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2153.802891][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2153.802891][T16575] do_fast_syscall_32+0x3c/0x80 [ 2153.802891][T16575] do_SYSENTER_32+0x1b/0x20 [ 2153.802891][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2153.802891][T16575] [ 2153.802891][T16575] Local variable ----msg_sys@do_recvmmsg created at: [ 2153.802891][T16575] do_recvmmsg+0xc1/0x2120 [ 2153.802891][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2154.754014][T16575] not chained 190000 origins [ 2154.758610][T16575] CPU: 0 PID: 16575 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 2154.762890][T16575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2154.762890][T16575] Call Trace: [ 2154.762890][T16575] dump_stack+0x25a/0x2f6 [ 2154.762890][T16575] kmsan_internal_chain_origin+0x6f/0x110 [ 2154.762890][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2154.762890][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2154.762890][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2154.762890][T16575] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2154.762890][T16575] ? __msan_instrument_asm_store+0x18a/0x1c0 [ 2154.762890][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2154.762890][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2154.762890][T16575] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 2154.762890][T16575] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2154.762890][T16575] ? should_fail+0x75/0x9c0 [ 2154.762890][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2154.762890][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2154.762890][T16575] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2154.762890][T16575] ? kmsan_unpoison_memory+0xeb/0x120 [ 2154.762890][T16575] ? _copy_from_user+0x219/0x310 [ 2154.762890][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2154.762890][T16575] __msan_chain_origin+0xcb/0x140 [ 2154.762890][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2154.762890][T16575] get_compat_msghdr+0x108/0x2c0 [ 2154.762890][T16575] ? __sys_recvmmsg+0x51c/0x6f0 [ 2154.762890][T16575] do_recvmmsg+0x1063/0x2120 [ 2154.762890][T16575] ? __msan_poison_alloca+0x15a/0x1a0 [ 2154.762890][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2154.762890][T16575] ? kmsan_internal_check_memory+0xb5/0x520 [ 2154.762890][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2154.762890][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2154.762890][T16575] ? __msan_poison_alloca+0x15a/0x1a0 [ 2154.762890][T16575] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2154.762890][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2154.762890][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2154.762890][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2154.762890][T16575] do_fast_syscall_32+0x3c/0x80 [ 2154.762890][T16575] do_SYSENTER_32+0x1b/0x20 [ 2154.762890][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2154.762890][T16575] RIP: 0023:0xf6e73549 [ 2154.762890][T16575] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2154.762890][T16575] RSP: 002b:00000000f444c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2154.762890][T16575] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2154.762890][T16575] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2154.762890][T16575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2154.762890][T16575] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2154.762890][T16575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2154.762890][T16575] Uninit was stored to memory at: [ 2154.762890][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2154.762890][T16575] __msan_chain_origin+0xcb/0x140 [ 2154.762890][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2154.762890][T16575] get_compat_msghdr+0x108/0x2c0 [ 2154.762890][T16575] do_recvmmsg+0x1063/0x2120 [ 2154.762890][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2154.762890][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2154.762890][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2154.762890][T16575] do_fast_syscall_32+0x3c/0x80 [ 2154.762890][T16575] do_SYSENTER_32+0x1b/0x20 [ 2154.762890][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2154.762890][T16575] [ 2154.762890][T16575] Uninit was stored to memory at: [ 2154.762890][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2154.762890][T16575] __msan_chain_origin+0xcb/0x140 [ 2154.762890][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2154.762890][T16575] get_compat_msghdr+0x108/0x2c0 [ 2154.762890][T16575] do_recvmmsg+0x1063/0x2120 [ 2154.762890][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2154.762890][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2154.762890][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2154.762890][T16575] do_fast_syscall_32+0x3c/0x80 [ 2154.762890][T16575] do_SYSENTER_32+0x1b/0x20 [ 2154.762890][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2154.762890][T16575] [ 2154.762890][T16575] Uninit was stored to memory at: [ 2154.762890][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2154.762890][T16575] __msan_chain_origin+0xcb/0x140 [ 2154.762890][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2154.762890][T16575] get_compat_msghdr+0x108/0x2c0 [ 2154.762890][T16575] do_recvmmsg+0x1063/0x2120 [ 2154.762890][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2154.762890][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2154.762890][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2154.762890][T16575] do_fast_syscall_32+0x3c/0x80 [ 2154.762890][T16575] do_SYSENTER_32+0x1b/0x20 [ 2154.762890][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2154.762890][T16575] [ 2154.762890][T16575] Uninit was stored to memory at: [ 2154.762890][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2154.762890][T16575] __msan_chain_origin+0xcb/0x140 [ 2154.762890][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2154.762890][T16575] get_compat_msghdr+0x108/0x2c0 [ 2154.762890][T16575] do_recvmmsg+0x1063/0x2120 [ 2154.762890][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2154.762890][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2154.762890][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2154.762890][T16575] do_fast_syscall_32+0x3c/0x80 [ 2154.762890][T16575] do_SYSENTER_32+0x1b/0x20 [ 2154.762890][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2154.762890][T16575] [ 2154.762890][T16575] Uninit was stored to memory at: [ 2154.762890][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2154.762890][T16575] __msan_chain_origin+0xcb/0x140 [ 2154.762890][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2154.762890][T16575] get_compat_msghdr+0x108/0x2c0 [ 2154.762890][T16575] do_recvmmsg+0x1063/0x2120 [ 2154.762890][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2154.762890][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2154.762890][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2154.762890][T16575] do_fast_syscall_32+0x3c/0x80 [ 2154.762890][T16575] do_SYSENTER_32+0x1b/0x20 [ 2154.762890][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2154.762890][T16575] [ 2154.762890][T16575] Uninit was stored to memory at: [ 2154.762890][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2154.762890][T16575] __msan_chain_origin+0xcb/0x140 [ 2154.762890][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2154.762890][T16575] get_compat_msghdr+0x108/0x2c0 [ 2154.762890][T16575] do_recvmmsg+0x1063/0x2120 [ 2154.762890][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2154.762890][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2154.762890][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2154.762890][T16575] do_fast_syscall_32+0x3c/0x80 [ 2154.762890][T16575] do_SYSENTER_32+0x1b/0x20 [ 2154.762890][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2154.762890][T16575] [ 2154.762890][T16575] Uninit was stored to memory at: [ 2154.762890][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2154.762890][T16575] __msan_chain_origin+0xcb/0x140 [ 2154.762890][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2154.762890][T16575] get_compat_msghdr+0x108/0x2c0 [ 2154.762890][T16575] do_recvmmsg+0x1063/0x2120 [ 2154.762890][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2154.762890][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2154.762890][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2154.762890][T16575] do_fast_syscall_32+0x3c/0x80 [ 2154.762890][T16575] do_SYSENTER_32+0x1b/0x20 [ 2154.762890][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2154.762890][T16575] [ 2154.762890][T16575] Local variable ----msg_sys@do_recvmmsg created at: [ 2154.762890][T16575] do_recvmmsg+0xc1/0x2120 [ 2154.762890][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2155.703991][T16575] not chained 200000 origins [ 2155.708609][T16575] CPU: 0 PID: 16575 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 2155.712890][T16575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2155.712890][T16575] Call Trace: [ 2155.712890][T16575] dump_stack+0x25a/0x2f6 [ 2155.712890][T16575] kmsan_internal_chain_origin+0x6f/0x110 [ 2155.712890][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2155.712890][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2155.712890][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2155.712890][T16575] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2155.712890][T16575] ? __msan_instrument_asm_store+0x18a/0x1c0 [ 2155.712890][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2155.712890][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2155.712890][T16575] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 2155.712890][T16575] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2155.712890][T16575] ? should_fail+0x75/0x9c0 [ 2155.712890][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2155.712890][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2155.712890][T16575] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2155.712890][T16575] ? kmsan_unpoison_memory+0xeb/0x120 [ 2155.712890][T16575] ? _copy_from_user+0x219/0x310 [ 2155.712890][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2155.712890][T16575] __msan_chain_origin+0xcb/0x140 [ 2155.712890][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2155.712890][T16575] get_compat_msghdr+0x108/0x2c0 [ 2155.712890][T16575] ? __sys_recvmmsg+0x51c/0x6f0 [ 2155.712890][T16575] do_recvmmsg+0x1063/0x2120 [ 2155.712890][T16575] ? __msan_poison_alloca+0x15a/0x1a0 [ 2155.712890][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2155.712890][T16575] ? kmsan_internal_check_memory+0xb5/0x520 [ 2155.712890][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2155.712890][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2155.712890][T16575] ? __msan_poison_alloca+0x15a/0x1a0 [ 2155.712890][T16575] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2155.712890][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2155.712890][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2155.712890][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2155.712890][T16575] do_fast_syscall_32+0x3c/0x80 [ 2155.712890][T16575] do_SYSENTER_32+0x1b/0x20 [ 2155.712890][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2155.712890][T16575] RIP: 0023:0xf6e73549 [ 2155.712890][T16575] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2155.712890][T16575] RSP: 002b:00000000f444c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2155.712890][T16575] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2155.712890][T16575] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2155.712890][T16575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2155.712890][T16575] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2155.712890][T16575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2155.712890][T16575] Uninit was stored to memory at: [ 2155.712890][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2155.712890][T16575] __msan_chain_origin+0xcb/0x140 [ 2155.712890][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2155.712890][T16575] get_compat_msghdr+0x108/0x2c0 [ 2155.712890][T16575] do_recvmmsg+0x1063/0x2120 [ 2155.712890][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2155.712890][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2155.712890][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2155.712890][T16575] do_fast_syscall_32+0x3c/0x80 [ 2155.712890][T16575] do_SYSENTER_32+0x1b/0x20 [ 2155.712890][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2155.712890][T16575] [ 2155.712890][T16575] Uninit was stored to memory at: [ 2155.712890][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2155.712890][T16575] __msan_chain_origin+0xcb/0x140 [ 2155.712890][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2155.712890][T16575] get_compat_msghdr+0x108/0x2c0 [ 2155.712890][T16575] do_recvmmsg+0x1063/0x2120 [ 2155.712890][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2155.712890][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2155.712890][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2155.712890][T16575] do_fast_syscall_32+0x3c/0x80 [ 2155.712890][T16575] do_SYSENTER_32+0x1b/0x20 [ 2155.712890][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2155.712890][T16575] [ 2155.712890][T16575] Uninit was stored to memory at: [ 2155.712890][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2155.712890][T16575] __msan_chain_origin+0xcb/0x140 [ 2155.712890][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2155.712890][T16575] get_compat_msghdr+0x108/0x2c0 [ 2155.712890][T16575] do_recvmmsg+0x1063/0x2120 [ 2155.712890][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2155.712890][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2155.712890][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2155.712890][T16575] do_fast_syscall_32+0x3c/0x80 [ 2155.712890][T16575] do_SYSENTER_32+0x1b/0x20 [ 2155.712890][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2155.712890][T16575] [ 2155.712890][T16575] Uninit was stored to memory at: [ 2155.712890][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2155.712890][T16575] __msan_chain_origin+0xcb/0x140 [ 2155.712890][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2155.712890][T16575] get_compat_msghdr+0x108/0x2c0 [ 2155.712890][T16575] do_recvmmsg+0x1063/0x2120 [ 2155.712890][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2155.712890][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2155.712890][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2155.712890][T16575] do_fast_syscall_32+0x3c/0x80 [ 2155.712890][T16575] do_SYSENTER_32+0x1b/0x20 [ 2155.712890][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2155.712890][T16575] [ 2155.712890][T16575] Uninit was stored to memory at: [ 2155.712890][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2155.712890][T16575] __msan_chain_origin+0xcb/0x140 [ 2155.712890][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2155.712890][T16575] get_compat_msghdr+0x108/0x2c0 [ 2155.712890][T16575] do_recvmmsg+0x1063/0x2120 [ 2155.712890][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2155.712890][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2155.712890][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2155.712890][T16575] do_fast_syscall_32+0x3c/0x80 [ 2155.712890][T16575] do_SYSENTER_32+0x1b/0x20 [ 2155.712890][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2155.712890][T16575] [ 2155.712890][T16575] Uninit was stored to memory at: [ 2155.712890][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2155.712890][T16575] __msan_chain_origin+0xcb/0x140 [ 2155.712890][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2155.712890][T16575] get_compat_msghdr+0x108/0x2c0 [ 2155.712890][T16575] do_recvmmsg+0x1063/0x2120 [ 2155.712890][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2155.712890][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2155.712890][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2155.712890][T16575] do_fast_syscall_32+0x3c/0x80 [ 2155.712890][T16575] do_SYSENTER_32+0x1b/0x20 [ 2155.712890][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2155.712890][T16575] [ 2155.712890][T16575] Uninit was stored to memory at: [ 2155.712890][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2155.712890][T16575] __msan_chain_origin+0xcb/0x140 [ 2155.712890][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2155.712890][T16575] get_compat_msghdr+0x108/0x2c0 [ 2155.712890][T16575] do_recvmmsg+0x1063/0x2120 [ 2155.712890][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2155.712890][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2155.712890][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2155.712890][T16575] do_fast_syscall_32+0x3c/0x80 [ 2155.712890][T16575] do_SYSENTER_32+0x1b/0x20 [ 2155.712890][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2155.712890][T16575] [ 2155.712890][T16575] Local variable ----msg_sys@do_recvmmsg created at: [ 2155.712890][T16575] do_recvmmsg+0xc1/0x2120 [ 2155.712890][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2156.676987][T16575] not chained 210000 origins [ 2156.681586][T16575] CPU: 0 PID: 16575 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 2156.682899][T16575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2156.695749][T16575] Call Trace: [ 2156.695749][T16575] dump_stack+0x25a/0x2f6 [ 2156.695749][T16575] kmsan_internal_chain_origin+0x6f/0x110 [ 2156.695749][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2156.695749][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2156.695749][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2156.695749][T16575] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2156.695749][T16575] ? __msan_instrument_asm_store+0x18a/0x1c0 [ 2156.695749][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2156.695749][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2156.695749][T16575] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 2156.695749][T16575] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2156.695749][T16575] ? should_fail+0x75/0x9c0 [ 2156.695749][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2156.695749][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2156.695749][T16575] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2156.695749][T16575] ? kmsan_unpoison_memory+0xeb/0x120 [ 2156.695749][T16575] ? _copy_from_user+0x219/0x310 [ 2156.695749][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2156.695749][T16575] __msan_chain_origin+0xcb/0x140 [ 2156.695749][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2156.695749][T16575] get_compat_msghdr+0x108/0x2c0 [ 2156.695749][T16575] ? __sys_recvmmsg+0x51c/0x6f0 [ 2156.695749][T16575] do_recvmmsg+0x1063/0x2120 [ 2156.695749][T16575] ? __msan_poison_alloca+0x15a/0x1a0 [ 2156.695749][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2156.695749][T16575] ? kmsan_internal_check_memory+0xb5/0x520 [ 2156.695749][T16575] ? kmsan_get_metadata+0x11b/0x180 [ 2156.695749][T16575] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2156.695749][T16575] ? __msan_poison_alloca+0x15a/0x1a0 [ 2156.695749][T16575] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2156.695749][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2156.695749][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2156.695749][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2156.695749][T16575] do_fast_syscall_32+0x3c/0x80 [ 2156.695749][T16575] do_SYSENTER_32+0x1b/0x20 [ 2156.695749][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2156.695749][T16575] RIP: 0023:0xf6e73549 [ 2156.695749][T16575] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2156.695749][T16575] RSP: 002b:00000000f444c5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2156.695749][T16575] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2156.695749][T16575] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2156.695749][T16575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2156.695749][T16575] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2156.695749][T16575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2156.695749][T16575] Uninit was stored to memory at: [ 2156.695749][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2156.695749][T16575] __msan_chain_origin+0xcb/0x140 [ 2156.695749][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2156.695749][T16575] get_compat_msghdr+0x108/0x2c0 [ 2156.695749][T16575] do_recvmmsg+0x1063/0x2120 [ 2156.695749][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2156.695749][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2156.695749][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2156.695749][T16575] do_fast_syscall_32+0x3c/0x80 [ 2156.695749][T16575] do_SYSENTER_32+0x1b/0x20 [ 2156.695749][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2156.695749][T16575] [ 2156.695749][T16575] Uninit was stored to memory at: [ 2156.695749][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2156.695749][T16575] __msan_chain_origin+0xcb/0x140 [ 2156.695749][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2156.695749][T16575] get_compat_msghdr+0x108/0x2c0 [ 2156.695749][T16575] do_recvmmsg+0x1063/0x2120 [ 2156.695749][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2156.695749][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2156.695749][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2156.695749][T16575] do_fast_syscall_32+0x3c/0x80 [ 2156.695749][T16575] do_SYSENTER_32+0x1b/0x20 [ 2156.695749][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2156.695749][T16575] [ 2156.695749][T16575] Uninit was stored to memory at: [ 2156.695749][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2156.695749][T16575] __msan_chain_origin+0xcb/0x140 [ 2156.695749][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2156.695749][T16575] get_compat_msghdr+0x108/0x2c0 [ 2156.695749][T16575] do_recvmmsg+0x1063/0x2120 [ 2156.695749][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2156.695749][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2156.695749][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2156.695749][T16575] do_fast_syscall_32+0x3c/0x80 [ 2156.695749][T16575] do_SYSENTER_32+0x1b/0x20 [ 2156.695749][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2156.695749][T16575] [ 2156.695749][T16575] Uninit was stored to memory at: [ 2156.695749][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2156.695749][T16575] __msan_chain_origin+0xcb/0x140 [ 2156.695749][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2156.695749][T16575] get_compat_msghdr+0x108/0x2c0 [ 2156.695749][T16575] do_recvmmsg+0x1063/0x2120 [ 2156.695749][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2156.695749][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2156.695749][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2156.695749][T16575] do_fast_syscall_32+0x3c/0x80 [ 2156.695749][T16575] do_SYSENTER_32+0x1b/0x20 [ 2156.695749][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2156.695749][T16575] [ 2156.695749][T16575] Uninit was stored to memory at: [ 2156.695749][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2156.695749][T16575] __msan_chain_origin+0xcb/0x140 [ 2156.695749][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2156.695749][T16575] get_compat_msghdr+0x108/0x2c0 [ 2156.695749][T16575] do_recvmmsg+0x1063/0x2120 [ 2156.695749][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2156.695749][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2156.695749][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2156.695749][T16575] do_fast_syscall_32+0x3c/0x80 [ 2156.695749][T16575] do_SYSENTER_32+0x1b/0x20 [ 2156.695749][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2156.695749][T16575] [ 2156.695749][T16575] Uninit was stored to memory at: [ 2156.695749][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2156.695749][T16575] __msan_chain_origin+0xcb/0x140 [ 2156.695749][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2156.695749][T16575] get_compat_msghdr+0x108/0x2c0 [ 2156.695749][T16575] do_recvmmsg+0x1063/0x2120 [ 2156.695749][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2156.695749][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2156.695749][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2156.695749][T16575] do_fast_syscall_32+0x3c/0x80 [ 2156.695749][T16575] do_SYSENTER_32+0x1b/0x20 [ 2156.695749][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2156.695749][T16575] [ 2156.695749][T16575] Uninit was stored to memory at: [ 2156.695749][T16575] kmsan_internal_chain_origin+0xa0/0x110 [ 2156.695749][T16575] __msan_chain_origin+0xcb/0x140 [ 2156.695749][T16575] __get_compat_msghdr+0x6e1/0x9d0 [ 2156.695749][T16575] get_compat_msghdr+0x108/0x2c0 [ 2156.695749][T16575] do_recvmmsg+0x1063/0x2120 [ 2156.695749][T16575] __sys_recvmmsg+0x51c/0x6f0 [ 2156.695749][T16575] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2156.695749][T16575] __do_fast_syscall_32+0x96/0xe0 [ 2156.695749][T16575] do_fast_syscall_32+0x3c/0x80 [ 2156.695749][T16575] do_SYSENTER_32+0x1b/0x20 [ 2156.695749][T16575] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2156.695749][T16575] [ 2156.695749][T16575] Local variable ----msg_sys@do_recvmmsg created at: [ 2156.695749][T16575] do_recvmmsg+0xc1/0x2120 [ 2156.695749][T16575] __sys_recvmmsg+0x51c/0x6f0 06:39:29 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2}}, 0x0) 06:39:29 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xd4759a32a9b6d4fc, 0x0) 06:39:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010200000000000000000300000008000100", @ANYBLOB='<'], 0x64}}, 0x0) 06:39:29 executing program 2: syz_io_uring_setup(0x1004f7f, &(0x7f0000001280)={0x0, 0x0, 0x10}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) 06:39:29 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x42, 0x0) 06:39:29 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x40900) [ 2157.699688][T16627] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2157.789406][T16630] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 06:39:29 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000008100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x181a1, 0x0) 06:39:29 executing program 1: io_uring_setup(0x3657, &(0x7f0000000200)={0x0, 0x0, 0x2}) 06:39:29 executing program 3: syz_mount_image$ocfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000001580)) 06:39:29 executing program 2: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) 06:39:30 executing program 5: clock_gettime(0x0, &(0x7f0000000100)={0x0}) select(0x40, &(0x7f0000000040)={0x4}, &(0x7f0000000080)={0x1}, 0x0, &(0x7f0000000140)={r0}) 06:39:30 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001d00), 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, 0x0) 06:39:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 06:39:30 executing program 4: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) 06:39:30 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x4, r4, 0x1, 0x0, 0x6, @dev}, 0x14) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="7f49b6b64c6de85c374703cf88a8", 0xe}], 0x1) 06:39:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)) 06:39:30 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0x400448c9, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7f5095e8"}, 0x0, 0x0, @fd}) 06:39:30 executing program 0: perf_event_open(&(0x7f0000001600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2158.809607][T16651] binder: 16649:16651 ioctl c018620b 0 returned -14 [ 2158.951556][T16657] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 06:39:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000391000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="48b843ffffffffffffff0f23c00f21f835000009000f23f866b8b3008ee00f20d835080000000f22d8b9800000c00f3235008000000f30c744240008000000c744240201000000c7442406000000000f011424c443055cd8800f01df6564420f218266baf80cb830323a88ef66bafc0ced48b8c9000000000000000f23d00f21f8350000000e0f23f8", 0x89}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x9) 06:39:31 executing program 1: socketpair(0x2b, 0x0, 0x0, &(0x7f0000001640)) 06:39:31 executing program 2: socketpair(0x1e, 0x0, 0x9, &(0x7f0000000180)) [ 2159.139096][T16664] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 06:39:31 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1ff}]}) 06:39:31 executing program 0: clock_gettime(0x0, &(0x7f0000000940)) 06:39:31 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000040)={0xb}) 06:39:31 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000002f80), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x11, r0, 0x10000000) 06:39:31 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000015c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 06:39:31 executing program 2: mount$9p_fd(0x0, &(0x7f0000001740)='.\x00', 0x0, 0x0, 0x0) 06:39:31 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30d531b6f4224e5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:39:31 executing program 4: syz_io_uring_setup(0x589e, &(0x7f0000001580)={0x0, 0x3475, 0xa}, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000011c0), &(0x7f0000001640)) 06:39:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x3, &(0x7f0000000100)}], 0x492492492492805, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000001c0)=@caif, 0x80, 0x0}, 0x0) 06:39:32 executing program 1: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0xfffffffffffffffb}, &(0x7f00000000c0)={0x77359400}) 06:39:32 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000006000)='ns/uts\x00') 06:39:32 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001180)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$BLKTRACESTART(r0, 0x40305828, 0x0) 06:39:32 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x4) 06:39:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000580)={0xa, 0x4, 0x0, @dev, 0x3}, 0x1c, 0x0}, 0x0) 06:39:32 executing program 4: select(0xfefdffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x2710}) 06:39:32 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaa93aabb0806"], 0x0) 06:39:32 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f00000000c0)) 06:39:32 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001180)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$BLKTRACESTART(r0, 0x5451, 0x0) 06:39:33 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000001c0)=""/79, 0x4f}}, 0x120) 06:39:33 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000580)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c, 0x0}, 0x20000000) sendmsg$inet6(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 06:39:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) 06:39:33 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x9}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) [ 2161.459204][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.467337][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.475114][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.482686][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.490522][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.498271][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.506036][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.513965][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.521630][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.529473][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.537327][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.545100][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.552675][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.560446][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.568199][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.576145][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.583880][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.591624][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.599642][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.607496][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.615367][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.623160][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.630719][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.638553][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.646358][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.654184][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.661987][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.669836][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.677678][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.685585][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.693386][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.701055][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.709347][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.717084][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.725160][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.732796][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.740609][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.748475][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.756165][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.763861][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.771550][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.779230][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.786977][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.794760][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.802426][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.810120][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.817802][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.825668][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.833427][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.841005][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.848707][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 06:39:33 executing program 2: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002400)=0xffffffffffffffff, 0x4) 06:39:33 executing program 0: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) [ 2161.856758][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.864638][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.872468][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.880413][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.888169][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.895926][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.903635][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.911185][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.918877][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.926677][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.934443][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.942129][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.949810][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.957503][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.965203][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.972776][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.980431][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.988105][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2161.995842][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2162.003543][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2162.011123][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2162.018902][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2162.026613][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2162.034324][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2162.041894][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2162.049580][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2162.057471][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2162.065234][T16530] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 06:39:34 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0xb, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7f5095e8"}, 0x0, 0x0, @fd}) 06:39:34 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 06:39:34 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) 06:39:34 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) [ 2162.702411][T16744] QAT: failed to copy from user cfg_data. 06:39:34 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r0, &(0x7f0000008100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 06:39:34 executing program 3: syz_io_uring_setup(0x6cc4, &(0x7f0000000040)={0x0, 0x5b70, 0x20, 0x2, 0xbd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r1 = syz_io_uring_setup(0x4f24, &(0x7f0000000140)={0x0, 0x4287, 0x1, 0x0, 0x312}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x3c68, &(0x7f0000000300)={0x0, 0x7931, 0x2, 0x3, 0x8a, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000002f80), 0x0) write$UHID_INPUT2(r3, 0x0, 0x0) syz_io_uring_submit(r0, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x800, 0x10}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) [ 2163.894327][T16530] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz1 06:39:36 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:39:36 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001180)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$BLKTRACESTART(r0, 0xc0189436, 0x0) 06:39:36 executing program 0: select(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x2710}) 06:39:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f00000000c0)=0x390d, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000200), r0) 06:39:36 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc30a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x0, 0x0}]}) 06:39:36 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000080)=@raw=[@map_val], &(0x7f0000000100)='syzkaller\x00', 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2164.238624][T16779] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2164.299748][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 06:39:36 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x10, 0x1403, 0x1}, 0x10}}, 0x0) 06:39:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) 06:39:36 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000002c0)={'sit0\x00', 0x0}) [ 2164.496026][T16530] usb 3-1: new high-speed USB device number 75 using dummy_hcd 06:39:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='.', 0x1, 0x95, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @sack_perm, @timestamp, @sack_perm, @sack_perm, @sack_perm], 0x8) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)="a9", 0x1}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 06:39:36 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8005}, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) [ 2164.753484][T16530] usb 3-1: Using ep0 maxpacket: 8 06:39:36 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvmmsg(r0, &(0x7f00000078c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12140, 0x0) [ 2164.873832][T16530] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 06:39:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 06:39:36 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000002340), 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002380)={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "19619c49"}, 0x0, 0x0, @fd}) 06:39:37 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000000)=@ieee802154={0x24, @short}, 0xfef2, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/158, 0x9e}}], 0x1, 0x0, 0x0) [ 2165.285731][T16530] usb 3-1: New USB device found, idVendor=046d, idProduct=c30a, bcdDevice= 0.40 [ 2165.295385][T16530] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2165.305050][T16530] usb 3-1: Product: syz [ 2165.309350][T16530] usb 3-1: SerialNumber: syz [ 2165.374791][T16803] ===================================================== [ 2165.381961][T16803] BUG: KMSAN: uninit-value in xfrm_user_rcv_msg_compat+0x8bc/0x1e90 [ 2165.382899][T16803] xfrm_user_rcv_msg_compat+0x8bc/0x1e90 [ 2165.382899][T16803] xfrm_user_rcv_msg+0x4a2/0xfa0 [ 2165.382899][T16803] netlink_rcv_skb+0x447/0x800 [ 2165.382899][T16803] xfrm_netlink_rcv+0xb2/0xf0 [ 2165.382899][T16803] netlink_unicast+0x107b/0x1350 [ 2165.382899][T16803] netlink_sendmsg+0x1734/0x17c0 [ 2165.382899][T16803] ____sys_sendmsg+0xe11/0x12c0 [ 2165.382899][T16803] __sys_sendmsg+0x704/0x840 [ 2165.382899][T16803] __ia32_compat_sys_sendmsg+0xed/0x130 [ 2165.382899][T16803] __do_fast_syscall_32+0x96/0xe0 [ 2165.382899][T16803] do_fast_syscall_32+0x3c/0x80 [ 2165.382899][T16803] do_SYSENTER_32+0x1b/0x20 [ 2165.382899][T16803] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2165.382899][T16803] [ 2165.382899][T16803] Local variable ----attrs@xfrm_user_rcv_msg_compat created at: [ 2165.382899][T16803] xfrm_user_rcv_msg_compat+0xf0/0x1e90 [ 2165.382899][T16803] xfrm_user_rcv_msg+0x4a2/0xfa0 [ 2165.382899][T16803] ===================================================== [ 2165.382899][T16803] Disabling lock debugging due to kernel taint [ 2165.382899][T16803] Kernel panic - not syncing: panic_on_kmsan set ... [ 2165.382899][T16803] CPU: 0 PID: 16803 Comm: syz-executor.0 Tainted: G B 5.13.0-syzkaller #0 [ 2165.382899][T16803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2165.382899][T16803] Call Trace: [ 2165.382899][T16803] dump_stack+0x25a/0x2f6 [ 2165.382899][T16803] panic+0x4c7/0xe98 [ 2165.382899][T16803] ? add_taint+0x187/0x210 [ 2165.382899][T16803] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2165.382899][T16803] kmsan_report+0x2ee/0x300 [ 2165.382899][T16803] ? __msan_warning+0xd7/0x150 [ 2165.382899][T16803] ? xfrm_user_rcv_msg_compat+0x8bc/0x1e90 [ 2165.382899][T16803] ? xfrm_user_rcv_msg+0x4a2/0xfa0 [ 2165.382899][T16803] ? netlink_rcv_skb+0x447/0x800 [ 2165.382899][T16803] ? xfrm_netlink_rcv+0xb2/0xf0 [ 2165.382899][T16803] ? netlink_unicast+0x107b/0x1350 [ 2165.382899][T16803] ? netlink_sendmsg+0x1734/0x17c0 [ 2165.382899][T16803] ? ____sys_sendmsg+0xe11/0x12c0 [ 2165.382899][T16803] ? __sys_sendmsg+0x704/0x840 [ 2165.382899][T16803] ? __ia32_compat_sys_sendmsg+0xed/0x130 [ 2165.382899][T16803] ? __do_fast_syscall_32+0x96/0xe0 [ 2165.382899][T16803] ? do_fast_syscall_32+0x3c/0x80 [ 2165.382899][T16803] ? do_SYSENTER_32+0x1b/0x20 [ 2165.382899][T16803] ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2165.382899][T16803] __msan_warning+0xd7/0x150 [ 2165.382899][T16803] xfrm_user_rcv_msg_compat+0x8bc/0x1e90 [ 2165.382899][T16803] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2165.382899][T16803] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2165.382899][T16803] ? kmsan_get_metadata+0x11b/0x180 [ 2165.382899][T16803] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 2165.382899][T16803] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 2165.382899][T16803] ? ns_capable+0x19a/0x240 [ 2165.382899][T16803] ? kmsan_get_metadata+0x11b/0x180 [ 2165.382899][T16803] ? try_module_get+0x19/0x280 [ 2165.382899][T16803] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 2165.382899][T16803] ? kmsan_get_metadata+0x11b/0x180 [ 2165.382899][T16803] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 2165.382899][T16803] xfrm_user_rcv_msg+0x4a2/0xfa0 [ 2165.382899][T16803] ? xfrm_alloc_compat+0x1f60/0x1f60 [ 2165.382899][T16803] ? kmsan_get_metadata+0x11b/0x180 [ 2165.382899][T16803] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 2165.382899][T16803] ? kmsan_get_metadata+0x11b/0x180 [ 2165.382899][T16803] ? kmsan_get_metadata+0x11b/0x180 [ 2165.382899][T16803] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2165.382899][T16803] ? kmsan_get_metadata+0x11b/0x180 [ 2165.382899][T16803] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 2165.382899][T16803] netlink_rcv_skb+0x447/0x800 [ 2165.382899][T16803] ? xfrm_netlink_rcv+0xf0/0xf0 [ 2165.382899][T16803] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 2165.382899][T16803] xfrm_netlink_rcv+0xb2/0xf0 [ 2165.382899][T16803] ? xfrm_user_net_exit+0x190/0x190 [ 2165.382899][T16803] netlink_unicast+0x107b/0x1350 [ 2165.382899][T16803] netlink_sendmsg+0x1734/0x17c0 [ 2165.382899][T16803] ____sys_sendmsg+0xe11/0x12c0 [ 2165.382899][T16803] ? netlink_getsockopt+0x11d0/0x11d0 [ 2165.382899][T16803] __sys_sendmsg+0x704/0x840 [ 2165.382899][T16803] ? kmsan_copy_to_user+0xb7/0xc0 [ 2165.382899][T16803] ? _copy_to_user+0x1ef/0x270 [ 2165.382899][T16803] ? kmsan_get_metadata+0x11b/0x180 [ 2165.382899][T16803] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 2165.382899][T16803] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2165.382899][T16803] ? kmsan_get_metadata+0x11b/0x180 [ 2165.382899][T16803] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 2165.382899][T16803] __ia32_compat_sys_sendmsg+0xed/0x130 [ 2165.382899][T16803] __do_fast_syscall_32+0x96/0xe0 [ 2165.382899][T16803] do_fast_syscall_32+0x3c/0x80 [ 2165.382899][T16803] do_SYSENTER_32+0x1b/0x20 [ 2165.382899][T16803] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2165.382899][T16803] RIP: 0023:0xf6e73549 [ 2165.382899][T16803] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2165.382899][T16803] RSP: 002b:00000000f446d5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2165.382899][T16803] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000200 [ 2165.382899][T16803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2165.382899][T16803] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2165.382899][T16803] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2165.382899][T16803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2165.382899][T16803] Kernel Offset: disabled [ 2165.382899][T16803] Rebooting in 86400 seconds..