v$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3, r5}]) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(r3, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:14 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000000)) 15:08:14 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x9, &(0x7f00000000c0), 0x10) 15:08:14 executing program 2: getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 15:08:14 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="e2d638c4e36ea750c0b24d404646f40dcd121f97695f490cc88cd61e4a2d6e9be7ece84e1d6a9de7b345cb09ec18da8a1ea21fe5cd7bdf7ee1733d05c20824253b7794ada6caa016d87010f582db0aeadd0c1fa545857dc1d33495831fae56fd7dfdd1b08dc8927d95", 0x69}], 0x1}, 0xc080) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x3, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="ad88ffff0100010018120000", @ANYRES32, @ANYBLOB="000000000000000085300000040000001800000000000d0000000000fbff0100000000000000000086345e6fe5dc1cca62ae52be756c5d739788b2f808efbc305e42d7c6c3e308e6daaf78e9869d86cb6f18d6670877922194edfd79e91d189357c19ef7961200953f7e07dc309a58aec1338310e84852be1aa368af6d090000005aa58bddc7"], &(0x7f00000008c0)='syzkaller\x00', 0x9dd, 0xd2, &(0x7f0000000900)=""/210, 0x41100, 0x10, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000e00)={0x0, 0xa, 0x8, 0x7937}, 0x10}, 0x78) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000010d40)={&(0x7f0000010900)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000010cc0)=[{&(0x7f0000000640)=""/109, 0x6d}, {&(0x7f0000010a00)=""/36, 0x24}, {&(0x7f0000010a40)=""/169, 0xa9}, {&(0x7f0000010b00)=""/131, 0x83}, {&(0x7f0000010bc0)=""/83, 0x53}, {&(0x7f0000010c40)=""/89, 0x59}], 0x6}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000010e00)={0x1c, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x9, 0xd7, &(0x7f0000000340)=""/215, 0x40f00, 0x0, [], r5, 0x7, r4, 0x8, &(0x7f0000000480)={0x1, 0x20005}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xe, 0x3}, 0x10, 0x0, r3}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) [ 910.113213][T28307] hub 9-0:1.0: USB hub found [ 910.139447][T28307] hub 9-0:1.0: 8 ports detected [ 910.143490][T28309] fuse: Unknown parameter 'user_id00000000000000000000' 15:08:15 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 15:08:15 executing program 2: getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) [ 910.188383][T28306] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 15:08:15 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000000)) [ 910.374374][T28329] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 15:08:15 executing program 2: getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) [ 910.405803][ T26] audit: type=1804 audit(1588777695.283:190): pid=28327 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/712/bus" dev="sda1" ino=16268 res=1 [ 910.419712][T28330] fuse: Unknown parameter 'user_id00000000000000000000' [ 910.464624][T28329] team0: Device ipvlan1 failed to register rx_handler 15:08:15 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000000)) 15:08:15 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="e2d638c4e36ea750c0b24d404646f40dcd121f97695f490cc88cd61e4a2d6e9be7ece84e1d6a9de7b345cb09ec18da8a1ea21fe5cd7bdf7ee1733d05c20824253b7794ada6caa016d87010f582db0aeadd0c1fa545857dc1d33495831fae56fd7dfdd1b08dc8927d95", 0x69}], 0x1}, 0xc080) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x3, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="ad88ffff0100010018120000", @ANYRES32, @ANYBLOB="000000000000000085300000040000001800000000000d0000000000fbff0100000000000000000086345e6fe5dc1cca62ae52be756c5d739788b2f808efbc305e42d7c6c3e308e6daaf78e9869d86cb6f18d6670877922194edfd79e91d189357c19ef7961200953f7e07dc309a58aec1338310e84852be1aa368af6d090000005aa58bddc7"], &(0x7f00000008c0)='syzkaller\x00', 0x9dd, 0xd2, &(0x7f0000000900)=""/210, 0x41100, 0x10, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000e00)={0x0, 0xa, 0x8, 0x7937}, 0x10}, 0x78) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000010d40)={&(0x7f0000010900)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000010cc0)=[{&(0x7f0000000640)=""/109, 0x6d}, {&(0x7f0000010a00)=""/36, 0x24}, {&(0x7f0000010a40)=""/169, 0xa9}, {&(0x7f0000010b00)=""/131, 0x83}, {&(0x7f0000010bc0)=""/83, 0x53}, {&(0x7f0000010c40)=""/89, 0x59}], 0x6}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000010e00)={0x1c, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x9, 0xd7, &(0x7f0000000340)=""/215, 0x40f00, 0x0, [], r5, 0x7, r4, 0x8, &(0x7f0000000480)={0x1, 0x20005}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xe, 0x3}, 0x10, 0x0, r3}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) [ 910.860474][T28347] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 15:08:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 15:08:16 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3, r5}]) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(r3, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:16 executing program 2: getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 15:08:16 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)) [ 911.124042][T28355] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 911.197399][T28355] team0: Device ipvlan1 failed to register rx_handler 15:08:16 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="e2d638c4e36ea750c0b24d404646f40dcd121f97695f490cc88cd61e4a2d6e9be7ece84e1d6a9de7b345cb09ec18da8a1ea21fe5cd7bdf7ee1733d05c20824253b7794ada6caa016d87010f582db0aeadd0c1fa545857dc1d33495831fae56fd7dfdd1b08dc8927d95", 0x69}], 0x1}, 0xc080) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x3, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="ad88ffff0100010018120000", @ANYRES32, @ANYBLOB="000000000000000085300000040000001800000000000d0000000000fbff0100000000000000000086345e6fe5dc1cca62ae52be756c5d739788b2f808efbc305e42d7c6c3e308e6daaf78e9869d86cb6f18d6670877922194edfd79e91d189357c19ef7961200953f7e07dc309a58aec1338310e84852be1aa368af6d090000005aa58bddc7"], &(0x7f00000008c0)='syzkaller\x00', 0x9dd, 0xd2, &(0x7f0000000900)=""/210, 0x41100, 0x10, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000e00)={0x0, 0xa, 0x8, 0x7937}, 0x10}, 0x78) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000010d40)={&(0x7f0000010900)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000010cc0)=[{&(0x7f0000000640)=""/109, 0x6d}, {&(0x7f0000010a00)=""/36, 0x24}, {&(0x7f0000010a40)=""/169, 0xa9}, {&(0x7f0000010b00)=""/131, 0x83}, {&(0x7f0000010bc0)=""/83, 0x53}, {&(0x7f0000010c40)=""/89, 0x59}], 0x6}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000010e00)={0x1c, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x9, 0xd7, &(0x7f0000000340)=""/215, 0x40f00, 0x0, [], r5, 0x7, r4, 0x8, &(0x7f0000000480)={0x1, 0x20005}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xe, 0x3}, 0x10, 0x0, r3}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:16 executing program 2: getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) [ 911.292511][T28366] fuse: Bad value for 'fd' [ 911.462489][ T26] audit: type=1804 audit(1588777696.343:191): pid=28377 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/713/bus" dev="sda1" ino=16280 res=1 [ 911.527112][T28382] fuse: Bad value for 'fd' [ 911.602571][T28381] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 15:08:17 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x11, 0x3, 0x300) r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x0, 'memory', 0xea}]}, 0xfa38) 15:08:17 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)) 15:08:17 executing program 2: getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 15:08:17 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3, r5}]) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(r3, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 912.270387][T28400] fuse: Bad value for 'fd' 15:08:17 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="e2d638c4e36ea750c0b24d404646f40dcd121f97695f490cc88cd61e4a2d6e9be7ece84e1d6a9de7b345cb09ec18da8a1ea21fe5cd7bdf7ee1733d05c20824253b7794ada6caa016d87010f582db0aeadd0c1fa545857dc1d33495831fae56fd7dfdd1b08dc8927d95", 0x69}], 0x1}, 0xc080) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x3, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="ad88ffff0100010018120000", @ANYRES32, @ANYBLOB="000000000000000085300000040000001800000000000d0000000000fbff0100000000000000000086345e6fe5dc1cca62ae52be756c5d739788b2f808efbc305e42d7c6c3e308e6daaf78e9869d86cb6f18d6670877922194edfd79e91d189357c19ef7961200953f7e07dc309a58aec1338310e84852be1aa368af6d090000005aa58bddc7"], &(0x7f00000008c0)='syzkaller\x00', 0x9dd, 0xd2, &(0x7f0000000900)=""/210, 0x41100, 0x10, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000e00)={0x0, 0xa, 0x8, 0x7937}, 0x10}, 0x78) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000010d40)={&(0x7f0000010900)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000010cc0)=[{&(0x7f0000000640)=""/109, 0x6d}, {&(0x7f0000010a00)=""/36, 0x24}, {&(0x7f0000010a40)=""/169, 0xa9}, {&(0x7f0000010b00)=""/131, 0x83}, {&(0x7f0000010bc0)=""/83, 0x53}, {&(0x7f0000010c40)=""/89, 0x59}], 0x6}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000010e00)={0x1c, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x9, 0xd7, &(0x7f0000000340)=""/215, 0x40f00, 0x0, [], r5, 0x7, r4, 0x8, &(0x7f0000000480)={0x1, 0x20005}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xe, 0x3}, 0x10, 0x0, r3}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) [ 912.377515][T28404] hub 9-0:1.0: USB hub found 15:08:17 executing program 2: getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) [ 912.398564][T28404] hub 9-0:1.0: 8 ports detected 15:08:17 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)) [ 912.658884][T28412] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 15:08:17 executing program 0: perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4f78b3bf39b888aa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 912.712288][T28420] fuse: Bad value for 'fd' 15:08:17 executing program 2: getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 15:08:17 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, 0x0) 15:08:17 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) pipe(&(0x7f0000000140)) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(r3, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:17 executing program 2: getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 15:08:17 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="e2d638c4e36ea750c0b24d404646f40dcd121f97695f490cc88cd61e4a2d6e9be7ece84e1d6a9de7b345cb09ec18da8a1ea21fe5cd7bdf7ee1733d05c20824253b7794ada6caa016d87010f582db0aeadd0c1fa545857dc1d33495831fae56fd7dfdd1b08dc8927d95", 0x69}], 0x1}, 0xc080) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x3, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="ad88ffff0100010018120000", @ANYRES32, @ANYBLOB="000000000000000085300000040000001800000000000d0000000000fbff0100000000000000000086345e6fe5dc1cca62ae52be756c5d739788b2f808efbc305e42d7c6c3e308e6daaf78e9869d86cb6f18d6670877922194edfd79e91d189357c19ef7961200953f7e07dc309a58aec1338310e84852be1aa368af6d090000005aa58bddc7"], &(0x7f00000008c0)='syzkaller\x00', 0x9dd, 0xd2, &(0x7f0000000900)=""/210, 0x41100, 0x10, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000e00)={0x0, 0xa, 0x8, 0x7937}, 0x10}, 0x78) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000010d40)={&(0x7f0000010900)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000010cc0)=[{&(0x7f0000000640)=""/109, 0x6d}, {&(0x7f0000010a00)=""/36, 0x24}, {&(0x7f0000010a40)=""/169, 0xa9}, {&(0x7f0000010b00)=""/131, 0x83}, {&(0x7f0000010bc0)=""/83, 0x53}, {&(0x7f0000010c40)=""/89, 0x59}], 0x6}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000010e00)={0x1c, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x9, 0xd7, &(0x7f0000000340)=""/215, 0x40f00, 0x0, [], r5, 0x7, r4, 0x8, &(0x7f0000000480)={0x1, 0x20005}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xe, 0x3}, 0x10, 0x0, r3}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) [ 912.922282][T28436] fuse: Bad value for 'fd' 15:08:17 executing program 0: perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4f78b3bf39b888aa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 913.074984][T28444] NFS: mount program didn't pass any mount data 15:08:18 executing program 2: getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) [ 913.122074][T28447] fuse: Bad value for 'fd' [ 913.202560][T28449] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 15:08:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 15:08:18 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, 0x0) 15:08:18 executing program 0: write$cgroup_int(0xffffffffffffffff, 0x0, 0x4000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086604, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) 15:08:18 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="e2d638c4e36ea750c0b24d404646f40dcd121f97695f490cc88cd61e4a2d6e9be7ece84e1d6a9de7b345cb09ec18da8a1ea21fe5cd7bdf7ee1733d05c20824253b7794ada6caa016d87010f582db0aeadd0c1fa545857dc1d33495831fae56fd7dfdd1b08dc8927d95", 0x69}], 0x1}, 0xc080) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x3, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="ad88ffff0100010018120000", @ANYRES32, @ANYBLOB="000000000000000085300000040000001800000000000d0000000000fbff0100000000000000000086345e6fe5dc1cca62ae52be756c5d739788b2f808efbc305e42d7c6c3e308e6daaf78e9869d86cb6f18d6670877922194edfd79e91d189357c19ef7961200953f7e07dc309a58aec1338310e84852be1aa368af6d090000005aa58bddc7"], &(0x7f00000008c0)='syzkaller\x00', 0x9dd, 0xd2, &(0x7f0000000900)=""/210, 0x41100, 0x10, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000e00)={0x0, 0xa, 0x8, 0x7937}, 0x10}, 0x78) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000010d40)={&(0x7f0000010900)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000010cc0)=[{&(0x7f0000000640)=""/109, 0x6d}, {&(0x7f0000010a00)=""/36, 0x24}, {&(0x7f0000010a40)=""/169, 0xa9}, {&(0x7f0000010b00)=""/131, 0x83}, {&(0x7f0000010bc0)=""/83, 0x53}, {&(0x7f0000010c40)=""/89, 0x59}], 0x6}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000010e00)={0x1c, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x9, 0xd7, &(0x7f0000000340)=""/215, 0x40f00, 0x0, [], r5, 0x7, r4, 0x8, &(0x7f0000000480)={0x1, 0x20005}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xe, 0x3}, 0x10, 0x0, r3}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x26e1, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:18 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) pipe(&(0x7f0000000140)) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(r3, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:18 executing program 2: getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) [ 913.422184][T28463] fuse: Unknown parameter '0x0000000000000004' [ 913.446290][T28467] NFS: mount program didn't pass any mount data 15:08:18 executing program 0: 15:08:18 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, 0x0) [ 913.592635][T28475] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 913.602822][T28474] hub 9-0:1.0: USB hub found [ 913.684904][T28474] hub 9-0:1.0: 8 ports detected 15:08:18 executing program 2: getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) [ 913.751811][T28486] fuse: Unknown parameter '0x0000000000000004' 15:08:18 executing program 0: [ 913.843776][T28494] NFS: mount program didn't pass any mount data 15:08:18 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="e2d638c4e36ea750c0b24d404646f40dcd121f97695f490cc88cd61e4a2d6e9be7ece84e1d6a9de7b345cb09ec18da8a1ea21fe5cd7bdf7ee1733d05c20824253b7794ada6caa016d87010f582db0aeadd0c1fa545857dc1d33495831fae56fd7dfdd1b08dc8927d95", 0x69}], 0x1}, 0xc080) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x3, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="ad88ffff0100010018120000", @ANYRES32, @ANYBLOB="000000000000000085300000040000001800000000000d0000000000fbff0100000000000000000086345e6fe5dc1cca62ae52be756c5d739788b2f808efbc305e42d7c6c3e308e6daaf78e9869d86cb6f18d6670877922194edfd79e91d189357c19ef7961200953f7e07dc309a58aec1338310e84852be1aa368af6d090000005aa58bddc7"], &(0x7f00000008c0)='syzkaller\x00', 0x9dd, 0xd2, &(0x7f0000000900)=""/210, 0x41100, 0x10, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000e00)={0x0, 0xa, 0x8, 0x7937}, 0x10}, 0x78) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000010d40)={&(0x7f0000010900)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000010cc0)=[{&(0x7f0000000640)=""/109, 0x6d}, {&(0x7f0000010a00)=""/36, 0x24}, {&(0x7f0000010a40)=""/169, 0xa9}, {&(0x7f0000010b00)=""/131, 0x83}, {&(0x7f0000010bc0)=""/83, 0x53}, {&(0x7f0000010c40)=""/89, 0x59}], 0x6}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000010e00)={0x1c, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="f828c84cbd90cce0f203e5f1085003eb3200fecfbe6c4996dfe14a74bfefcb8e24b86a4e3907b5cdbd0504e02086de07bf71497dd90ea20503e288ca8ad4d42ac0825efd4b5111209dcf559e704c9392463b5a5e7261b8b36858da6fc8a0ffdda424f9df252529b19949ab754f227f50febb9bc91d329c298c4c06303c31073ddaca8e26f4d85dc7859f05622605b0835c1ac535164697ecc998727ca320b945dbac9ba3b7a46ef5fba34cfd0588a73b8740f7039c8d8554c5906121a39dc80e943e3c67edf8477e905371a77c42f8eea35e909759e02d6d5340f65b0c912a2488973e45d68b876d0fd615d85aa9b7bae106892d19bb1640e38205f5f2bcbd08d3db766cb42362b0ce48910356d318db5c51e5a722e5e597d3", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x9, 0xd7, &(0x7f0000000340)=""/215, 0x40f00, 0x0, [], r5, 0x7, r4, 0x8, &(0x7f0000000480)={0x1, 0x20005}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xe, 0x3}, 0x10, 0x0, r3}, 0x78) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:18 executing program 5: [ 913.983370][T28496] fuse: Unknown parameter '0x0000000000000004' 15:08:19 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 15:08:19 executing program 2: getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 15:08:19 executing program 0: 15:08:19 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) pipe(&(0x7f0000000140)) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(r3, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:19 executing program 5: 15:08:19 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="e2d638c4e36ea750c0b24d404646f40dcd121f97695f490cc88cd61e4a2d6e9be7ece84e1d6a9de7b345cb09ec18da8a1ea21fe5cd7bdf7ee1733d05c20824253b7794ada6caa016d87010f582db0aeadd0c1fa545857dc1d33495831fae56fd7dfdd1b08dc8927d95", 0x69}], 0x1}, 0xc080) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x3, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="ad88ffff0100010018120000", @ANYRES32, @ANYBLOB="000000000000000085300000040000001800000000000d0000000000fbff0100000000000000000086345e6fe5dc1cca62ae52be756c5d739788b2f808efbc305e42d7c6c3e308e6daaf78e9869d86cb6f18d6670877922194edfd79e91d189357c19ef7961200953f7e07dc309a58aec1338310e84852be1aa368af6d090000005aa58bddc7"], &(0x7f00000008c0)='syzkaller\x00', 0x9dd, 0xd2, &(0x7f0000000900)=""/210, 0x41100, 0x10, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000e00)={0x0, 0xa, 0x8, 0x7937}, 0x10}, 0x78) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000010d40)={&(0x7f0000010900)=@xdp, 0x80, &(0x7f0000010cc0)=[{&(0x7f0000000640)=""/109, 0x6d}, {&(0x7f0000010a00)=""/36, 0x24}, {&(0x7f0000010a40)=""/169, 0xa9}, {&(0x7f0000010b00)=""/131, 0x83}, {&(0x7f0000010bc0)=""/83, 0x53}, {&(0x7f0000010c40)=""/89, 0x59}], 0x6}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) [ 914.452347][T28519] fuse: Unknown parameter '0x0000000000000004' 15:08:19 executing program 5: 15:08:19 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, r3, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0xfef0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0xfef0) io_submit(r4, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79f6249f6013899d48d32c01b6fc7f4c602f9dd5cf92e9acd155c210c0dff935dd544c4da85af9417cad88477ce1cd92fc6f936a7ee1ea22", 0xdf, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r7}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0xff, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r8}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:19 executing program 2: getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) [ 914.615948][ T26] audit: type=1804 audit(1588777699.493:192): pid=28536 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/716/bus" dev="sda1" ino=16272 res=1 15:08:19 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="e2d638c4e36ea750c0b24d404646f40dcd121f97695f490cc88cd61e4a2d6e9be7ece84e1d6a9de7b345cb09ec18da8a1ea21fe5cd7bdf7ee1733d05c20824253b7794ada6caa016d87010f582db0aeadd0c1fa545857dc1d33495831fae56fd7dfdd1b08dc8927d95", 0x69}], 0x1}, 0xc080) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x3, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="ad88ffff0100010018120000", @ANYRES32, @ANYBLOB="000000000000000085300000040000001800000000000d0000000000fbff0100000000000000000086345e6fe5dc1cca62ae52be756c5d739788b2f808efbc305e42d7c6c3e308e6daaf78e9869d86cb6f18d6670877922194edfd79e91d189357c19ef7961200953f7e07dc309a58aec1338310e84852be1aa368af6d090000005aa58bddc7"], &(0x7f00000008c0)='syzkaller\x00', 0x9dd, 0xd2, &(0x7f0000000900)=""/210, 0x41100, 0x10, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000e00)={0x0, 0xa, 0x8, 0x7937}, 0x10}, 0x78) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:19 executing program 5: 15:08:19 executing program 2: getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) [ 914.816406][T28543] fuse: Unknown parameter '0x0000000000000004' [ 914.923126][T28547] validate_nla: 2 callbacks suppressed [ 914.923136][T28547] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 915.029808][T28549] fuse: Unknown parameter '0x0000000000000004' 15:08:20 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 15:08:20 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(r3, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:20 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, r3, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0xfef0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0xfef0) io_submit(r4, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79f6249f6013899d48d32c01b6fc7f4c602f9dd5cf92e9acd155c210c0dff935dd544c4da85af9417cad88477ce1cd92fc6f936a7ee1ea22", 0xdf, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r7}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0xff, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r8}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:20 executing program 5: 15:08:20 executing program 2: getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 15:08:20 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="e2d638c4e36ea750c0b24d404646f40dcd121f97695f490cc88cd61e4a2d6e9be7ece84e1d6a9de7b345cb09ec18da8a1ea21fe5cd7bdf7ee1733d05c20824253b7794ada6caa016d87010f582db0aeadd0c1fa545857dc1d33495831fae56fd7dfdd1b08dc8927d95", 0x69}], 0x1}, 0xc080) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x3, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="ad88ffff0100010018120000", @ANYRES32, @ANYBLOB="000000000000000085300000040000001800000000000d0000000000fbff0100000000000000000086345e6fe5dc1cca62ae52be756c5d739788b2f808efbc305e42d7c6c3e308e6daaf78e9869d86cb6f18d6670877922194edfd79e91d189357c19ef7961200953f7e07dc309a58aec1338310e84852be1aa368af6d090000005aa58bddc7"], &(0x7f00000008c0)='syzkaller\x00', 0x9dd, 0xd2, &(0x7f0000000900)=""/210, 0x41100, 0x10, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000e00)={0x0, 0xa, 0x8, 0x7937}, 0x10}, 0x78) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:20 executing program 5: 15:08:20 executing program 2: getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) [ 915.495271][T28567] fuse: Unknown parameter 'fd0x0000000000000004' [ 915.507160][T28566] hub 9-0:1.0: USB hub found [ 915.525408][T28568] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 915.533871][T28566] hub 9-0:1.0: 8 ports detected 15:08:20 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="e2d638c4e36ea750c0b24d404646f40dcd121f97695f490cc88cd61e4a2d6e9be7ece84e1d6a9de7b345cb09ec18da8a1ea21fe5cd7bdf7ee1733d05c20824253b7794ada6caa016d87010f582db0aeadd0c1fa545857dc1d33495831fae56fd7dfdd1b08dc8927d95", 0x69}], 0x1}, 0xc080) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x3, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="ad88ffff0100010018120000", @ANYRES32, @ANYBLOB="000000000000000085300000040000001800000000000d0000000000fbff0100000000000000000086345e6fe5dc1cca62ae52be756c5d739788b2f808efbc305e42d7c6c3e308e6daaf78e9869d86cb6f18d6670877922194edfd79e91d189357c19ef7961200953f7e07dc309a58aec1338310e84852be1aa368af6d090000005aa58bddc7"], &(0x7f00000008c0)='syzkaller\x00', 0x9dd, 0xd2, &(0x7f0000000900)=""/210, 0x41100, 0x10, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000e00)={0x0, 0xa, 0x8, 0x7937}, 0x10}, 0x78) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:20 executing program 5: [ 915.752242][T28587] fuse: Unknown parameter 'fd0x0000000000000004' [ 915.775687][ T26] audit: type=1804 audit(1588777700.653:193): pid=28589 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/717/bus" dev="sda1" ino=16251 res=1 15:08:20 executing program 2: getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 15:08:20 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(r3, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 915.998472][T28596] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 916.001841][T28595] fuse: Unknown parameter 'fd0x0000000000000004' 15:08:21 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 15:08:21 executing program 0: 15:08:21 executing program 5: 15:08:21 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="e2d638c4e36ea750c0b24d404646f40dcd121f97695f490cc88cd61e4a2d6e9be7ece84e1d6a9de7b345cb09ec18da8a1ea21fe5cd7bdf7ee1733d05c20824253b7794ada6caa016d87010f582db0aeadd0c1fa545857dc1d33495831fae56fd7dfdd1b08dc8927d95", 0x69}], 0x1}, 0xc080) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x3, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="ad88ffff0100010018120000", @ANYRES32, @ANYBLOB="000000000000000085300000040000001800000000000d0000000000fbff0100000000000000000086345e6fe5dc1cca62ae52be756c5d739788b2f808efbc305e42d7c6c3e308e6daaf78e9869d86cb6f18d6670877922194edfd79e91d189357c19ef7961200953f7e07dc309a58aec1338310e84852be1aa368af6d090000005aa58bddc7"], &(0x7f00000008c0)='syzkaller\x00', 0x9dd, 0xd2, &(0x7f0000000900)=""/210, 0x41100, 0x10, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000e00)={0x0, 0xa, 0x8, 0x7937}, 0x10}, 0x78) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:21 executing program 2: 15:08:21 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(r3, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:21 executing program 2: 15:08:21 executing program 5: [ 916.669984][T28619] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 916.680412][T28618] hub 9-0:1.0: USB hub found 15:08:21 executing program 0: [ 916.723485][T28618] hub 9-0:1.0: 8 ports detected 15:08:21 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="e2d638c4e36ea750c0b24d404646f40dcd121f97695f490cc88cd61e4a2d6e9be7ece84e1d6a9de7b345cb09ec18da8a1ea21fe5cd7bdf7ee1733d05c20824253b7794ada6caa016d87010f582db0aeadd0c1fa545857dc1d33495831fae56fd7dfdd1b08dc8927d95", 0x69}], 0x1}, 0xc080) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:21 executing program 5: 15:08:21 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={r6}, 0x8) [ 917.079004][ T26] audit: type=1804 audit(1588777701.963:194): pid=28640 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/718/bus" dev="sda1" ino=16280 res=1 [ 917.232906][T28649] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 15:08:22 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 15:08:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_open(&(0x7f0000000000)='.::cgroup$+lo\x00', 0x0, 0x0, 0x0) 15:08:22 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(r3, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:22 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x377}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x3ec, &(0x7f0000000600)=""/191, 0x97}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 15:08:22 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={r6}, 0x8) 15:08:22 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="e2d638c4e36ea750c0b24d404646f40dcd121f97695f490cc88cd61e4a2d6e9be7ece84e1d6a9de7b345cb09ec18da8a1ea21fe5cd7bdf7ee1733d05c20824253b7794ada6caa016d87010f582db0aeadd0c1fa545857dc1d33495831fae56fd7dfdd1b08dc8927d95", 0x69}], 0x1}, 0xc080) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) [ 917.928761][T28677] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 15:08:22 executing program 2: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={r6}, 0x8) 15:08:22 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000140)='./bus\x00', 0x0) 15:08:23 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={r6}, 0x8) 15:08:23 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(r3, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:23 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="e2d638c4e36ea750c0b24d404646f40dcd121f97695f490cc88cd61e4a2d6e9be7ece84e1d6a9de7b345cb09ec18da8a1ea21fe5cd7bdf7ee1733d05c20824253b7794ada6caa016d87010f582db0aeadd0c1fa545857dc1d33495831fae56fd7dfdd1b08dc8927d95", 0x69}], 0x1}, 0xc080) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:23 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x0, 0x6, 0x801}, 0x14}}, 0x0) [ 918.370176][T28702] hub 9-0:1.0: USB hub found [ 918.393114][T28702] hub 9-0:1.0: 8 ports detected [ 918.451519][T28707] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 918.548621][ T26] audit: type=1804 audit(1588777703.423:195): pid=28698 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir367990643/syzkaller.mByuA1/775/bus" dev="sda1" ino=16258 res=1 15:08:23 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 15:08:23 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={r6}, 0x8) 15:08:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) ppoll(&(0x7f0000000000)=[{r3}, {r1}], 0x2, 0x0, 0x0, 0x0) 15:08:23 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(r3, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:23 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="e2d638c4e36ea750c0b24d404646f40dcd121f97695f490cc88cd61e4a2d6e9be7ece84e1d6a9de7b345cb09ec18da8a1ea21fe5cd7bdf7ee1733d05c20824253b7794ada6caa016d87010f582db0aeadd0c1fa545857dc1d33495831fae56fd7dfdd1b08dc8927d95", 0x69}], 0x1}, 0xc080) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) [ 918.908927][T28728] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 15:08:23 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x7a, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="6801000024000b0f000085000000400000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a00010063686f6b650000003801020014000300ff0000001f00000000000000041d1403140001002609009e7f000000ffff000002350200040102"], 0x168}}, 0x0) 15:08:23 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 919.102668][ T26] audit: type=1804 audit(1588777703.983:196): pid=28735 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/720/bus" dev="sda1" ino=16279 res=1 [ 919.315906][T28747] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 919.345628][T28747] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 919.430470][T28750] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 919.479599][T28750] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 919.789927][ T26] audit: type=1804 audit(1588777704.673:197): pid=28751 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir367990643/syzkaller.mByuA1/775/bus" dev="sda1" ino=16258 res=1 15:08:26 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000140)='./bus\x00', 0x0) 15:08:26 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:26 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:26 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:26 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000024000b0f000000000000000060000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002"], 0x58}}, 0x0) 15:08:26 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) [ 921.755327][T28781] hub 9-0:1.0: USB hub found [ 921.772468][T28781] hub 9-0:1.0: 8 ports detected [ 921.812759][T28787] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 921.813955][T28785] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 921.832039][ T26] audit: type=1804 audit(1588777706.703:198): pid=28786 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/721/bus" dev="sda1" ino=16264 res=1 15:08:26 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:27 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 922.101035][T28796] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 15:08:27 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:27 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000140)='./bus\x00', 0x0) 15:08:27 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 922.348783][T28809] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 15:08:27 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 922.855030][ T26] audit: type=1804 audit(1588777707.733:199): pid=28811 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir841774187/syzkaller.L9YugA/755/bus" dev="sda1" ino=15969 res=1 [ 923.388775][ T26] audit: type=1804 audit(1588777708.273:200): pid=28829 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir841774187/syzkaller.L9YugA/755/bus" dev="sda1" ino=15969 res=1 [ 923.528078][ T26] audit: type=1804 audit(1588777708.413:201): pid=28783 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir367990643/syzkaller.mByuA1/776/bus" dev="sda1" ino=16268 res=1 [ 924.362388][ T26] audit: type=1804 audit(1588777709.243:202): pid=28833 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir367990643/syzkaller.mByuA1/776/bus" dev="sda1" ino=16268 res=1 15:08:32 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000140)='./bus\x00', 0x0) 15:08:32 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:32 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:32 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 15:08:32 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {@in=@local, 0x0, 0x3c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in=@loopback}]}, 0x104}}, 0x0) [ 927.951762][T28888] hub 9-0:1.0: USB hub found [ 927.964855][T28892] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 927.988450][T28888] hub 9-0:1.0: 8 ports detected [ 928.003081][ T26] audit: type=1804 audit(1588777712.883:203): pid=28895 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/722/bus" dev="sda1" ino=16211 res=1 15:08:32 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:33 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:33 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d0424fc600800184006ac0f00051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) 15:08:33 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:33 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 928.410794][T28920] netlink: 124938 bytes leftover after parsing attributes in process `syz-executor.2'. 15:08:33 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 928.603395][T28923] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 15:08:34 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0xac8}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x377}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x97}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 15:08:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0affefff7f000000001e6ea64aa8e1c9", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000300)="94cd67a2d069bc3051e06e4a38b7d328", 0xd00, 0x0, 0x0, 0x0) 15:08:34 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 15:08:34 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:34 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:34 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 929.837474][T28973] hub 9-0:1.0: USB hub found 15:08:34 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:34 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 929.872908][ T26] audit: type=1804 audit(1588777714.753:204): pid=28977 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/723/bus" dev="sda1" ino=16279 res=1 15:08:34 executing program 2: [ 929.919792][T28973] hub 9-0:1.0: 8 ports detected 15:08:35 executing program 5: 15:08:35 executing program 2: 15:08:35 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:35 executing program 0: unshare(0x40680) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:35 executing program 5: 15:08:35 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 15:08:35 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:35 executing program 2: 15:08:35 executing program 0: unshare(0x40680) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:35 executing program 4: socket$kcm(0x2b, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:35 executing program 5: [ 930.725010][T29005] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 15:08:35 executing program 5: 15:08:35 executing program 2: 15:08:35 executing program 0: unshare(0x40680) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:35 executing program 2: 15:08:35 executing program 4: socket$kcm(0x2b, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) [ 931.013028][ T26] audit: type=1804 audit(1588777715.893:205): pid=29023 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/724/bus" dev="sda1" ino=16384 res=1 15:08:35 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 931.226795][T29029] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 15:08:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 15:08:36 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:36 executing program 5: 15:08:36 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:36 executing program 2: 15:08:36 executing program 4: socket$kcm(0x2b, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:36 executing program 2: [ 931.844258][T29047] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 15:08:36 executing program 5: [ 931.902831][T29049] hub 9-0:1.0: USB hub found 15:08:36 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 931.972681][T29049] hub 9-0:1.0: 8 ports detected 15:08:37 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:37 executing program 5: 15:08:37 executing program 2: [ 932.162613][ T26] audit: type=1804 audit(1588777717.043:206): pid=29065 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/725/bus" dev="sda1" ino=16322 res=1 [ 932.313425][T29072] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 15:08:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 15:08:37 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:37 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:37 executing program 5: 15:08:37 executing program 2: 15:08:37 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) [ 932.966486][T29089] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 15:08:37 executing program 5: 15:08:37 executing program 2: 15:08:37 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:38 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:38 executing program 5: 15:08:38 executing program 2: [ 933.308544][ T26] audit: type=1804 audit(1588777718.193:207): pid=29109 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/726/bus" dev="sda1" ino=16280 res=1 [ 933.391923][T29112] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 15:08:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 15:08:38 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:38 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:38 executing program 2: 15:08:38 executing program 5: 15:08:38 executing program 4: r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) [ 934.133713][T29140] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 934.171787][T29141] hub 9-0:1.0: USB hub found 15:08:39 executing program 5: 15:08:39 executing program 2: 15:08:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 934.198450][T29141] hub 9-0:1.0: 8 ports detected 15:08:39 executing program 4: r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:39 executing program 2: 15:08:39 executing program 5: [ 934.468528][ T26] audit: type=1804 audit(1588777719.353:208): pid=29160 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/727/bus" dev="sda1" ino=16268 res=1 [ 934.668238][T29165] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 15:08:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 15:08:40 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:40 executing program 2: 15:08:40 executing program 5: 15:08:40 executing program 4: r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) [ 935.275991][T29182] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 15:08:40 executing program 2: 15:08:40 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000300)={0x0, 0x2b5, 0x0, 0x6, 0xffffffffffffffe0}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240), 0xc, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x20000000) socket(0x0, 0x0, 0x0) 15:08:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:40 executing program 4: socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:40 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r1, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:40 executing program 0: unshare(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 935.654886][ T26] audit: type=1804 audit(1588777720.533:209): pid=29205 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/728/bus" dev="sda1" ino=16268 res=1 [ 935.731236][T29210] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 15:08:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 15:08:41 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0affefff7f000000001e6ea64aa8e1c9", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000300)="94cd67a2d069bc3051e06e4a38b7d3", 0x2000030f, 0x0, 0x0, 0x0) 15:08:41 executing program 0: unshare(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:41 executing program 4: socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:41 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r1, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:41 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) [ 936.498048][T29235] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 15:08:41 executing program 0: unshare(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 936.613313][ T26] audit: type=1400 audit(1588777721.493:210): avc: denied { write } for pid=29232 comm="syz-executor.5" path="socket:[282046]" dev="sockfs" ino=282046 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 15:08:41 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r1, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 936.754704][ T26] audit: type=1804 audit(1588777721.633:211): pid=29254 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/729/bus" dev="sda1" ino=16317 res=1 15:08:41 executing program 4: socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:41 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 937.038670][T29265] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 15:08:42 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r1 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r1, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:42 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 937.389586][T29286] hub 9-0:1.0: USB hub found [ 937.433296][T29286] hub 9-0:1.0: 8 ports detected 15:08:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) [ 937.730650][ T26] audit: type=1804 audit(1588777722.613:212): pid=29295 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/730/bus" dev="sda1" ino=16279 res=1 15:08:42 executing program 5: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) socket$inet6(0xa, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 15:08:42 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 15:08:42 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:42 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:42 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r1 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r1, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 938.187485][T29304] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 938.216064][T29308] hub 9-0:1.0: USB hub found [ 938.250999][T29308] hub 9-0:1.0: 8 ports detected 15:08:43 executing program 0: unshare(0x40680) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0affefff7f000000001e6ea64aa8e1c9", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}]}, 0x28}}, 0x0) 15:08:43 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r1 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r1, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:43 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 15:08:43 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="2c0000000300000000000000810000002d000200000000000000070000000000000000000100000000000000203b9d5a053786ed0fe77c918e324d9e4fc9e2b30a8c235631006d95773fcbcfd75a6bac4d9b7dcc65442c0e38c728b2c6ddf295b0ebb682d7d9fbdee2b15727bc4db2ff4fa309cd70894e40750c93bfb66d0878270ae8dae65c67e3ec350100000000000000a9621e11022429ab5f93ff2d52393520eb2cfd80b21d57b101f203ba0204bee494dfccdfd1c46878d599b1b2b6d872fc320a8e00000000419fb577b4650f4f5e3e633f4849083719d3ce0c0ade78f60b396cacafcbd36224efcd8b00f95373ab0304f029082ec097fa29659df3ac62b8a8"], 0x2c) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 15:08:43 executing program 0: unshare(0x40680) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 938.784430][T29339] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 939.054595][ T26] audit: type=1804 audit(1588777723.933:213): pid=29357 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/731/bus" dev="sda1" ino=16268 res=1 15:08:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000000000000900010073797a300000000014000000020a050000000000000000000200000014"], 0x5c}}, 0x0) 15:08:44 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:44 executing program 0: unshare(0x40680) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:44 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) [ 939.341190][T29363] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 939.370230][T29364] hub 9-0:1.0: USB hub found [ 939.424584][T29364] hub 9-0:1.0: 8 ports detected 15:08:44 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:44 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:44 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001540)=[{&(0x7f00000015c0)='\x00', 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x18ec3, 0x0) splice(r0, 0x0, r3, 0x0, 0x90005, 0x0) 15:08:44 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 15:08:44 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x2c) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 15:08:44 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:44 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:44 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="2c0000000300000000000000810000002d000200000000000000070000000000000000000100000000000000203b9d5a053786ed0fe77c918e324d9e4fc9e2b30a8c235631006d95773fcbcfd75a6bac4d9b7dcc65442c0e38c728b2c6ddf295b0ebb682d7d9fbdee2b15727bc4db2ff4fa309cd70894e40750c93bfb66d0878270ae8dae65c67e3ec3501000000000000"], 0x2c) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 15:08:44 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:45 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 940.183568][ T26] audit: type=1804 audit(1588777725.063:214): pid=29399 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/732/bus" dev="sda1" ino=16280 res=1 [ 940.197861][T29401] hub 9-0:1.0: USB hub found [ 940.337406][T29401] hub 9-0:1.0: 8 ports detected 15:08:45 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:45 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:45 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:45 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 15:08:46 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 941.343914][ T26] audit: type=1804 audit(1588777726.223:215): pid=29429 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/733/bus" dev="sda1" ino=16019 res=1 15:08:46 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="2c0000000300000000000000810000002d000200000000000000070000000000000000000100000000000000203b9d5a053786ed0fe77c918e324d9e4fc9e2b30a8c235631006d95773fcbcfd75a6bac4d9b7dcc65442c0e38c728b2c6ddf295b0ebb682d7d9fbdee2b15727bc4db2ff4fa309cd70894e40750c93bfb66d0878270ae8dae65c67e3ec350100000000000000a9621e11022429ab5f93ff2d52393520eb2cfd80b21d57b101f203ba0204bee494dfccdfd1c46878d599b1b2b6d872fc320a8e00000000419fb577b4650f4f5e3e633f4849083719d3ce0c0ade78f60b396cacafcbd36224efcd8b00f95373ab0304f029082ec097fa29659df3ac62b8a8"], 0x2c) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 15:08:46 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="2c0000000300000000000000810000002d000200000000000000070000000000000000000100000000000000203b9d5a053786ed0fe77c918e324d9e4fc9e2b30a8c235631006d95773fcbcfd75a6bac4d9b7dcc65442c0e38c728b2c6ddf295b0ebb682d7d9fbdee2b15727bc4db2ff4fa309cd70894e40750c93bfb66d0878270ae8dae65c67e3ec3501000000000000"], 0x2c) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 15:08:46 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:46 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:46 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 941.954202][T29439] hub 9-0:1.0: USB hub found 15:08:46 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 941.982322][T29439] hub 9-0:1.0: 8 ports detected 15:08:46 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x95ee0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 15:08:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 15:08:47 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:47 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, 0x0, 0x0) [ 942.703608][T29457] hub 9-0:1.0: USB hub found 15:08:47 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 942.781560][T29457] hub 9-0:1.0: 8 ports detected 15:08:47 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, 0x0, 0x0) 15:08:48 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x2c) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 15:08:48 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:48 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:48 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, 0x0, 0x0) 15:08:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 15:08:48 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="2c0000000300000000000000810000002d000200000000000000070000000000000000000100000000000000203b9d5a053786ed0fe77c918e324d9e4fc9e2b30a8c235631006d95773fcbcfd75a6bac4d9b7dcc65442c0e38c728b2c6ddf295b0ebb682d7d9fbdee2b15727bc4db2ff4fa309cd70894e40750c93bfb66d0878270ae8dae65c67e3ec3501000000000000"], 0x2c) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 15:08:48 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 943.945061][ T26] audit: type=1804 audit(1588777728.823:216): pid=29489 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/735/bus" dev="sda1" ino=16271 res=1 15:08:49 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:49 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 944.488943][T29502] hub 9-0:1.0: USB hub found 15:08:49 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 944.604721][T29502] hub 9-0:1.0: 8 ports detected 15:08:49 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) [ 945.336090][ T26] audit: type=1804 audit(1588777730.213:217): pid=29519 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/736/bus" dev="sda1" ino=16263 res=1 15:08:50 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x2c) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) 15:08:50 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:50 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 15:08:50 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:50 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="2c0000000300000000000000810000002d000200000000000000070000000000000000000100000000000000203b9d5a053786ed0fe77c918e324d9e4fc9e2b30a8c235631006d95773fcbcfd75a6bac4d9b7dcc65442c0e38c728b2c6ddf295b0ebb682d7d9fbdee2b15727bc4db2ff4fa309cd70894e40750c93bfb66d0878270ae8dae65c67e3ec3501000000000000"], 0x2c) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 15:08:51 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 15:08:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 15:08:51 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:51 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:51 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) [ 946.692722][ T26] audit: type=1804 audit(1588777731.563:218): pid=29552 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/737/bus" dev="sda1" ino=16316 res=1 15:08:51 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 946.853799][ T26] audit: type=1804 audit(1588777731.583:219): pid=29551 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/737/bus" dev="sda1" ino=16316 res=1 15:08:51 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 15:08:51 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:51 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x2c) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) [ 947.080453][T29561] hub 9-0:1.0: USB hub found [ 947.104589][T29561] hub 9-0:1.0: 8 ports detected 15:08:52 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:08:52 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 15:08:52 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="2c0000000300000000000000810000002d000200000000000000070000000000000000000100000000000000203b9d5a053786ed0fe77c918e324d9e4fc9e2b30a8c235631006d95773fcbcfd75a6bac4d9b7dcc65442c0e38c728b2c6ddf295b0ebb682d7d9fbdee2b15727bc4db2ff4fa309cd70894e40750c93bfb66d0878270ae8dae65c67e3ec3501000000000000"], 0x2c) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) 15:08:52 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 15:08:52 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000040)) 15:08:52 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 15:08:52 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="2c0000000300000000000000810000002d000200000000000000070000000000000000000100000000000000203b9d5a053786ed0fe77c918e324d9e4fc9e2b30a8c235631006d95773fcbcfd75a6bac4d9b7dcc65442c0e38c728b2c6ddf295b0ebb682d7d9fbdee2b15727bc4db2ff4fa309cd70894e40750c93bfb66d0878270ae8dae65c67e3ec350100000000000000a9621e11022429ab5f93ff2d52393520eb2cfd80b21d57b101f203ba0204bee494dfccdfd1c46878d599b1b2b6d872fc320a8e00000000419fb577b4650f4f5e3e633f4849083719d3ce0c0ade78f60b396cacafcbd36224efcd8b00f95373ab0304f029082ec097fa29659df3ac62b8a8"], 0x2c) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:08:52 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) [ 947.989131][ T26] audit: type=1804 audit(1588777732.873:220): pid=29587 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/738/bus" dev="sda1" ino=15814 res=1 [ 948.025974][T29585] hub 9-0:1.0: USB hub found [ 948.065678][T29585] hub 9-0:1.0: 8 ports detected 15:08:53 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000040)) 15:08:53 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x2c) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:08:53 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1}, 0x0) 15:08:53 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000040)) 15:08:53 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x2c) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:08:53 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="2c0000000300000000000000810000002d000200000000000000070000000000000000000100000000000000203b9d5a053786ed0fe77c918e324d9e4fc9e2b30a8c235631006d95773fcbcfd75a6bac4d9b7dcc65442c0e38c728b2c6ddf295b0ebb682d7d9fbdee2b15727bc4db2ff4fa309cd70894e40750c93bfb66d0878270ae8dae65c67e3ec3501000000000000"], 0x2c) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:08:53 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 15:08:53 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1}, 0x0) 15:08:53 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) 15:08:53 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:08:53 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:53 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) 15:08:53 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1}, 0x0) [ 949.212918][ T26] audit: type=1804 audit(1588777734.093:221): pid=29625 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/739/bus" dev="sda1" ino=16379 res=1 15:08:54 executing program 0: unshare(0x40680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) 15:08:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:54 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e", 0x17}], 0x1}, 0x0) 15:08:54 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="2c0000000300000000000000810000002d000200000000000000070000000000000000000100000000000000203b9d5a053786ed0fe77c918e324d9e4fc9e2b30a8c235631006d95773fcbcfd75a6bac4d9b7dcc65442c0e38c728b2c6ddf295b0ebb682d7d9fbdee2b15727bc4db2ff4fa309cd70894e40750c93bfb66d0878270ae8dae65c67e3ec3501000000000000"], 0x2c) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:08:54 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e", 0x17}], 0x1}, 0x0) 15:08:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 15:08:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 15:08:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:54 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:08:54 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="2c0000000300000000000000810000002d000200000000000000070000000000000000000100000000000000203b9d5a053786ed0fe77c918e324d9e4fc9e2b30a8c235631006d95773fcbcfd75a6bac4d9b7dcc65442c0e38c728b2c6ddf295b0ebb682d7d9fbdee2b15727bc4db2ff4fa309cd70894e40750c93bfb66d0878270ae8dae65c67e3ec3501000000000000"], 0x2c) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:08:54 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e", 0x17}], 0x1}, 0x0) 15:08:54 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x2c) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 15:08:55 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="2c0000000300000000000000810000002d000200000000000000070000000000000000000100000000000000203b9d5a053786ed0fe77c918e324d9e4fc9e2b30a8c235631006d95773fcbcfd75a6bac4d9b7dcc65442c0e38c728b2c6ddf295b0ebb682d7d9fbdee2b15727bc4db2ff4fa309cd70894e40750c93bfb66d0878270ae8dae65c67e3ec3501000000000000"], 0x2c) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:08:55 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:08:55 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e", 0x23}], 0x1}, 0x0) 15:08:55 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 950.193684][ T26] audit: type=1804 audit(1588777735.073:222): pid=29660 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/740/bus" dev="sda1" ino=16280 res=1 15:08:55 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:08:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 15:08:55 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:08:55 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:55 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e", 0x23}], 0x1}, 0x0) 15:08:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf74", 0x49, 0x11, 0x0, 0x0) 15:08:56 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e", 0x23}], 0x1}, 0x0) 15:08:56 executing program 0: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0x2271, 0x0) 15:08:56 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="0600", 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) 15:08:56 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 951.432435][ T26] audit: type=1804 audit(1588777736.313:223): pid=29694 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/741/bus" dev="sda1" ino=16280 res=1 15:08:56 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:08:56 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="0600", 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) 15:08:56 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000", 0x29}], 0x1}, 0x0) 15:08:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 15:08:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:08:57 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="0600", 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) 15:08:57 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:57 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000", 0x29}], 0x1}, 0x0) 15:08:57 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:08:57 executing program 2: getpgid(0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) 15:08:57 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:08:57 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000", 0x29}], 0x1}, 0x0) 15:08:57 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:08:57 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="0600", 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) [ 952.641552][ T26] audit: type=1804 audit(1588777737.523:224): pid=29736 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/742/bus" dev="sda1" ino=15939 res=1 15:08:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 15:08:58 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000", 0x2c}], 0x1}, 0x0) 15:08:58 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="0600", 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) 15:08:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:08:58 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:58 executing program 2: getpgid(0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) 15:08:58 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="0600", 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) 15:08:58 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000", 0x2c}], 0x1}, 0x0) [ 953.840909][ T26] audit: type=1804 audit(1588777738.723:225): pid=29778 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/743/bus" dev="sda1" ino=16194 res=1 15:08:58 executing program 5: getpgid(0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) 15:08:59 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:59 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000", 0x2c}], 0x1}, 0x0) 15:08:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f00000071c0)=""/4108, 0x100c}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/217, 0xd9}], 0x7}, 0x1}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/119, 0x77}], 0x1, &(0x7f0000002880)=""/126, 0x7e}, 0xf43}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/180, 0xb4}, {0x0}, {&(0x7f0000006cc0)=""/251, 0xfb}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/109, 0x6d}, {&(0x7f0000003d40)=""/75, 0x4b}], 0x7, &(0x7f0000003e40)=""/171, 0xab}, 0x1}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/129, 0x81}, {&(0x7f0000001800)=""/54, 0x36}], 0x2, &(0x7f0000004000)=""/101, 0x65}, 0x1}, {{&(0x7f0000004080)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @bcast, @remote, @rose, @default, @null]}, 0x80, 0x0}, 0x6}, {{&(0x7f00000042c0)=@l2tp6, 0x80, &(0x7f0000004440)=[{&(0x7f0000004340)=""/67, 0x43}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x2}, 0x8}, {{&(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 15:08:59 executing program 2: getpgid(0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) 15:08:59 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:08:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:08:59 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1", 0x2d}], 0x1}, 0x0) 15:09:00 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1", 0x2d}], 0x1}, 0x0) [ 955.249917][ T26] audit: type=1804 audit(1588777740.133:226): pid=29810 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/744/bus" dev="sda1" ino=15830 res=1 15:09:00 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:00 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) 15:09:00 executing program 5: getpgid(0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) 15:09:00 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a80648c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1", 0x2d}], 0x1}, 0x0) 15:09:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 15:09:01 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0x2283, 0x0) 15:09:01 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:01 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0x2272, 0x0) 15:09:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:01 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:01 executing program 4: syz_open_dev$sndmidi(&(0x7f00000002c0)='/dev/snd/midiC#D#\x00', 0x20, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x80045700, 0x0) 15:09:01 executing program 5: getpgid(0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) 15:09:01 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) 15:09:01 executing program 4: syz_open_dev$sndmidi(&(0x7f00000002c0)='/dev/snd/midiC#D#\x00', 0x20, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x80045700, 0x0) [ 957.032100][ T26] audit: type=1804 audit(1588777741.913:227): pid=29860 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/745/bus" dev="sda1" ino=16375 res=1 15:09:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:01 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 15:09:02 executing program 4: syz_open_dev$sndmidi(&(0x7f00000002c0)='/dev/snd/midiC#D#\x00', 0x20, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x80045700, 0x0) 15:09:02 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:02 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) 15:09:02 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) [ 958.016443][T29879] hub 9-0:1.0: USB hub found [ 958.072284][T29879] hub 9-0:1.0: 8 ports detected 15:09:03 executing program 4: syz_open_dev$sndmidi(&(0x7f00000002c0)='/dev/snd/midiC#D#\x00', 0x20, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x80045700, 0x0) 15:09:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:03 executing program 4: syz_open_dev$sndmidi(&(0x7f00000002c0)='/dev/snd/midiC#D#\x00', 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0x80045700, 0x0) 15:09:03 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:03 executing program 4: syz_open_dev$sndmidi(&(0x7f00000002c0)='/dev/snd/midiC#D#\x00', 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0x80045700, 0x0) 15:09:03 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 15:09:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:04 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) 15:09:04 executing program 2: r0 = getpgid(0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:04 executing program 4: syz_open_dev$sndmidi(&(0x7f00000002c0)='/dev/snd/midiC#D#\x00', 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0x80045700, 0x0) [ 959.225446][T29923] hub 9-0:1.0: USB hub found [ 959.257774][T29923] hub 9-0:1.0: 8 ports detected 15:09:04 executing program 4: r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x80045700, 0x0) 15:09:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(0x0, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 15:09:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:04 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:04 executing program 4: r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x80045700, 0x0) 15:09:04 executing program 4: r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x80045700, 0x0) 15:09:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 15:09:05 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) 15:09:05 executing program 2: r0 = getpgid(0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:05 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 960.323556][ T26] audit: type=1804 audit(1588777745.203:228): pid=29975 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/749/bus" dev="sda1" ino=16317 res=1 15:09:05 executing program 4: syz_open_dev$sndmidi(0x0, 0x20, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x80045700, 0x0) 15:09:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 960.619931][T29985] hub 9-0:1.0: USB hub found [ 960.679222][T29985] hub 9-0:1.0: 8 ports detected 15:09:05 executing program 4: syz_open_dev$sndmidi(0x0, 0x20, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x80045700, 0x0) [ 960.826746][ T26] audit: type=1804 audit(1588777745.703:229): pid=29995 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/750/bus" dev="sda1" ino=16316 res=1 15:09:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 15:09:06 executing program 4: syz_open_dev$sndmidi(0x0, 0x20, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x80045700, 0x0) 15:09:06 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:06 executing program 5: r0 = getpgid(0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:06 executing program 2: r0 = getpgid(0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) [ 961.330835][ T26] audit: type=1804 audit(1588777746.213:230): pid=30016 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/751/bus" dev="sda1" ino=16316 res=1 15:09:06 executing program 4: syz_open_dev$sndmidi(&(0x7f00000002c0)='/dev/snd/midiC#D#\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x80045700, 0x0) 15:09:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x0) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 15:09:06 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:06 executing program 4: syz_open_dev$sndmidi(&(0x7f00000002c0)='/dev/snd/midiC#D#\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x80045700, 0x0) [ 961.878543][ T26] audit: type=1804 audit(1588777746.763:231): pid=30036 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/752/bus" dev="sda1" ino=16271 res=1 15:09:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 962.003044][T30039] hub 9-0:1.0: USB hub found [ 962.042527][T30039] hub 9-0:1.0: 8 ports detected 15:09:06 executing program 4: syz_open_dev$sndmidi(&(0x7f00000002c0)='/dev/snd/midiC#D#\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x80045700, 0x0) 15:09:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x0) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 15:09:07 executing program 5: r0 = getpgid(0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:07 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:07 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 962.365074][ T26] audit: type=1804 audit(1588777747.243:232): pid=30056 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/753/bus" dev="sda1" ino=16272 res=1 15:09:07 executing program 4: syz_open_dev$sndmidi(&(0x7f00000002c0)='/dev/snd/midiC#D#\x00', 0x20, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0x80045700, 0x0) 15:09:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x0) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 15:09:07 executing program 4: syz_open_dev$sndmidi(&(0x7f00000002c0)='/dev/snd/midiC#D#\x00', 0x20, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0x80045700, 0x0) 15:09:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:07 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 962.862591][ T26] audit: type=1804 audit(1588777747.743:233): pid=30078 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/754/bus" dev="sda1" ino=16272 res=1 15:09:07 executing program 4: syz_open_dev$sndmidi(&(0x7f00000002c0)='/dev/snd/midiC#D#\x00', 0x20, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0x80045700, 0x0) 15:09:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 963.132542][T30088] hub 9-0:1.0: USB hub found [ 963.194024][T30088] hub 9-0:1.0: 8 ports detected 15:09:08 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) [ 963.348702][ T26] audit: type=1804 audit(1588777748.233:234): pid=30099 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/755/bus" dev="sda1" ino=16271 res=1 15:09:08 executing program 5: r0 = getpgid(0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:08 executing program 4: gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d640500000000007504000000000000070a000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8167f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18e980007235b44174f7c0243185089a0f119e31975e551558055dc2dc00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0x8003400, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) 15:09:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 15:09:08 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r4}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 963.833519][ T26] audit: type=1804 audit(1588777748.713:235): pid=30127 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/756/bus" dev="sda1" ino=16384 res=1 15:09:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 15:09:09 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r4}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 964.297027][ T26] audit: type=1804 audit(1588777749.183:236): pid=30144 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/757/bus" dev="sda1" ino=16379 res=1 [ 964.355152][T30143] hub 9-0:1.0: USB hub found 15:09:09 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) [ 964.391943][T30143] hub 9-0:1.0: 8 ports detected 15:09:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:09 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x0) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 15:09:09 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r4}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 964.807637][ T26] audit: type=1804 audit(1588777749.693:237): pid=30167 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/758/bus" dev="sda1" ino=16379 res=1 15:09:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x0) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 965.326123][ T26] audit: type=1804 audit(1588777750.203:238): pid=30184 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/759/bus" dev="sda1" ino=16322 res=1 15:09:11 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r4}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:11 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x0) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 15:09:11 executing program 4: gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d640500000000007504000000000000070a000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8167f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18e980007235b44174f7c0243185089a0f119e31975e551558055dc2dc00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0x8003400, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) 15:09:11 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) [ 966.814751][T30207] hub 9-0:1.0: USB hub found [ 966.854452][T30207] hub 9-0:1.0: 8 ports detected [ 966.866587][ T26] audit: type=1804 audit(1588777751.743:239): pid=30216 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/760/bus" dev="sda1" ino=16264 res=1 15:09:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 15:09:12 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r4}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 15:09:12 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:12 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 15:09:12 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r4}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 967.914065][T30255] hub 9-0:1.0: USB hub found 15:09:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 967.955662][T30255] hub 9-0:1.0: 8 ports detected 15:09:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 15:09:14 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000200)={0x0, 0x0, 0x0, [], 0x0}) 15:09:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 15:09:14 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0]) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r4}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:14 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa) 15:09:14 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) [ 969.989332][ T26] audit: type=1804 audit(1588777754.873:240): pid=30317 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/764/bus" dev="sda1" ino=16382 res=1 15:09:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa) 15:09:15 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000003080)=""/4096, 0x1000}], 0x1}}], 0x1, 0x100, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 15:09:15 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_RUN(r0, 0xae80, 0x0) 15:09:15 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0]) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r4}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 970.421407][ T26] audit: type=1804 audit(1588777755.303:241): pid=30333 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/765/bus" dev="sda1" ino=16382 res=1 [ 970.522591][T30335] hub 9-0:1.0: USB hub found 15:09:15 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_RUN(r0, 0xae80, 0x0) 15:09:15 executing program 4: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0xfffffffffffffff9}], 0x1, 0x0) r0 = gettid() tkill(r0, 0x1000000000016) [ 970.581501][T30335] hub 9-0:1.0: 8 ports detected 15:09:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa) 15:09:15 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:15 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:15 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0]) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r4}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:15 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 970.886858][ T26] audit: type=1804 audit(1588777755.763:242): pid=30352 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/766/bus" dev="sda1" ino=16214 res=1 15:09:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 15:09:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x2}}, 0x68}}, 0x0) 15:09:16 executing program 4: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x7a00, 0x17000000, 0x0, 0x240, 0x240, 0x240, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 971.180669][ T26] audit: type=1804 audit(1588777756.063:243): pid=30367 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/767/bus" dev="sda1" ino=16384 res=1 15:09:16 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 15:09:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 15:09:16 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:16 executing program 4: [ 971.433629][T30373] Cannot find add_set index 0 as target 15:09:16 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 971.618413][ T26] audit: type=1804 audit(1588777756.503:244): pid=30386 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/768/bus" dev="sda1" ino=16380 res=1 [ 971.699348][T30387] hub 9-0:1.0: USB hub found [ 971.744841][T30387] hub 9-0:1.0: 8 ports detected 15:09:16 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:16 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:16 executing program 4: 15:09:16 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 15:09:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 15:09:16 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:16 executing program 4: 15:09:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 972.116386][ T26] audit: type=1804 audit(1588777756.993:245): pid=30405 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/769/bus" dev="sda1" ino=16084 res=1 15:09:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) 15:09:17 executing program 4: 15:09:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 972.512438][ T26] audit: type=1804 audit(1588777757.393:246): pid=30420 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/770/bus" dev="sda1" ino=16268 res=1 15:09:17 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:17 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) [ 972.813909][T30426] hub 9-0:1.0: USB hub found [ 972.848398][T30426] hub 9-0:1.0: 8 ports detected 15:09:17 executing program 2: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) 15:09:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) 15:09:17 executing program 4: 15:09:18 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 973.116756][ T26] audit: type=1804 audit(1588777757.993:247): pid=30442 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/771/bus" dev="sda1" ino=16379 res=1 15:09:18 executing program 4: 15:09:18 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 15:09:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) 15:09:18 executing program 4: 15:09:18 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 973.666845][ T26] audit: type=1804 audit(1588777758.543:248): pid=30457 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir691695354/syzkaller.mPNFrd/772/bus" dev="sda1" ino=16322 res=1 15:09:18 executing program 4: 15:09:18 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:18 executing program 2: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) 15:09:18 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:18 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 15:09:18 executing program 1: 15:09:18 executing program 4: [ 974.257356][T30468] hub 9-0:1.0: USB hub found 15:09:19 executing program 1: 15:09:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 974.295115][T30468] hub 9-0:1.0: 8 ports detected 15:09:19 executing program 4: 15:09:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x20542) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "6de34a913d8790072b4ef2eccc1af741994041f404260bbc53686e55ffcea5ea29359a45d3f4bed6f4cc492689ec6d293f53000000000000c300", "2ad9fecca7ccfe97ea0900d6f3fa50d66f78bb53010400332eaf873f00"}) 15:09:19 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 15:09:19 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:19 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:20 executing program 2: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) 15:09:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:20 executing program 1: r0 = getpid() sched_setattr(r0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002d40)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x8000000) 15:09:20 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3}]) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) [ 975.298519][T30506] FAT-fs (loop4): bogus number of reserved sectors [ 975.384615][T30506] FAT-fs (loop4): Can't find a valid FAT filesystem [ 975.445506][T30514] hub 9-0:1.0: USB hub found 15:09:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 975.500250][T30514] hub 9-0:1.0: 8 ports detected [ 975.518103][T30506] FAT-fs (loop4): bogus number of reserved sectors [ 975.524790][T30506] FAT-fs (loop4): Can't find a valid FAT filesystem 15:09:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) 15:09:20 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3}]) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 975.990353][T30531] FAT-fs (loop4): bogus number of reserved sectors 15:09:20 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:21 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) [ 976.087605][T30531] FAT-fs (loop4): Can't find a valid FAT filesystem 15:09:21 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') sendfile(r0, r1, 0x0, 0x100000080000000) 15:09:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) 15:09:21 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3}]) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f00000005c0)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14917e, 0x0) ioctl$FITRIM(r1, 0x40047211, &(0x7f0000000180)={0xe0f}) [ 976.565645][T30557] FAT-fs (loop4): bogus number of reserved sectors [ 976.641860][T30557] FAT-fs (loop4): Can't find a valid FAT filesystem [ 976.664820][T30561] hub 9-0:1.0: USB hub found [ 976.733894][T30561] hub 9-0:1.0: 8 ports detected 15:09:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) 15:09:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:22 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) 15:09:22 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100000001, 0x0, r0}, 0x21) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 15:09:22 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:22 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 977.368496][T30590] FAT-fs (loop4): bogus number of reserved sectors [ 977.400508][T30590] FAT-fs (loop4): Can't find a valid FAT filesystem 15:09:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) 15:09:22 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:22 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) 15:09:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:22 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:22 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:22 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 978.203314][T30643] hub 9-0:1.0: USB hub found [ 978.248247][T30643] hub 9-0:1.0: 8 ports detected 15:09:23 executing program 5: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) 15:09:23 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) 15:09:23 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket(0x18, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000001, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x80000004, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='net/udp6\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='auxv\x00') 15:09:23 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:23 executing program 1: clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x8e}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:09:23 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:23 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:23 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) 15:09:23 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 978.722746][T30674] ptrace attach of "/root/syz-executor.1"[30673] was attempted by "/root/syz-executor.1"[30674] 15:09:23 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000000000)='R\x14rie', r0) 15:09:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 978.884636][T30683] hub 9-0:1.0: USB hub found [ 978.904286][T30683] hub 9-0:1.0: 8 ports detected 15:09:24 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:24 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:24 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da774c0f518d781a7a8672c", 0x82}, {&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee2514903088dfd546a136d40646857b851b65a7a918c58881be75d5d71239c7698d7bdb3f879f49436bbbd87586553407860397d48842400126f8703ddc55ba", 0xeb}, {&(0x7f0000000000)="40c11437fb00d6eab04b0c06251f8168813a461ace70236fa0348db1d319fe147c2390db325b8f9969aec8c5", 0x2c}, {&(0x7f0000001600)="46a43e3f510e3eac779206060abfc1e723fc59d595e9948e6d03be0d6c89d8702d5f2332fe4e991d8ce010dd173f3035a16bc1ae729800e6c53d5b3b7deacf114c931c707559610cd1366220890b11cd862202abfbcd24a76a2f0f7044964480ebd12d0bca901ac0e4e3188cb74f2b", 0x6f}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 15:09:24 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) 15:09:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:24 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) 15:09:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:24 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) 15:09:24 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) [ 980.166895][T30742] hub 9-0:1.0: USB hub found [ 980.213190][T30742] hub 9-0:1.0: 8 ports detected 15:09:25 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getpgid(r0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002d40)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x8000000) 15:09:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080), 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 15:09:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080), 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:25 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:25 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 980.641445][T30769] FAT-fs (loop4): bogus number of reserved sectors 15:09:25 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080), 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) [ 980.698722][T30769] FAT-fs (loop4): Can't find a valid FAT filesystem 15:09:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 15:09:25 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:25 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) [ 981.132136][T30798] FAT-fs (loop4): bogus number of reserved sectors [ 981.139014][T30798] FAT-fs (loop4): Can't find a valid FAT filesystem 15:09:26 executing program 1: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) pwrite64(r0, &(0x7f0000000240)='U', 0x1, 0x0) lseek(r0, 0x0, 0x4) 15:09:26 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:26 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 15:09:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 981.514163][T30810] FAT-fs (loop4): bogus number of reserved sectors [ 981.533323][T30811] hub 9-0:1.0: USB hub found [ 981.563611][T30810] FAT-fs (loop4): Can't find a valid FAT filesystem [ 981.579563][T30811] hub 9-0:1.0: 8 ports detected 15:09:26 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:26 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x20000000000006}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000038c0)=[{0xc}], 0xc}}], 0x2, 0x0) 15:09:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)) 15:09:26 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:26 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080), 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) [ 982.039771][T30832] FAT-fs (loop4): bogus number of reserved sectors [ 982.073557][T30833] hub 9-0:1.0: USB hub found [ 982.117174][T30832] FAT-fs (loop4): Can't find a valid FAT filesystem [ 982.135759][T30833] hub 9-0:1.0: 8 ports detected 15:09:27 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = dup3(r2, r1, 0x0) dup3(r3, r0, 0x0) connect$unix(r1, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 15:09:27 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080), 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:27 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)) 15:09:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:27 executing program 1: r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x4288}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="d618"], 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="230228efb4a24fe84689000080cb000000005d6fe0eb92552fba4784466ebedbcc3e06000000000000006c0e09d1ede6c1f37b9c352ef85800004380a8cf359a30a74dc68c37cfbef5c16f3e64880800000000000000bf08002a74e3e6236e1882c601f2b49e32018f6919c7234cebfe065d74f205005de2be4e7b3881c92986a5aba82763b2d6419456919956cfba8227afd19e8f003e80efbe0b10d442ddd904000000000000004b03ba4b656f9029509bed808f4aa86c8dc50de43149543b911caf5e9ccd3c36c416e6ba34d30721fec6933bef175b6dcfcb5c2c428f750e12bf08cf6a46df9b9e5b00c8de1d6687f10b410b852cc7c6dba25ce854d650dc3a13984b627b85d0809e6a420000a9027b413acacb65253484b86864a9a3bf219452c37d24fbb817dd347d98b3195fa81fd34083873063604893b9890834bc1bee1f2d34137b74920371226fd9e796f5586d354ba2edab762282359053a77689cb44982409000000f10fba67eb0a0dbbd15658dca7369052f97b8caebd4786bce825d47510a349a27b00000000000000000000000000003ae9aaacb2c6eb2ecd04979b7869f8a7cdf5f079861a964036381305ff4521bb6f63df0d1ace61c54b95fd12d059fa37e1c4770b39ac61c35fcc1d6c1a40781864d1d9c97fb88d0822ff58290edf34060fec4dff5af6257fb87e02e1507ee358cb4c22636223841c75b3824607ac44846b83bab5d1c012e7259a9fe629056c796152a69710f6"], 0x187) close(0xffffffffffffffff) clone(0x51802000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:09:27 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:27 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) [ 982.624947][T30864] FAT-fs (loop4): bogus number of reserved sectors 15:09:27 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080), 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) [ 982.742509][T30864] FAT-fs (loop4): Can't find a valid FAT filesystem 15:09:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:27 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080), 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)) 15:09:27 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(0xffffffffffffffff, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) [ 983.142129][T30899] FAT-fs (loop4): bogus number of reserved sectors 15:09:28 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080), 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:28 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(0xffffffffffffffff, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:28 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 983.201165][T30899] FAT-fs (loop4): Can't find a valid FAT filesystem 15:09:28 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(0xffffffffffffffff, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) [ 983.435597][T30914] hub 9-0:1.0: USB hub found [ 983.481856][T30914] hub 9-0:1.0: 8 ports detected 15:09:28 executing program 1: r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x4288}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="d618"], 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x187) close(0xffffffffffffffff) clone(0x51802000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:09:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:28 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080), 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:28 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:28 executing program 4: r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x4288}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="d618"], 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x187) close(0xffffffffffffffff) clone(0x51802000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:09:28 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:28 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:28 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:28 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:29 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 984.504146][T30958] hub 9-0:1.0: USB hub found [ 984.523269][T30958] hub 9-0:1.0: 8 ports detected 15:09:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f00000005c0)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14917e, 0x0) ioctl$FITRIM(r1, 0x40047211, &(0x7f0000000180)) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$FUSE_BMAP(r2, &(0x7f00000001c0)={0x18}, 0x18) 15:09:29 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, 0x0, 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:29 executing program 4: 15:09:29 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, 0x0, 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:29 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080), 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:29 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:29 executing program 4: 15:09:30 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, 0x0, 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:30 executing program 1: 15:09:30 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080), 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:30 executing program 4: 15:09:30 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:30 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:30 executing program 1: 15:09:30 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080), 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) [ 985.594969][T31005] hub 9-0:1.0: USB hub found 15:09:30 executing program 4: [ 985.620806][T31005] hub 9-0:1.0: 8 ports detected 15:09:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:30 executing program 1: 15:09:30 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:30 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(0xffffffffffffffff, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:30 executing program 4: 15:09:30 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:30 executing program 1: 15:09:31 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:31 executing program 4: 15:09:31 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(0xffffffffffffffff, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:31 executing program 1: 15:09:31 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x4, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:31 executing program 4: 15:09:31 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(0xffffffffffffffff, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:31 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0) 15:09:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:31 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) getpriority(0x1, 0x0) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000340)={0x0, 0x70, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x4085, 0x0, 0x2, 0x1, 0x1, 0x1, 0xe6}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl(r0, 0x80000000, 0x0) [ 986.643132][T31048] hub 9-0:1.0: USB hub found [ 986.672672][T31048] hub 9-0:1.0: 8 ports detected 15:09:31 executing program 4: open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{0x77359400}}) 15:09:31 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:31 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x4, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 987.106004][ T26] audit: type=1800 audit(1588777771.983:249): pid=31072 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16272 res=0 15:09:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x0, 0x0, 0xed, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff}, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x20, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000200), 0xe}, 0x0, 0x0, 0xffffff64, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe43) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1, 0x0, 0x0, 0x4c}, 0x0) 15:09:32 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) [ 987.652913][T31070] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 15:09:32 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0) 15:09:32 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x4, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:32 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x0, 0x0, 0xed, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff}, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x20, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000200), 0xe}, 0x0, 0x0, 0xffffff64, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe43) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1, 0x0, 0x0, 0x4c}, 0x0) 15:09:32 executing program 1: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x30, r0, 0x44b6f2ca51787dc7, 0x0, 0x0, {{}, {0x0, 0xf}, {0xc}}}, 0x30}}, 0x0) [ 987.967428][T31101] hub 9-0:1.0: USB hub found 15:09:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 988.040152][T31101] hub 9-0:1.0: 8 ports detected 15:09:33 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, 0x0, 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:33 executing program 4: socket$inet6(0xa, 0xa, 0xffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x5, 0xb, 0x7ff, 0x1}, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x84, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xbc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x84}, 0x1, 0x0, 0x0, 0x8005}, 0x0) 15:09:33 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, 0x0, 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:33 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, 0x0]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:33 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0) 15:09:33 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0xc0245720, &(0x7f0000000400)) 15:09:33 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, 0x0, 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:33 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) 15:09:33 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0xc0245720, &(0x7f0000000400)) 15:09:33 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:34 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, 0x0]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:34 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r6) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 15:09:34 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:34 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0xc0245720, &(0x7f0000000400)) [ 989.373096][T31161] hub 9-0:1.0: USB hub found [ 989.465200][T31161] hub 9-0:1.0: 8 ports detected 15:09:34 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x23, &(0x7f00000001c0)={@ipv4={[0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2], [], @local}}, 0x20) 15:09:34 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r1, 0x0) 15:09:34 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) 15:09:34 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0xc0245720, &(0x7f0000000400)) 15:09:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:34 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, 0x0]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:34 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r1}}) 15:09:34 executing program 1: syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0xc0245720, &(0x7f0000000400)) 15:09:34 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0) 15:09:35 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001d80)="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", 0x1a2}, {&(0x7f00000016c0)="7507747dd9bcc24bc9201e9ab3851c2352e456a59990f36599f89b848cf73dba62e0ee4d214b4ea417ba047283d923aa85916b00b017843fb4dd334d8bf4ab10c73e81992e6fd44138b794415b5cc26106b7db3a6b8796ce064e03", 0x5b}], 0x2) 15:09:35 executing program 1: syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0xc0245720, &(0x7f0000000400)) 15:09:35 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 990.542841][T31216] hub 9-0:1.0: USB hub found [ 990.588781][T31216] hub 9-0:1.0: 8 ports detected 15:09:35 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r1, 0x0) 15:09:35 executing program 1: syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0xc0245720, &(0x7f0000000400)) 15:09:35 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) dup2(r0, r1) 15:09:35 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:35 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) dup2(r0, r1) 15:09:35 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0xc0245720, &(0x7f0000000400)) 15:09:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:35 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0) 15:09:36 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0xb) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [], [0xc1]}) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000340)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, @perf_config_ext, 0x4085, 0x0, 0x2, 0x1, 0x1, 0x1, 0xe6}) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000440)="1e8c0f28318bc4e659cdf498a0eff55b1744d1323a") 15:09:36 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0xc0245720, &(0x7f0000000400)) 15:09:36 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 991.608170][T31260] hub 9-0:1.0: USB hub found [ 991.635656][T31260] hub 9-0:1.0: 8 ports detected [ 991.713893][T31256] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 15:09:36 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r1, 0x0) 15:09:36 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0xc0245720, &(0x7f0000000400)) 15:09:36 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0xb) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [], [0xc1]}) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000340)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, @perf_config_ext, 0x4085, 0x0, 0x2, 0x1, 0x1, 0x1, 0xe6}) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000440)="1e8c0f28318bc4e659cdf498a0eff55b1744d1323a") 15:09:36 executing program 1: r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0xc0245720, &(0x7f0000000400)) 15:09:36 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:09:37 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0) 15:09:37 executing program 1: r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0xc0245720, &(0x7f0000000400)) 15:09:37 executing program 1: r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0xc0245720, &(0x7f0000000400)) 15:09:37 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 15:09:37 executing program 1: r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0xc0245720, &(0x7f0000000400)) [ 992.923440][T31303] hub 9-0:1.0: USB hub found 15:09:37 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) [ 992.961834][T31303] hub 9-0:1.0: 8 ports detected 15:09:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 15:09:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9140}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x2000000000003, 0x2) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f00000002c0), 0x1}, 0x0) 15:09:38 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r1, 0x0) 15:09:38 executing program 1: r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0xc0245720, &(0x7f0000000400)) 15:09:38 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000600)="4f9cfc19013e506ec24471a669e1a3c89d424b3c9979add517caef7db7f846fbfdac29ff671f3c3b90d7366c37b6d9", 0x2f, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:38 executing program 1: r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0xc0245720, &(0x7f0000000400)) 15:09:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d3921f5890dc120f", "da3e46df2990851fb90736096520d0b5", "583c739d", "48bffef4aeb641cd"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 15:09:38 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0xc0245720, &(0x7f0000000400)) 15:09:38 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1c, &(0x7f00000001c0)={@ipv4={[0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2], [], @local}}, 0x20) 15:09:38 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:39 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) 15:09:39 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0xc0245720, &(0x7f0000000400)) [ 994.209797][T31351] hub 9-0:1.0: USB hub found 15:09:39 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='noikeep']) [ 994.253017][T31351] hub 9-0:1.0: 8 ports detected 15:09:39 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r1, 0x0) 15:09:39 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x190, 0x17000000, 0x0, 0x240, 0x240, 0x240, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 15:09:39 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0xc0245720, &(0x7f0000000400)) [ 994.595071][T31363] XFS (loop4): Invalid superblock magic number 15:09:39 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:39 executing program 1: syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0xc0245720, &(0x7f0000000400)) 15:09:39 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x190, 0x17000000, 0x0, 0x240, 0x240, 0x240, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 15:09:40 executing program 0: r0 = semget(0x2, 0x0, 0x0) semop(r0, &(0x7f0000000100), 0x88) 15:09:40 executing program 0: 15:09:40 executing program 1: syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0xc0245720, &(0x7f0000000400)) 15:09:40 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) 15:09:40 executing program 0: 15:09:40 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='noikeep']) 15:09:40 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r1, 0x0) 15:09:40 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:40 executing program 1: syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0xc0245720, &(0x7f0000000400)) [ 995.595665][T31411] hub 9-0:1.0: USB hub found 15:09:40 executing program 0: [ 995.629884][T31411] hub 9-0:1.0: 8 ports detected 15:09:40 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0xc0245720, &(0x7f0000000400)) [ 995.845530][T31419] XFS (loop4): Invalid superblock magic number 15:09:40 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b45602067fffffff81004e22000d7f000001925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x9b}], 0x1) 15:09:40 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:40 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0xc0245720, &(0x7f0000000400)) 15:09:41 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x43, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) wait4(0x0, 0x0, 0x0, 0x0) 15:09:41 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='noikeep']) 15:09:41 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0xc0245720, &(0x7f0000000400)) 15:09:41 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x43, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) wait4(0x0, 0x0, 0x0, 0x0) 15:09:41 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) [ 996.549268][T31449] XFS (loop4): Invalid superblock magic number 15:09:41 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup2(r0, r1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0xc0245720, &(0x7f0000000400)) 15:09:41 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:41 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup2(r0, r1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0xc0245720, &(0x7f0000000400)) [ 996.823348][T31472] hub 9-0:1.0: USB hub found [ 996.866644][T31472] hub 9-0:1.0: 8 ports detected 15:09:41 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='noikeep']) 15:09:41 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup2(r0, r1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0xc0245720, &(0x7f0000000400)) 15:09:42 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:42 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0xc0245720, 0x0) [ 997.303028][T31482] XFS (loop4): Invalid superblock magic number 15:09:42 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x43, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) wait4(0x0, 0x0, 0x0, 0x0) 15:09:42 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0xc0245720, 0x0) 15:09:42 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) 15:09:43 executing program 0: 15:09:43 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:43 executing program 4: syz_mount_image$xfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='noikeep']) 15:09:43 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0xc0245720, 0x0) [ 998.312573][T31524] hub 9-0:1.0: USB hub found [ 998.394616][T31524] hub 9-0:1.0: 8 ports detected 15:09:43 executing program 1: 15:09:43 executing program 0: 15:09:43 executing program 4: syz_mount_image$xfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='noikeep']) 15:09:43 executing program 0: 15:09:43 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) 15:09:43 executing program 2: 15:09:43 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x4, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:43 executing program 1: 15:09:43 executing program 2: 15:09:43 executing program 1: 15:09:43 executing program 1: 15:09:43 executing program 1: 15:09:43 executing program 0: 15:09:43 executing program 4: syz_mount_image$xfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='noikeep']) 15:09:43 executing program 2: 15:09:43 executing program 1: 15:09:44 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='noikeep']) 15:09:44 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x4, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:44 executing program 0: 15:09:44 executing program 2: 15:09:44 executing program 1: 15:09:44 executing program 5: 15:09:44 executing program 2: 15:09:44 executing program 0: [ 999.767556][T31575] hub 9-0:1.0: USB hub found 15:09:44 executing program 1: [ 999.805318][T31575] hub 9-0:1.0: 8 ports detected 15:09:44 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='noikeep']) 15:09:44 executing program 5: 15:09:44 executing program 2: 15:09:44 executing program 0: 15:09:45 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x4, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:45 executing program 1: 15:09:45 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='noikeep']) 15:09:45 executing program 5: 15:09:45 executing program 2: 15:09:45 executing program 0: 15:09:45 executing program 1: 15:09:45 executing program 0: 15:09:45 executing program 2: 15:09:45 executing program 5: 15:09:45 executing program 1: 15:09:45 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 15:09:45 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:45 executing program 0: 15:09:45 executing program 2: 15:09:45 executing program 1: 15:09:45 executing program 5: 15:09:45 executing program 0: [ 1000.691869][T31617] XFS (loop4): Invalid superblock magic number [ 1000.755161][T31630] hub 9-0:1.0: USB hub found 15:09:45 executing program 2: [ 1000.808767][T31630] hub 9-0:1.0: 8 ports detected 15:09:45 executing program 1: 15:09:45 executing program 5: 15:09:45 executing program 0: 15:09:45 executing program 2: 15:09:45 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 15:09:46 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:46 executing program 5: 15:09:46 executing program 1: 15:09:46 executing program 0: 15:09:46 executing program 2: 15:09:46 executing program 1: 15:09:46 executing program 5: 15:09:46 executing program 0: 15:09:46 executing program 1: [ 1001.525896][T31646] XFS (loop4): Invalid superblock magic number 15:09:46 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r5}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:46 executing program 2: [ 1001.764697][T31667] hub 9-0:1.0: USB hub found [ 1001.788079][T31667] hub 9-0:1.0: 8 ports detected 15:09:46 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 15:09:46 executing program 5: 15:09:46 executing program 0: 15:09:46 executing program 1: 15:09:46 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x9f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000180)={0x401, 0x8}, 0x0, 0x0) 15:09:46 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x2e}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 15:09:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r3, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x24}}, 0x0) 15:09:47 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local, {[@timestamp_prespec={0x44, 0x4, 0x9}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 15:09:47 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 1002.238211][T31682] XFS (loop4): Invalid superblock magic number 15:09:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9281a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 1002.344427][T31700] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:09:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_REGS(r6, 0x8090ae81, &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, 0x0) [ 1002.511031][T31704] hub 9-0:1.0: USB hub found [ 1002.557728][T31704] hub 9-0:1.0: 8 ports detected 15:09:47 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[]) 15:09:47 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local, {[@timestamp_prespec={0x44, 0x4, 0x9}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 15:09:47 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) r1 = memfd_create(&(0x7f0000000040)='/n\xcb2\x88\x1d\xf9\xff\xe7\xdc[\x17\x8b\xb2\xf7W\xf0\x06\x00\x00@\xc8k\xc0\xa5veli', 0x0) sched_setscheduler(0x0, 0x0, 0x0) ftruncate(r1, 0x40003) sendfile(r0, r1, 0x0, 0x2008000fffffffe) [ 1002.864030][T31723] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:09:47 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x2e}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) [ 1002.984228][T31729] XFS (loop4): Invalid superblock magic number 15:09:48 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', 0x0, 0x0, 0x1) [ 1003.126769][ T26] audit: type=1800 audit(1588777788.003:250): pid=31744 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16384 res=0 15:09:48 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x2e}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) [ 1003.197449][T31737] hub 9-0:1.0: USB hub found [ 1003.217062][T31737] hub 9-0:1.0: 8 ports detected [ 1003.271846][ T26] audit: type=1800 audit(1588777788.133:251): pid=31744 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16384 res=0 15:09:48 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x0, 0x0, 0x110, 0x0, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2={0xff, 0x2, [0x0, 0x0, 0xc0, 0x2]}, [], [], 'ip6gretap0\x00', 'batadv_slave_0\x00'}, 0x0, 0xf0, 0x110, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c], 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 15:09:48 executing program 2: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r4, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 15:09:48 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x2e}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x801308) 15:09:48 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[]) 15:09:48 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x2e}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 15:09:48 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 1003.580898][T31761] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1003.664221][T31767] xt_CT: You must specify a L4 protocol and not use inversions on it 15:09:48 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x0, 0x0, 0x110, 0x0, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2={0xff, 0x2, [0x0, 0x0, 0xc0, 0x2]}, [], [], 'ip6gretap0\x00', 'batadv_slave_0\x00'}, 0x0, 0xf0, 0x110, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c], 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 15:09:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x400000b}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f4072b09041e11000000ff000000000000000800040006000000", 0x79) 15:09:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x14917e, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') [ 1003.904945][T31774] XFS (loop4): Invalid superblock magic number 15:09:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000ec0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7977f02008b5e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07f34e4d5b318e2ec0efd49897a74a0091ff110026e6d2efe31ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a2d7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a17e3c184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd31a08b32808b8020000000000a15b46a983239dd27080e731327ef01fb6c86adac12233faa1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227db6436303767d2e24f29e5dad9796ec5697a6ea0182babc18cae2ed4b4390af9a9ceafd07fd00b0002002cab154ad029a119ca3c97278087001460af81c5f4adaddd1410e80207c14140c427dc16e8b00d5ee4e5e3ae703f8ea4c3dab45f912191f9df3d7c0cf0ea4f31d062d3d6e1d09f0479c9fb9825f9386cb5c8f7e49348d27d915b8e9349b17f7aab0d75690d78d5f14805e127ca2aa3beea073a77127fbe389324001aaae7efad93aa48d33a01e41fb317227369a10fd7bfa641635e8077e768e26a0e2d863abe87321db299396591fb8197e4e84aa17ae2f75f4c49b552748a54d1ef8ee18449a2dbf3c778e86cc74307267206abb801426c3e956d42014a0bd51815e17b489de1461f3d79b87c3ac774f9bb79d88a089cddf2155073000000000000003dd380a1af2486d6ccf4918a47312c80810223f4ab6d6524d012620e7f847daa3a0eebea812c70a0a1111a62ef04723649a40e134a70c0873643e4a6632d605e450d36ee321e02c6c1d5511c35f6652bae1b3512ac48c8479966ca333a3bbc3f20b693848458f8fe20a6f3263b4b1f96f08abcb4c92fa4fa52a3d46462ef3eb5beb7aec0b09f45b2f0ac6b494a822e0096dc6ee996b7f66eaa0922004bbc865214a3e921408d6b3f6d000aa7955729ac9098e28d733b9300000e00000000000000000000000000000000000000000000d6bcc3207b634e67ad59db076152f5b2dc81f57867b7d4ea7a4483b0050b794c34f260b2a290c97a7e8b5e59f279edbaa2ccab9c75bced97e875f1ff3d4fa613f4b0234f95d87a890d78740ca79d7474d217135d1f9576afcbb182b55f4c000000000000aa3d73e259bf61a2c08d884a623d6111c2c356776897a1a0d74847e8a8fd74224997cd92c6b7b2e3e1d56f4e0fa16d8cc2a8ee741e3b0593d2783c25e99d6154a0989531a8ae41bf87743cb2cfcf80f1dc20e34b671ffc5692ba35f61d316ea043873f6626cbe6ced1e3bb1b7b81a1e6416224120a164b22de83528585780781283872d74cb9a983f84d9a976ed8bbf665cc8a45685a3b8de7aaf3726f3983a79ae1f243413befb2997f56025135e4dfd0ed122e45cd83624c392be7157a03f14a70519876326636f43b2d142b0b3eb21bb0405fed1962d5d6896f4a6056196cdd920dbd"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f065581fffff", 0x0, 0x102, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:09:48 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000080)) 15:09:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x14917e, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') [ 1004.003825][ T26] audit: type=1800 audit(1588777788.883:252): pid=31795 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=291 res=0 [ 1004.026361][T31799] xt_CT: You must specify a L4 protocol and not use inversions on it 15:09:49 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0xb, &(0x7f0000000380)=ANY=[], 0x1) 15:09:49 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[]) 15:09:49 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x2e}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x801308) [ 1004.477522][T31816] hub 9-0:1.0: USB hub found [ 1004.484580][T31816] hub 9-0:1.0: 8 ports detected [ 1004.580706][ T26] audit: type=1800 audit(1588777789.463:253): pid=31811 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=294 res=0 15:09:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x2e}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x801308) 15:09:49 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aacc803825a321984", 0x7d, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x14917e, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') [ 1004.842572][T31828] XFS (loop4): Invalid superblock magic number 15:09:49 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local, {[@timestamp_prespec={0x44, 0x4, 0x9}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 15:09:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r2, 0x4b60, &(0x7f0000000100)={0x0, "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"}) [ 1005.065368][T31839] hub 9-0:1.0: USB hub found [ 1005.080807][T31839] hub 9-0:1.0: 8 ports detected 15:09:50 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local, {[@timestamp_prespec={0x44, 0x4, 0x9}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 15:09:50 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB]) 15:09:50 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', 0x0, 0x0, 0x0) [ 1005.371735][ T26] audit: type=1800 audit(1588777790.253:254): pid=31860 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16376 res=0 15:09:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x33}}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0xffdc) read(r2, &(0x7f0000000200)=""/165, 0xffdc) 15:09:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x2e}}], 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x801308) 15:09:50 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1005.811349][T31868] XFS (loop4): Invalid superblock magic number 15:09:50 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local={0xac, 0x14, 0x13}, {[@timestamp_prespec={0x44, 0x4, 0x9}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 15:09:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000180)) 15:09:50 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x2e}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@empty, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000300)=0xe8) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x801308) 15:09:51 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local={0xac, 0x14, 0x13}, {[@timestamp_prespec={0x44, 0x4, 0x9}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 15:09:51 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:51 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB]) 15:09:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) 15:09:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x0) 15:09:51 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1006.479778][T31916] hub 9-0:1.0: USB hub found [ 1006.563529][T31916] hub 9-0:1.0: 8 ports detected 15:09:51 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x2e}}], 0x1, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x200100, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000300)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x801308) [ 1006.608185][T31918] XFS (loop4): Invalid superblock magic number 15:09:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) 15:09:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCL_SETSEL(r2, 0x5600, &(0x7f0000000180)) 15:09:51 executing program 5: syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local, {[@timestamp_prespec={0x7, 0x4, 0x9}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 15:09:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) 15:09:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 15:09:52 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB]) 15:09:52 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:52 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x9f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000f00f88)) 15:09:52 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local, {[@timestamp_prespec={0x44, 0x4, 0x9}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 15:09:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) 15:09:52 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x400000b}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f4072b09041e1100000000000000000200000800040006000000", 0x79) 15:09:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x1ff) close(r0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 15:09:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, 0x0, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) [ 1007.418662][T31958] XFS (loop4): Invalid superblock magic number 15:09:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, 0x0, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) 15:09:52 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local, {[@timestamp_prespec={0x44, 0x4, 0x9}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 15:09:52 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local, {[@timestamp_prespec={0x7, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 15:09:52 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x4) 15:09:52 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='noik']) 15:09:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40010101) 15:09:52 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, 0x0, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) 15:09:52 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local, {[@timestamp_prespec={0x7, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1008.005002][T32006] hub 9-0:1.0: USB hub found 15:09:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = memfd_create(0x0, 0x0) pwritev(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)="c5", 0x1}], 0x1, 0x840ee5) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r4) write(r0, &(0x7f0000000000), 0x400000) [ 1008.051141][T32006] hub 9-0:1.0: 8 ports detected [ 1008.101844][T32014] xfs: Unknown parameter 'noik' 15:09:53 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local, {[@timestamp_prespec={0x7, 0x4, 0x9}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 15:09:53 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local, {[@timestamp_prespec={0x7, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 15:09:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r4, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) 15:09:53 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='noik']) 15:09:53 executing program 2: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x1}, 0x8, 0x0) msgctl$IPC_RMID(r0, 0x0) 15:09:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r4, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) 15:09:53 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:53 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local, {[@timestamp_prespec={0x7, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1008.487691][T32034] xfs: Unknown parameter 'noik' 15:09:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r1, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000400)=[{r0, 0x400}, {}, {}, {}, {r2}], 0x5, 0x0) 15:09:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54000000030605040000000000000000000000000900020073797a32000000000d000300686173683a6e65740000078008001240fffffffc0500010007"], 0x54}}, 0x0) 15:09:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r4, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) 15:09:53 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='noik']) 15:09:53 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local, {[@timestamp_prespec={0x7, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 15:09:53 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 1008.762212][T32052] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 15:09:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x18, &(0x7f0000000380)=ANY=[], 0x1) [ 1008.874966][T32060] xfs: Unknown parameter 'noik' [ 1008.883894][T32065] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1008.898073][T32062] hub 9-0:1.0: USB hub found 15:09:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r3, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) [ 1008.970877][T32062] hub 9-0:1.0: 8 ports detected 15:09:53 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local, {[@timestamp_prespec={0x7, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 15:09:54 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='noikee']) 15:09:54 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x2ac082, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) 15:09:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 15:09:54 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local, {[@timestamp_prespec={0x7, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 15:09:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r3, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) 15:09:54 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) write(r0, &(0x7f0000000040)="29000000140003b7ff000000040860eb0100100006a407fff00fd57f25ffffff0100002a00f3ff0000", 0x29) [ 1009.371762][T32081] xfs: Unknown parameter 'noikee' 15:09:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c", 0x3f, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:54 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0xf5) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@empty}}, {{@in6=@mcast2}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="e0000002ac1414aa00000000030000000002"], 0x1c) setsockopt$inet_mreqn(r3, 0x0, 0x100000000000024, &(0x7f0000000380)={@multicast2, @local}, 0xc) [ 1009.516400][T32094] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.5'. 15:09:54 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='noikee']) 15:09:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r3, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) [ 1009.602051][T32097] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.5'. 15:09:54 executing program 0: socket$packet(0x11, 0x0, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local, {[@timestamp_prespec={0x7, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 15:09:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c", 0x3f, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:54 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x97f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002041, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) 15:09:54 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') sendfile(r0, r0, 0x0, 0x5) [ 1009.790598][T32107] xfs: Unknown parameter 'noikee' 15:09:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r4, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) 15:09:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r4, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) 15:09:54 executing program 0: socket$packet(0x11, 0x0, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local, {[@timestamp_prespec={0x7, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 15:09:54 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='noikee']) [ 1009.977657][T32120] hub 9-0:1.0: USB hub found [ 1009.991046][T32124] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 15:09:54 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000540), 0x0, &(0x7f0000000200)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 1010.029204][T32120] hub 9-0:1.0: 8 ports detected 15:09:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r4, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) [ 1010.212827][T32135] xfs: Unknown parameter 'noikee' 15:09:55 executing program 0: socket$packet(0x11, 0x0, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local, {[@timestamp_prespec={0x7, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 15:09:55 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d00c3f7ff"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 15:09:55 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c", 0x3f, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r4, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) 15:09:55 executing program 4: semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, 0x0, 0x8], 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x2, 0x0, &(0x7f0000002080)) fstat(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000001900000126bd7000ffdbdf258020147ffe02ff07001d0000060015000000000008001900", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c00010008002e00", @ANYRES32=r1, @ANYBLOB="08000405", @ANYRES32=r6, @ANYBLOB="08000b000300000008001900", @ANYRES32=r8, @ANYBLOB="08000b0029c9f3911738bec55e92be", @ANYRES32=r10, @ANYBLOB], 0x70}}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', r6}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) 15:09:55 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) [ 1010.475616][T32151] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:09:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r4, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) [ 1010.616283][T32151] ip6gretap1: activation failed 15:09:55 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) [ 1010.646988][T32151] device ip6gretap1 entered promiscuous mode 15:09:55 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326e", 0x5e, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:55 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) [ 1010.939623][T32168] hub 9-0:1.0: USB hub found [ 1010.964572][T32168] hub 9-0:1.0: 8 ports detected [ 1011.252434][T32154] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1011.311142][T32154] ip6gretap1: activation failed [ 1011.356665][T32154] device ip6gretap1 entered promiscuous mode 15:09:56 executing program 2: semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x8], 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x2, 0x0, &(0x7f0000002080)) fstat(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000001900000126bd7000ffdbdf258020147ffe02ff07001d0000060015000000000008001900", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c00010008002e00", @ANYRES32=r1, @ANYBLOB="08000405", @ANYRES32=r6, @ANYBLOB="08000b000300000008001900", @ANYRES32=r8, @ANYBLOB="08000b0029c9f3911738bec55e92be", @ANYRES32=r10, @ANYBLOB], 0x70}}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', r6}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) 15:09:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r4, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) 15:09:56 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 15:09:56 executing program 5: semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, 0x0, 0x8], 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x2, 0x0, &(0x7f0000002080)) fstat(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000001900000126bd7000ffdbdf258020147ffe02ff07001d0000060015000000000008001900", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c00010008002e00", @ANYRES32=r1, @ANYBLOB="08000405", @ANYRES32=r6, @ANYBLOB="08000b000300000008001900", @ANYRES32=r8, @ANYBLOB="08000b0029c9f3911738bec55e92be", @ANYRES32=r10, @ANYBLOB], 0x70}}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', r6}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) 15:09:56 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326e", 0x5e, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r3, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) 15:09:56 executing program 4: semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, 0x0, 0x8], 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x2, 0x0, &(0x7f0000002080)) fstat(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000001900000126bd7000ffdbdf258020147ffe02ff07001d0000060015000000000008001900", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c00010008002e00", @ANYRES32=r1, @ANYBLOB="08000405", @ANYRES32=r6, @ANYBLOB="08000b000300000008001900", @ANYRES32=r8, @ANYBLOB="08000b0029c9f3911738bec55e92be", @ANYRES32=r10, @ANYBLOB], 0x70}}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', r6}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) 15:09:56 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 15:09:57 executing program 2: semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x8], 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x2, 0x0, &(0x7f0000002080)) fstat(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000001900000126bd7000ffdbdf258020147ffe02ff07001d0000060015000000000008001900", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c00010008002e00", @ANYRES32=r1, @ANYBLOB="08000405", @ANYRES32=r6, @ANYBLOB="08000b000300000008001900", @ANYRES32=r8, @ANYBLOB="08000b0029c9f3911738bec55e92be", @ANYRES32=r10, @ANYBLOB], 0x70}}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', r6}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) 15:09:57 executing program 4: semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, 0x0, 0x8], 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x2, 0x0, &(0x7f0000002080)) fstat(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000001900000126bd7000ffdbdf258020147ffe02ff07001d0000060015000000000008001900", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c00010008002e00", @ANYRES32=r1, @ANYBLOB="08000405", @ANYRES32=r6, @ANYBLOB="08000b000300000008001900", @ANYRES32=r8, @ANYBLOB="08000b0029c9f3911738bec55e92be", @ANYRES32=r10, @ANYBLOB], 0x70}}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', r6}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) 15:09:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r3, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) 15:09:57 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xa}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 15:09:57 executing program 5: semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x8], 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x2, 0x0, &(0x7f0000002080)) fstat(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000001900000126bd7000ffdbdf258020147ffe02ff07001d0000060015000000000008001900", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c00010008002e00", @ANYRES32=r1, @ANYBLOB="08000405", @ANYRES32=r6, @ANYBLOB="08000b000300000008001900", @ANYRES32=r8, @ANYBLOB="08000b0029c9f3911738bec55e92be", @ANYRES32=r10, @ANYBLOB], 0x70}}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', r6}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) 15:09:57 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326e", 0x5e, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r3, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) 15:09:57 executing program 0: semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, 0x0, 0x8], 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x2, 0x0, &(0x7f0000002080)) fstat(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000001900000126bd7000ffdbdf258020147ffe02ff07001d0000060015000000000008001900", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c00010008002e00", @ANYRES32=r1, @ANYBLOB="08000405", @ANYRES32=r6, @ANYBLOB="08000b000300000008001900", @ANYRES32=r8, @ANYBLOB="08000b0029c9f3911738bec55e92be", @ANYRES32=r10, @ANYBLOB], 0x70}}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', r6}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) 15:09:57 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000000000000000}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 15:09:57 executing program 4: semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, 0x0, 0x8], 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x2, 0x0, &(0x7f0000002080)) fstat(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000001900000126bd7000ffdbdf258020147ffe02ff07001d0000060015000000000008001900", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c00010008002e00", @ANYRES32=r1, @ANYBLOB="08000405", @ANYRES32=r6, @ANYBLOB="08000b000300000008001900", @ANYRES32=r8, @ANYBLOB="08000b0029c9f3911738bec55e92be", @ANYRES32=r10, @ANYBLOB], 0x70}}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', r6}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) 15:09:57 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x0, 0xb2000000, 0x0, 0x240, 0x240, 0x240, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 1012.975886][T32228] hub 9-0:1.0: USB hub found [ 1013.014024][T32228] hub 9-0:1.0: 8 ports detected 15:09:57 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r4, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) [ 1013.109040][T32241] Cannot find add_set index 0 as target 15:09:58 executing program 0: semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, 0x0, 0x8], 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x2, 0x0, &(0x7f0000002080)) fstat(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000001900000126bd7000ffdbdf258020147ffe02ff07001d0000060015000000000008001900", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c00010008002e00", @ANYRES32=r1, @ANYBLOB="08000405", @ANYRES32=r6, @ANYBLOB="08000b000300000008001900", @ANYRES32=r8, @ANYBLOB="08000b0029c9f3911738bec55e92be", @ANYRES32=r10, @ANYBLOB], 0x70}}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', r6}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) 15:09:58 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba5", 0x6e, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:58 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x48}}, 0x0) 15:09:58 executing program 4: mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x8) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x0, 0xb2000000, 0x0, 0x240, 0x240, 0x240, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 15:09:58 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r4, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) [ 1013.373010][T32250] batman_adv: Cannot find parent device [ 1013.487295][T32259] Cannot find add_set index 0 as target 15:09:58 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r4, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) 15:09:58 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = gettid() process_vm_writev(r3, &(0x7f00000015c0)=[{&(0x7f0000000040)=""/44, 0x2c}, {0x0, 0x10}, {0x0}], 0x3, &(0x7f0000003980)=[{&(0x7f0000001640)=""/178, 0xb2}], 0x1, 0x0) move_pages(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000003000/0x1000)=nil], 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4) r4 = syz_open_procfs(r3, &(0x7f0000000080)='syscall\x00') r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="87bfc8952888bb5e12ce5063996a0ae2d30c50c4040c302a26d225b1270ac7d737e0ac6aea2f030bad4db9e60e342f0e55173aa76c5cfac51e1d31f17bf6dce775c1841dacb974da423ef7b7f6665d52552a4c494baf64c2e94edc326e739e448c546d495e7ba34a36054ac86f964a339025d9dc98f4d18db723bd8335950750233bcc6f7c9f020e9e30290800"/157, @ANYRES16=r6, @ANYBLOB="00012dbd7000fbdbdf251a000000050092000300000008009a0000"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @mcast1, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2]}, 0x200000, 0x8, 0x0, 0x0, 0x0, 0x20c200a2, r7}) socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x15c, r6, 0x100, 0x70bd23, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2b, 0x4}}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xf6c}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x8, 0x6}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xfd, 0xac, "14e26aa87e0676c3eec5a62bb2f93d69dd230b5cadd5e2b0963f1734f6bc7a507daea1d0a0ca070b2b9eb9a3275bf2fb05b9dcb0ed007726d789cf76368bb5a69500dd3d4af07ee94d9019863c3868e0208a181b1a9a9f4801e8af2e8f2acd700b4e077490aca17693e81dc95f3c03e2beb4d80705fd8142ffb95baf0f0fb586dca59561cc22a8cbb9ce2faafb21e8dccb5e140b31c05bd9d4c8dee0d21cd6f0d7e5ec09c2c3f788488e4ae78d9552d38ea61a029af291ac5fb1d7e90376847068bcaee3836cb443249542514ac114a8de0efba61b8f16bcdb8ad6e7a50ce41d274c74e8c4c7f94aba310e6c0c3831f675857681da81c0994c"}]}, 0x15c}, 0x1, 0x0, 0x0, 0x400d1}, 0x24004010) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@remote, @mcast2, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x8]}, 0x2, 0x0, 0x0, 0x0, 0x400, 0x24c700a6, r9}) 15:09:58 executing program 5: semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x8, 0xb], 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x2, 0x0, &(0x7f0000002080)) fstat(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000001900000126bd7000ffdbdf258020147ffe02ff07001d0000060015000000000008001900", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c00010008002e00", @ANYRES32=r1, @ANYBLOB="08000405", @ANYRES32=r6, @ANYBLOB="08000b000300000008001900", @ANYRES32=r8, @ANYBLOB="08000b0029c9f3911738bec55e92be", @ANYRES32=r10, @ANYBLOB], 0x70}}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', r6}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) 15:09:58 executing program 2: creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 15:09:58 executing program 0: semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, 0x0, 0x8], 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x2, 0x0, &(0x7f0000002080)) fstat(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000001900000126bd7000ffdbdf258020147ffe02ff07001d0000060015000000000008001900", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c00010008002e00", @ANYRES32=r1, @ANYBLOB="08000405", @ANYRES32=r6, @ANYBLOB="08000b000300000008001900", @ANYRES32=r8, @ANYBLOB="08000b0029c9f3911738bec55e92be", @ANYRES32=r10, @ANYBLOB], 0x70}}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', r6}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) 15:09:58 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba5", 0x6e, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:58 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) [ 1014.013449][T32282] hub 9-0:1.0: USB hub found [ 1014.041227][ T26] audit: type=1804 audit(1588777798.923:255): pid=32284 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir841774187/syzkaller.L9YugA/890/bus" dev="sda1" ino=15983 res=1 [ 1014.087448][T32282] hub 9-0:1.0: 8 ports detected 15:09:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000000000000000000000006115700000000000950000000000000095e58c535e1a0ed9a74c1993e5a8d0012016ad23fe2bba85c59224"], &(0x7f0000000100)='GPL\x00'}, 0x48) 15:09:59 executing program 5: semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x8, 0xb], 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x2, 0x0, &(0x7f0000002080)) fstat(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000001900000126bd7000ffdbdf258020147ffe02ff07001d0000060015000000000008001900", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c00010008002e00", @ANYRES32=r1, @ANYBLOB="08000405", @ANYRES32=r6, @ANYBLOB="08000b000300000008001900", @ANYRES32=r8, @ANYBLOB="08000b0029c9f3911738bec55e92be", @ANYRES32=r10, @ANYBLOB], 0x70}}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', r6}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) 15:09:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x0, 0xb2000000, 0x0, 0x240, 0x240, 0x240, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 15:09:59 executing program 0: semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, 0x0, 0x8], 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x2, 0x0, &(0x7f0000002080)) fstat(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000001900000126bd7000ffdbdf258020147ffe02ff07001d0000060015000000000008001900", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c00010008002e00", @ANYRES32=r1, @ANYBLOB="08000405", @ANYRES32=r6, @ANYBLOB="08000b000300000008001900", @ANYRES32=r8, @ANYBLOB="08000b0029c9f3911738bec55e92be", @ANYRES32=r10, @ANYBLOB], 0x70}}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', r6}) 15:09:59 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) 15:09:59 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba5", 0x6e, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 1014.424725][T32303] Cannot find add_set index 0 as target 15:09:59 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) 15:09:59 executing program 5: semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x8, 0xb], 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x2, 0x0, &(0x7f0000002080)) fstat(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000001900000126bd7000ffdbdf258020147ffe02ff07001d0000060015000000000008001900", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c00010008002e00", @ANYRES32=r1, @ANYBLOB="08000405", @ANYRES32=r6, @ANYBLOB="08000b000300000008001900", @ANYRES32=r8, @ANYBLOB="08000b0029c9f3911738bec55e92be", @ANYRES32=r10, @ANYBLOB], 0x70}}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', r6}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) 15:09:59 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/fscreate\x00') pwrite64(r0, 0x0, 0x0, 0xcf1d) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0x200, 0x0, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}]}, 0x2c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x20002154}}, 0x0) 15:09:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000000000000000000000006115140000000000950000000000000095e58c535e1a0ed9a74c1993e5a8d0012016ad23fe2bba85c59224"], &(0x7f0000000100)='GPL\x00'}, 0x48) 15:09:59 executing program 0: semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, 0x0, 0x8], 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r5}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x2, 0x0, &(0x7f0000002080)) fstat(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000001900000126bd7000ffdbdf258020147ffe02ff07001d0000060015000000000008001900", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c00010008002e00", @ANYRES32=r0, @ANYBLOB="08000405", @ANYRES32=r5, @ANYBLOB="08000b000300000008001900", @ANYRES32=r7, @ANYBLOB="08000b0029c9f3911738bec55e92be", @ANYRES32=r9, @ANYBLOB], 0x70}}, 0x20000001) 15:09:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r4, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) 15:09:59 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x4, 0x960004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000001c0)="239dd2c050b754787c4421a1f7c1da5f39635869372dabb492f7e69668e2d5608cf90bbd18de75a79a9df8c187a3e706818545a4992bf4de8716e94968068d8fa59ea0f103c0ae40960f2dfaf6a99e5e0c705872c31d556e7008fcbae8bb7d881f6643a290991f0e4b550db91674b32c7d279e9033060f7af242285b610c5a394af3b4f9e7013ba0e2bedd8a20d0c2", 0x8f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xa890, 0xffffffffffffffff, &(0x7f0000000280)="3d354c96143259ae28f599e2597bc97d8fd05baad9270f5f5c688483b612d39a1c2ed5830f920a732f6ddf18e3654ea9f840b0de85f55ad145cb86efeb7f283c2fc19f50a581d361cd703156c8a8262e1a3f5295c97a2acff83c365a618cc55e7c00acd49a8b1a122bc21b4c431e7188242d397bd1f2fd8c5ae698ff03b6bf1875f766109c118b880b29262035dcb602126055266dc681175d01a1a2d188da3c5d1d65aaa9207ddaa8f617255d3ff360cc72a86d99044ff58649de28aa7a3114b597a3561a88b1fb", 0xc8, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000003c0)="6f66df6d1c8a989fe944d29941e2ec6e61b19c8e19775ccc54ff1a3c513e30a265ab3ab313f5d32306feada2f60ea7b60183adfeb77a6d7745a4e3c49d073243e835327248d21ed8533e2eae65667dc25e5374e13cfc64ad759fba3fea33f2802410ae4493b66ce13e61d43b4524e5836f1f83ec86c1cefdf6e0dc60de8468608e82d4e9b7f4d3f39af3b7b23daafb89badb43a1af1c61641815e0a5a4bc6923b85a14f1fea61f79", 0xa8, 0x800, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x210b, 0xffffffffffffffff, &(0x7f0000000500)="7904d12bb680ed07056da16f1505805f1f4b46e080540094378c8acc6d21f501dc94b13ac50717f73afaad2a84127d56a48ef2325254bb5b0d835be37eaa4c8feb817df238e70c20fe148d7c3328e76c2fd4597935fc0c3885373f3f326ed4277e6ac96ebae1d4fcb7f7da076ba50f7e47e1d7841aac", 0x76, 0x80, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 15:09:59 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x454, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 15:09:59 executing program 5: semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x8, 0xb], 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x2, 0x0, &(0x7f0000002080)) fstat(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000001900000126bd7000ffdbdf258020147ffe02ff07001d0000060015000000000008001900", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c00010008002e00", @ANYRES32=r1, @ANYBLOB="08000405", @ANYRES32=r6, @ANYBLOB="08000b000300000008001900", @ANYRES32=r8, @ANYBLOB="08000b0029c9f3911738bec55e92be", @ANYRES32=r10, @ANYBLOB], 0x70}}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', r6}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x1) [ 1015.136231][T32325] hub 9-0:1.0: USB hub found 15:10:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r4, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) [ 1015.161860][T32325] hub 9-0:1.0: 8 ports detected 15:10:00 executing program 0: semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, 0x0, 0x8], 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r4}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x2, 0x0, &(0x7f0000002080)) fstat(r5, &(0x7f0000000180)) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) 15:10:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r4, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}}, 0x0) 15:10:00 executing program 0: semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, 0x0, 0x8], 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r4}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x2, 0x0, &(0x7f0000002080)) fstat(r5, &(0x7f0000000180)) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) 15:10:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000040)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1120.376327][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1120.383416][ C0] rcu: 0-...!: (10501 ticks this GP) idle=a0e/1/0x4000000000000002 softirq=108786/108786 fqs=0 [ 1120.394457][ C0] (t=10502 jiffies g=161669 q=6753) [ 1120.399736][ C0] rcu: rcu_preempt kthread starved for 10503 jiffies! g161669 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1120.411151][ C0] rcu: RCU grace-period kthread stack dump: [ 1120.417028][ C0] rcu_preempt I28848 10 2 0x80004000 [ 1120.423346][ C0] Call Trace: [ 1120.426618][ C0] ? __schedule+0x937/0x1ff0 [ 1120.431244][ C0] ? __sched_text_start+0x8/0x8 [ 1120.436075][ C0] ? _raw_spin_lock_irqsave+0x94/0xbf [ 1120.441480][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 1120.446918][ C0] schedule+0xd0/0x2a0 [ 1120.450984][ C0] schedule_timeout+0x35c/0x850 [ 1120.455823][ C0] ? find_held_lock+0x2d/0x110 [ 1120.460587][ C0] ? usleep_range+0x160/0x160 [ 1120.465237][ C0] ? rcu_gp_kthread+0x6fd/0x1960 [ 1120.470162][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1120.475942][ C0] ? __next_timer_interrupt+0x190/0x190 [ 1120.481496][ C0] ? prepare_to_swait_exclusive+0x110/0x110 [ 1120.487385][ C0] rcu_gp_kthread+0x9bf/0x1960 [ 1120.492129][ C0] ? rcu_barrier+0x4b0/0x4b0 [ 1120.496695][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1120.502473][ C0] ? lockdep_hardirqs_on+0x463/0x620 [ 1120.507756][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1120.512755][ C0] ? rcu_barrier+0x4b0/0x4b0 [ 1120.517319][ C0] kthread+0x388/0x470 [ 1120.521371][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 1120.527068][ C0] ret_from_fork+0x24/0x30 [ 1120.531489][ C0] NMI backtrace for cpu 0 [ 1120.535809][ C0] CPU: 0 PID: 32334 Comm: syz-executor.4 Not tainted 5.7.0-rc4-syzkaller #0 [ 1120.544473][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1120.554501][ C0] Call Trace: [ 1120.557772][ C0] [ 1120.560605][ C0] dump_stack+0x188/0x20d [ 1120.564911][ C0] nmi_cpu_backtrace.cold+0x70/0xb1 [ 1120.570142][ C0] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 1120.575763][ C0] nmi_trigger_cpumask_backtrace+0x231/0x27e [ 1120.581719][ C0] rcu_dump_cpu_stacks+0x19b/0x1e5 [ 1120.586810][ C0] rcu_sched_clock_irq.cold+0x55d/0xcfa [ 1120.592335][ C0] ? trace_hardirqs_off+0x50/0x220 [ 1120.597451][ C0] update_process_times+0x25/0x60 [ 1120.602466][ C0] tick_sched_handle+0x9b/0x180 [ 1120.607296][ C0] tick_sched_timer+0x4e/0x140 [ 1120.612066][ C0] __hrtimer_run_queues+0x5ca/0xed0 [ 1120.617241][ C0] ? tick_sched_do_timer+0x1a0/0x1a0 [ 1120.622504][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 1120.627515][ C0] ? hrtimer_init+0x320/0x320 [ 1120.632195][ C0] ? ktime_get_update_offsets_now+0x2d6/0x450 [ 1120.638241][ C0] hrtimer_interrupt+0x312/0x770 [ 1120.643175][ C0] smp_apic_timer_interrupt+0x15b/0x600 [ 1120.648746][ C0] apic_timer_interrupt+0xf/0x20 [ 1120.653666][ C0] [ 1120.656644][ C0] RIP: 0010:sfq_dequeue+0x1a6/0xcc0 [ 1120.661823][ C0] Code: 00 66 44 89 63 1a 48 8b 9d 28 03 00 00 48 8d 7b 12 48 89 f8 48 c1 e8 03 42 0f b6 14 30 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 <84> d2 0f 85 2b 0a 00 00 44 0f b7 63 12 48 8b 9d 00 03 00 00 4d 89 [ 1120.681410][ C0] RSP: 0018:ffffc90001b071d0 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff13 [ 1120.689803][ C0] RAX: 0000000000000003 RBX: ffff888038409bc8 RCX: ffffc90011ef5000 [ 1120.697756][ C0] RDX: 0000000000000000 RSI: ffffffff86467fd2 RDI: ffff888038409bda [ 1120.705713][ C0] RBP: ffff88809e5bc000 R08: ffff888038c540c0 R09: fffff52000360e2c [ 1120.714022][ C0] R10: 0000000000000003 R11: fffff52000360e2b R12: 0000000000000000 [ 1120.722004][ C0] R13: ffff888038409be2 R14: dffffc0000000000 R15: 000000000000007f [ 1120.729967][ C0] ? sfq_dequeue+0x132/0xcc0 [ 1120.734542][ C0] __qdisc_run+0x1ac/0x17b0 [ 1120.739043][ C0] __dev_queue_xmit+0x1d07/0x30a0 [ 1120.744045][ C0] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1120.749309][ C0] ? mark_lock+0xc0/0xf10 [ 1120.753651][ C0] ? __ip_finish_output+0x5f3/0xbd0 [ 1120.758856][ C0] ? print_usage_bug+0x240/0x240 [ 1120.763768][ C0] ? lock_release+0x800/0x800 [ 1120.768420][ C0] ? lock_downgrade+0x840/0x840 [ 1120.773261][ C0] ? rcu_lockdep_current_cpu_online+0xdc/0x130 [ 1120.779395][ C0] ? ip_finish_output2+0x17b7/0x2610 [ 1120.784654][ C0] ip_finish_output2+0x17b7/0x2610 [ 1120.789746][ C0] ? ip_frag_next+0x9a0/0x9a0 [ 1120.794401][ C0] ? rcu_read_lock_held+0x9c/0xb0 [ 1120.799400][ C0] ? rcu_read_lock_held_common+0x130/0x130 [ 1120.805195][ C0] ? __ip_finish_output+0x5f3/0xbd0 [ 1120.810370][ C0] __ip_finish_output+0x5f3/0xbd0 [ 1120.815384][ C0] ip_finish_output+0x34/0x1f0 [ 1120.820123][ C0] ip_output+0x1fe/0x620 [ 1120.824339][ C0] ? ip_mc_output+0xed0/0xed0 [ 1120.828995][ C0] ? __ip_finish_output+0xbd0/0xbd0 [ 1120.834168][ C0] ? rcu_read_lock_held+0x9c/0xb0 [ 1120.839167][ C0] ? rcu_read_lock_held_common+0x130/0x130 [ 1120.844952][ C0] ip_local_out+0xaf/0x1a0 [ 1120.849412][ C0] __ip_queue_xmit+0x863/0x1c20 [ 1120.854241][ C0] ? __tcp_select_window+0x31a/0x880 [ 1120.859503][ C0] __tcp_transmit_skb+0x1a07/0x3760 [ 1120.864683][ C0] ? __tcp_select_window+0x880/0x880 [ 1120.869955][ C0] ? lockdep_hardirqs_on+0x463/0x620 [ 1120.875223][ C0] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 1120.881026][ C0] ? mod_timer+0x5b1/0xc20 [ 1120.885434][ C0] ? sk_reset_timer+0x2a/0xc0 [ 1120.890137][ C0] ? tcp_rbtree_insert+0xeb/0x1f0 [ 1120.895153][ C0] tcp_write_xmit+0xf9e/0x5c10 [ 1120.899942][ C0] __tcp_push_pending_frames+0xaa/0x330 [ 1120.905468][ C0] tcp_push+0x472/0x6f0 [ 1120.909605][ C0] tcp_sendmsg_locked+0x15ea/0x3210 [ 1120.914788][ C0] ? mark_lock+0xc0/0xf10 [ 1120.919097][ C0] ? tcp_sendpage+0x60/0x60 [ 1120.923637][ C0] ? __local_bh_enable_ip+0x159/0x270 [ 1120.928995][ C0] tcp_sendmsg+0x2b/0x40 [ 1120.933235][ C0] inet_sendmsg+0x99/0xe0 [ 1120.937545][ C0] ? inet_send_prepare+0x4d0/0x4d0 [ 1120.942646][ C0] sock_sendmsg+0xcf/0x120 [ 1120.947042][ C0] __sys_sendto+0x220/0x330 [ 1120.951534][ C0] ? __ia32_sys_getpeername+0xb0/0xb0 [ 1120.956907][ C0] ? _copy_to_user+0x126/0x160 [ 1120.961648][ C0] ? put_timespec64+0xcb/0x120 [ 1120.966397][ C0] ? ns_to_kernel_old_timeval+0x100/0x100 [ 1120.972103][ C0] ? __x64_sys_clock_gettime+0x165/0x240 [ 1120.977743][ C0] ? __ia32_sys_clock_settime+0x260/0x260 [ 1120.983438][ C0] __x64_sys_sendto+0xdd/0x1b0 [ 1120.988179][ C0] ? lockdep_hardirqs_on+0x463/0x620 [ 1120.993441][ C0] do_syscall_64+0xf6/0x7d0 [ 1120.997932][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1121.003800][ C0] RIP: 0033:0x45c829 [ 1121.007702][ C0] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1121.027368][ C0] RSP: 002b:00007f99b694ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1121.035765][ C0] RAX: ffffffffffffffda RBX: 0000000000500f60 RCX: 000000000045c829 [ 1121.043711][ C0] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 1121.051656][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000170 [ 1121.059613][ C0] R10: 0000000000000011 R11: 0000000000000246 R12: 00000000ffffffff [ 1121.067559][ C0] R13: 0000000000000a0e R14: 00000000004ccc56 R15: 00007f99b694b6d4