8445] usb 6-1: config 0 descriptor?? [ 1019.167591][ T8234] raw-gadget gadget: fail, usb_ep_enable returned -22 03:38:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x46070000}, 0x0) [ 1019.439137][T28445] usb 6-1: USB disconnect, device number 12 03:38:02 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x17}, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:38:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_RESERVED(r2, 0x5601, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) ioctl$sock_ifreq(r3, 0x8935, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_addrs=@ax25={0x3, @bcast, 0x5}}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x20, 0x5, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x9}, 0x8544, 0x0, 0x0, 0x0, 0x2000000000, 0x1, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r4, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$KVM_PPC_GET_SMMU_INFO(r5, 0x8250aea6, &(0x7f0000000400)=""/4096) r7 = socket$alg(0x26, 0x5, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="0ff693c3eb4f68f7489eb1437119cd7d234e5fed79e9194280df7731f6064e1834019a28ca3fe98ec0e986fba168521257303775bb7ca36449a123f2dac13a4869195bccccf18fa819c8863235fb22e9b1955efde9d5a26943b81b218cad465ebc2e8b96d983c2d112d1f6451fa3bc96a32276925872d460ecd297d8a3151f28788e75f14f51b0962a2aa3cf68af195267764756ff6ae0c21d553f5a3acfeb231a95d620a130f013771a2de107a1a33830107e8c10192ef5020680cd6148c4e51946b2c9ce8812cfbed289404988f73f00b6fe0d35bdeac2a4406dc30fe0fdc98ac8fc2499971a2cf4", 0xe9, 0x4040050, 0x0, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) 03:38:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x60000000}, 0x0) 03:38:02 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000010000104080000020000e70471ffffff", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010004000002040003900c000200100000001300000008000500", @ANYRES32=r1, @ANYBLOB="08000a000a3d670bce5611111a912cac602bd38ae93a3b443825ebd4b5a7fe0d931d8d51022eb65cd09eb0e0abf7fe9faacc568e696955e219f80cc133e9f6051ae7609de7cbab0211df4188e263ca44389086d241be41cb6abe2b36cb5c9987ecdfd3dc7b30ed6391a4d513ef133e17a03a212c787180bbd344de0f79e9778e6329907a06383315d9873971048e099023495f067f725a7ba4e588b912861442991fdc5eef35489af2cbd4f2e0659947887290cb66bad4c5574efc73d1671710a7875e68492a2c720f44b732f9ed0a692d37bcb1bf4443f089dd74"], 0x5c}}, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x0, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, 0x0, &(0x7f0000000000)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010003b0df1af0000000000e0e28378c5ba", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x48c4, 0x2c, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x9, 0xf}, {0xfff2, 0x9}, {0xb, 0x1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4898, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x80}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_ACT={0x2dfc, 0x7, [@m_ctinfo={0x5c, 0xa, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}]}, {0x25, 0x6, "cf8c287511bfd444ccd6b43ed158a61d6054df25daa8bcb9d3fe91ec1cd66cad80"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x1068, 0x9, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xffffffff}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0x1004, 0x6, "7996a48508657a5b30b3127b21bd525e5a6a2f1958f3b3b89a6ed929810afc30a6c2721dc46df93f2276706ec25b44ab6ce896be0287d0fda8e37d30fd0a4c0be25c47f48630204e0838ea29094c1ba76c5dbfce1ff100e0d8c43ff6d86fedf1822f4bd6df502c62c552980fe0a47da90bdb593565660f5b83b2d931f6f30e66d401faa82dd3dee0fa1638e5e444fb9208c3e02823311a2ddbe3c6a9137b887e0949980e17c79307c85f0835fec2a1c1eff7c5afe3f8d32d96caedc4c78495fc5ed8fb73dc77d92faafcd2e9c016610ce7d3b2a73b66be4770367aca44add8e58bc379c4491442d06a2744c553169a7f2e1b1c639fe9df1c1db861de229a7eed8f33a5114eee19af01ba22a43d314de5733f9c98e4fdd7d7d4caea067c663ecc74bf6413a3bfda7e67be98b12ee2449a47929220138a6f5057e947badb1c2c3d81d02d169387c349c7c1a4bff261b90ba18e4c5f3c212cccbe4d39eec046df9263817ed4b242ef21c81ae920c52391de5cf23e7d88be6ac8de1462c34ae73b15734e8114d99af7810aa5efa5a68b19e1470a814a9363e4c2b085bd2c62d696a7f78b4676f3c185a9cb4504a064eb98c5c78132d269a870c4759934ffc3aa3b8e17393b8b95e62e3999bf43f0a184f0b6cbea0171859c4b1dfc80b111bb18bc7e6d3bb2d881e423771a6ec767e61a1986653fcc5ad7a989a4f9dd668b0704be1e6c94f623e5e317cd81a0f3c0f33acf1f7dee3d69752f3e32a8eacd32841eff94920e5f90d2117179fc266be3772c630a8df663d53083f1a7abb3d60b8e0c97f97ded37b6683cae36a0c0de0fb39afe9363f4d319ea022dac95e1098d49b98a33a2451354c4b67c5c80d0c85aac12a439fc929ad7c865fb8a8fa1436b2ac25337a0cf1003ea81fe8d3e4f82251f8f93a8fe0a0d839ca997a06588d5edaff396fb3d8fff077bb4b1ecfa9aafc7787e7d0204b65a6668f3a25d6e0a3bdd0f51dd1af513571122950a36170da914a440544669706fa0f2a442b2eb73f039e4afeac4b7c5922e45637c463434669556b6aac4414e64d60a9c11ff5be117dbe26e9922d0fe4de4226bb051030212644ea8c6ae163244da1bb911ad986f64ba4589362ef779621ae04e5ee82f7bd48e48e52be66745b59bf79058e1b077f1af904f11eece07baadea72535ccef0792921298bc6159950d69f4759cbee019f00aa32888ec70906220703b12e67b88547be969ffe723edef8529c8e50266ad745c0ebdf18f860a53d96a3e362482753724d6e5c9bc933ef248d59d2557786095e414ccc15782b21a10b60f35f610947c84f69fe388a89ee3b28a7816f3a33896f0d5810e083828b0ca957156a78582b0100a1303a0d3491e0d08c5de94a79d1f4fcdf56c895ea85483ae9264d57db1897c5fd9131cf381026922a252cccf160c86cec5ea15088c557979046dc4460827cc67a3461a402d0b78c922f26eb3801d60f8937dde751bdd9c04af2ab6ddb60053e363f0218f9ebe7b62c6b5a69e08d8fa6056499221a1e37801a08735077ded7caaad6772d9a62925774174d39357c802ee047f75b0bbc36bab615da6be2c2923a7a51067c05737b5146365a1935eb0a66be2b320dd2cfb009c4158b77924d4e7224f56d0e5c36d6c1884a8f151e32e27ee567d98900e957603b9073165595bdf93fdf30094c440ca3380d88406b979082da9ca17d9ddeb2f2a4030140028e3582b1910d731d595372a4e2a40cbbc355c354d9d0091e377c62cf1a9b38cd9ef183908754d3a36d22f1d2898cd52dc9c88a5cf9cec0ce408bdb43171fc67bb8d946e9ef6258aaee2d4b39eeb4e7803d91cda4952975fb14f24c97c94634944ca61664d0a04e57f1af7e02fcde1e5d1544b529faf7c8ab28304a32739f8fcf76e44651c9a6e886f028d3921963546852c04563cca6767b7e84fd08c61b4f4c9acb28f58e5d299fe6d7efcb64ae4ad09d081c71a8497fdf1f54caaf2f66d6edc333f091a59278c26ec74162a6c5026842de9e8412c374c909214814e418808e48540c09ab7c72d9d7899fb9077f74b55640f081cea739106e4c0f55677441c6b3562721d80fe05c96314e80f52a6b18484f2061ca8a6e185bf0f655062acc602e11c420f0a203f942c4d634259122412bdf3d4fa5007ff4447882e531eb961cf5183289948358af0a69335cb3515350eac63156ca72e5e3b7978560a3660d13813d33fedfa35d06dce47fa98013bf068849856c2d668bd39f2c99a54f54ba37f4da42465bca30d9d1ba5a6f5f3f91ef97e2d1a4f31a2eaddd87b81a6f5ec4d7e4193b7ac571a846320b172c2eb1535122aa5560d275afe779a621e277d18aaad5dc3e5b73c0426bc6d58135099847637d6938552bc7ad96faeee14ad5f63de03f0c8875fc3f5ed65c609660621e4efc0e7734530106882f10913fb4947261374891ba41874bacad8cbf9246af81a92cd119145354e5e1b00ca0f5630b6cbcb966ba7316cfd8e7a4ee1c7841e51b49fe42acf62cf979a3ed51a30066a73ce7b8ff241f1d7faf4dc400e8b18f6d72572dad77f3ce2a12213761fc0e365df353e2866d77c3643d903f36293b6804b021d06845920ccee9c195833eb49a45b9e15df70cd90dc1000af8f591fe2331258183007f363c151c997065acfd718f25ba4ac9deccc0074bc41ddb28c1a7ce56de0169b2bed1a43a6cbd397ea2e0736346a0f7390e260021cca197f7a91ec0962f9fef8b0539533b6b6a9b1008f4d59867bd47c3bb02fb134d9dbfce80fbad2a5e90a18570551b72bbdd5a59685c7bb16ae8c8376cc2b12ba66e07ff5da463df42ff3f6402638b072acc02566fc1ac856f6c60c2abbae5cda84f774e029b290ed4ff97053f85da44a2f0c637315d5a65aa92534eb6a1a96c537b76f05d07e61cf13df8efa5eec4b9bfbb10103d1903af380a83d599cbde0b6eb768af7d0361c90b9c31a7cf414dd256eb2f2d7f4292d01050e12d6582afd2e2045a5973da2b67fb0c3d355b7f0e40f54f717876300ec841779c3208cbbf6ecba3da9808b0c2e376a510fb359732ec2f7cb46188650ddc6a5f3f9cb09d74014149a1b82822f43369cfe97da63c8d8bf46ccd309df8737acd247a31d2600383143d25f68067346788ffa01968ae1c2ac12b2578e8f05a710143aaddff35c6c4b8ede87286970ece038c921d973f3860121f1528e2d576ed8918db7dc07623ce72f0a1838c7859f3e9ecd69917d6819363a23e5898d79267ef140c1f7a3bc5391afe515c98937ba862b90987a2b8a8319b630db6a5f27a48543aceb3312c3971674c7ba257ec9aaddc0a239829eeb1bfbb7b585e13896f1e827257a5be9e1a35774507a86e645edccf52fcd8595ffb53c033a75ac01b16131ffa315d52da2e5b04f6372308e4a266f5efee8f0133dde1a62ca0e8cf66a416c5fc1288be99d5c22b66a5f0c98d152eacd2a5d1a97f863697c48756526ddbd59061dbc38a673c9884eafdcc53cf1df5fecda3b16ee87c9df479ea2268108defb252dd6cd96ffae1479c53e61fb74638736af568aea3703381f16c8a52f9fb556efbc6a14498600501aa17be47a26ba68c78a3e0b714b18f390e00aa786211c1b131b0929b12eacf302371bf544602f1f7909a7c7496ad80167558bab91345e6912af0764a54e34ea0a2636b5b08d1bd47939fd116bc34633d69a2ea6303720a1a3cccce520fbb5a0f32c95afa3d97441d1a77962b98e2bc263d7d3906c8c9086e22a1b37a02cc4ece36240562a638085018e9d74b1794ed161507753d0b93db7079c5885bdf3e4c990edc1deb302fb0b2f7a3e1c90c6b2bae5b9324335c5e257e8e000b535851693af11dfb307ed5d6e2ce96374299a732e7f56374fc62975f6c9a00ac7c2e564740cf11f3d32bf40394c34d13040b5c295dfcfedc4b2c93b098b207a50623a5b17c23aa94ad462c642558786cded1245571cfdab4b7bb1d39ca07aa7641ba98c6cc5e048112adca9ac0514a1940b83dabfa559b59afaeb80334a16d99b23b5a666efee7de52c8e24972234888b582b4f66db5cb4540d1f55bd5221160473a8aa653dfed2f62bcf75cf6f0d5e4a5d4a21ffd4d8b61318da486582939f2d1f0d2fdbb779a15cd82712cc178a9436c233468b1dcedcaf7dcee8c421fcb1a048488fb3a91b75e62d7b96fe59411ee760c9ef9c7f16defa65a4eb223099c6180e441e371b604028991382d787b67596a4fab129de24cdd164691f4d1142ce81270f4ac281f196b589fc88c4f5b2a01df5a0ffc74e1b7e0597841baffa74b0bacd9ce888f03ecc76a605b40833d84b0248d593d76037afd01891cbdc6011c03d31b69a8406f9c2e84d5b01b076eb8195ebe578d40b6816c929f9c7cec9ebe23883b9a84474e3cba10f6e72b6e2a0a1c3d236edc58da893ad84d1e514438c58c211688b6a0847413e8ac7782d47903c875f9c9c3b454896591747ea88da78271f78fa3d2426e0ddfa8347e9b16f2a6ae887f71e8731332542912680256b2eff4975071d40b154748d2c8993520e2f0e2d638e7c664dc7b1a62d5e2d3acb26263fd3166ae2b904b672c3e9e6bcc9ba0c7fa63a16721eeef0acb539aa74f192fe15c369d7a49c1e7ae844e4ee20dbaeb7700a65e0ac130955677ec7a390615e385e01da6a80b50ffa2118928f4b1a389151718047ce423282024c886dacf8449d70876f6942e93ffaa7cd75ffe8c5c385e9c7b4d519ea3e398911b351cb6071a3547b506985c52aa549786a3313f3ab1c22fe565f880462b87e7a4a77fde75cf113fe3d4eaff026e368005b243aabda5a35e456cf9867b392cce05e542897fef45830dbf9621b8d59b135b0f3efad7c0c32a343a9e28dec7bc8e6037b33d848c59e9e2e6dfe75af2851d0c5cda269f3ba4764c47df8ad75a8719c8246e583143371c61de3ba5510cded75a31d8c382960838a05163fcb7f27df5d1c4f795068d71b8cc605cdebc04bc8c3c7f5c20f95d9c04909f4f56368bde8a72db9101d9d5effc88a2989c798ef72e305c60cd17045a927f166e9a7940a6fd5f3b4bfe4e0509f959fb7533e826b1b15cf6fe5636ddb327b48993777a7115f10ecc3113b8454acf90287671b70f3c3859a88478e008fa8f56b17a79143303cdd940a3d88b465e9bfe6df5fc6d0d95e842e42bbd6226f49e98214aee7a0070bf9dc37844c6c179bfc7edac6922a9bd017f20ecb041984d03db9bff4da225683bafd8fcdcb9fb49ffc4b882ec6498d8b3758ca6dd47a1ca7c58bf3eba7094cbd23b5ea013ec2c5cbbfe03e764ffea4233914af8e85cfab830e624928f2fb79d535503be8046f38e97db7293d209969ab1736cdbe93cb415f12ab5d37011102ecff43ed60f0feef5ec7665aa649d7f5ea723a8fb74f1bbac27e44f06751894f1cc10040913307b028cf92e42fee5e06de49ccb07e69e16ff6c9ac01d6422f3f1054b04461885183aeac42fd2555e28f56440f0d9ecfe3045f12d9beaa6060e8629b393ae9a5b66e91736ffbdcb79b6448cf5cdf24661a15d77a07a5119248d315e6e1cb3af063a2f6b942d4fdeed247c471f9b4fd57d255df40c198c504dbb3bd9369bd6f4cb76df020973f751f7f7bdeedee018368e7b2a2e64bd39c817ec807d5af46a1bad58e0ae5142bf4128a715d0857f085eb98f8aa227f88a639d2bb94719d3d478d7a17ec6f07d464b65cbcaf96294fd96400a1ec2d2799b719ac625fbe927a96075959ef8d70a9d2e63962e3a2bcf65764ab465423355f0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x1d34, 0xb, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x1ca0, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x3ff, 0xf759, 0x6, 0x8, 0xa8d, 0x4, 0x4, 0x7fffffff, 0x7ff, 0x6, 0x6, 0xad21, 0x8000, 0x2, 0x0, 0x0, 0xb2, 0x4, 0xd6b, 0x0, 0xff, 0x101, 0x9, 0x719, 0x5, 0x4, 0x7, 0x400, 0x2, 0x5, 0x0, 0x1f, 0x1f, 0x4, 0x0, 0x3, 0x5, 0x80000001, 0x7, 0xfff, 0x6, 0x0, 0x40, 0xfffffff7, 0xfffffc01, 0x7, 0x200, 0x1, 0x42, 0x1, 0xffffffff, 0x5, 0xf5, 0xba86c24, 0x1, 0xfffffffd, 0x4, 0x7, 0xfff, 0x5, 0x1ff, 0x4, 0x5, 0x400, 0x10001, 0x7fff, 0x4, 0xfffffff7, 0x1, 0x7b, 0xffff0fe1, 0xdc, 0x1, 0x2e6, 0x0, 0x4c, 0x401, 0xed, 0x7fff, 0x3, 0x2, 0x9, 0x0, 0x7, 0x1000, 0x3, 0x6, 0x2, 0x4, 0x7ff, 0xec41, 0x6, 0x0, 0x1, 0xfffffffa, 0x878, 0x7, 0x45, 0xf9e8, 0x3f, 0x935, 0xffff, 0x80000000, 0x7, 0x5, 0x3, 0x6, 0x1f, 0xffffffc1, 0x200, 0x4, 0x5, 0x7fff, 0x8, 0x1, 0x9, 0x0, 0x7fffffff, 0xe1, 0x9, 0x5ff, 0x8001, 0x554, 0x8, 0x1, 0x80000001, 0xa007, 0x2, 0xffff0000, 0xff, 0x5, 0x213, 0x4, 0x7, 0x5, 0x5, 0xfffffffe, 0x80000001, 0x6, 0x1ff, 0x4, 0x1, 0xffff, 0x3, 0x10000, 0x7, 0x1, 0x3, 0xf92, 0x8, 0x7, 0x20, 0x4, 0xa56, 0x3, 0x4, 0x4, 0x346, 0x2, 0x90ef, 0x8, 0x8, 0x3, 0x268, 0xfffffffc, 0x1, 0x7ff, 0x80000001, 0x81, 0x4, 0x8020, 0x5, 0xff, 0x1f, 0x7fffffff, 0x7, 0x1, 0xff, 0x7fffffff, 0x4, 0x9, 0x0, 0x8000, 0x1, 0x6, 0xffff, 0x9, 0x2, 0x9, 0xffffff8c, 0x2, 0x8, 0x5, 0x2, 0x7, 0x8, 0x6, 0xffffffff, 0x0, 0x7f, 0xfff, 0x7fffffff, 0x1, 0x0, 0x3, 0x4, 0x63, 0x502, 0x8, 0x1f, 0xc36, 0xe802, 0x7fffffff, 0x4, 0x2, 0x205a, 0x9, 0xffff, 0xf4d7, 0x80000001, 0x1, 0x1, 0x8, 0x1, 0x5f, 0x2, 0x7, 0xfffffffd, 0x7f, 0xfffffffc, 0x5, 0x8, 0xed9, 0x6, 0x0, 0x5, 0x0, 0x800, 0x6, 0xffffffe1, 0xef45, 0x3fc0000, 0xb96, 0x1000, 0x8d7d, 0x40, 0x9, 0x8, 0x1f, 0x80000001, 0x4, 0x4, 0x8, 0x98b, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3b, 0x6, 0xffffffff, 0xfffffffe, 0x6, 0x8, 0x7, 0x8, 0x0, 0x0, 0xec200000, 0x100, 0x0, 0x3, 0x10000, 0x1, 0x7, 0x7fffffff, 0x2000000, 0x9, 0x8, 0x8, 0x5, 0x2, 0x81, 0x6, 0x0, 0x7, 0x4d10fb85, 0xc1c, 0x10000, 0x7fffffff, 0x6, 0x2, 0x7, 0x9, 0x1000, 0x9bb, 0x1, 0x0, 0xffffffff, 0x9, 0x100, 0xfff, 0x7ff, 0x80000001, 0x0, 0x4, 0x38, 0x4, 0xa3, 0x0, 0x9, 0x1, 0x2, 0x2, 0x2, 0x8, 0x330, 0x3, 0x4, 0x5a8b6acb, 0x6, 0x1000, 0x43, 0x4, 0x2, 0xffff, 0x81, 0x4, 0xfffff25a, 0x1, 0x1f, 0x10000, 0x9, 0x0, 0x1, 0x2bc6, 0x30, 0x0, 0x1, 0x2, 0x0, 0x7ff, 0xfffff001, 0x3ff, 0x7fff, 0x6, 0x4, 0x49, 0x0, 0xfffffffc, 0xdbf7, 0x1f, 0x4, 0x80000001, 0x6, 0xa5d, 0x8, 0x8, 0x8, 0x9, 0x5, 0xc47, 0x4, 0x0, 0x1f, 0x55de, 0xff, 0xef, 0x20, 0x9bde, 0x3f, 0x2, 0x0, 0x1, 0x400, 0x401, 0x0, 0x4, 0x3b, 0x3ff, 0x3ff, 0x3, 0x5, 0x7fff, 0x1, 0x96, 0xfffff001, 0x6, 0x6, 0x80000000, 0x9, 0xc701, 0x1e, 0x10001, 0x9, 0x2, 0x5, 0xffffff00, 0x6, 0x0, 0x2, 0x75746009, 0x8, 0x7fff, 0x5, 0x2, 0x9, 0x5, 0x1, 0xfffffeff, 0x8, 0x812a, 0x8, 0xcf, 0x6, 0x4, 0x2, 0x1, 0x6, 0x6, 0x400, 0x800, 0x7540, 0x3, 0x3, 0x6, 0xfffffffc, 0x101, 0x1, 0x1, 0x7ff, 0x8, 0x3, 0x0, 0x401, 0x9, 0x6, 0x800, 0x1, 0x9, 0x4, 0x10001, 0xfffffffb, 0x8, 0x2, 0x3f, 0x1, 0x5, 0x80000001, 0x1, 0x1, 0x100000, 0x9, 0x1, 0x800, 0xb1c, 0x401, 0x5, 0x975f, 0x6, 0x1, 0x6, 0x5, 0x4, 0x1, 0x401, 0x9, 0xfffffffe, 0x5, 0x6, 0xdb55, 0x0, 0x5, 0x9, 0x2, 0xfffffff9, 0x2, 0x800, 0x2, 0x0, 0x5, 0x401, 0x1ff, 0x6, 0x40, 0x2, 0xa3, 0x7, 0x2, 0x7fff, 0x95, 0x50000000, 0x2a1c, 0x10000, 0x1f, 0x7, 0x7, 0xffffffff, 0x1, 0x5, 0x3, 0x0, 0x24, 0x2, 0x0, 0x9, 0x100, 0xd6, 0xff, 0x7, 0x7, 0x5, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x5, 0xd42d, 0x0, 0x8, 0xb1, 0xfffffffb, 0x2, 0x3f, 0x6e, 0x0, 0x4, 0xed, 0x2, 0x9, 0x40, 0x2c2d, 0x200000, 0x10000, 0x6, 0x100000, 0x6, 0x4, 0x7, 0x4, 0x6223, 0x7, 0x2b6, 0x48, 0x1, 0x7, 0x67, 0x3, 0x5, 0x7, 0x7b, 0x7fff, 0x5, 0x4, 0x4a6, 0x600000, 0x0, 0x401, 0x1, 0x4, 0x9, 0x5, 0x80000001, 0x7, 0x300, 0x1ff, 0x20, 0x1, 0x5, 0xef6, 0x3, 0x0, 0x0, 0x8, 0xff, 0x7, 0x9, 0x8, 0x0, 0x8001, 0x8, 0x9, 0xffff8001, 0x1, 0x7, 0x9c7, 0x7fff, 0x7, 0x5, 0x0, 0x8, 0x7, 0x0, 0x40, 0x5, 0x1000, 0x10000, 0x7, 0x20, 0x4, 0x2, 0x2, 0x5, 0x1000, 0x1f, 0x2, 0xfffffffa, 0x7fff, 0x3, 0x3, 0x7, 0x5, 0x5, 0x5b27, 0x30, 0x7, 0x3, 0x2, 0x4, 0x80000000, 0x7, 0x5, 0x3d1, 0x6, 0x81, 0x9, 0xe32c, 0x0, 0x944, 0x5c, 0x1, 0x7, 0x3, 0x7, 0x3, 0x1, 0x2, 0xffffffff, 0x2, 0x80000000, 0x7, 0x9e6f, 0x5, 0x80000001, 0x5, 0x1, 0x1, 0x27b, 0x1f, 0x1, 0x7, 0xffff111b, 0x8, 0x7, 0x5, 0x2, 0x9, 0x7, 0x5, 0x1, 0xfffffff7, 0xfffff001, 0x77ed, 0x200, 0x5, 0xffffff80, 0x7f, 0x7, 0x8, 0x3ff, 0x0, 0xc744, 0x9, 0xffffffff, 0x1, 0x1edc, 0x1, 0x3, 0xfffffffe, 0x9, 0x6, 0x9, 0xb4d4, 0x7fffffff, 0x9, 0x3, 0x401, 0x0, 0x67e4, 0x0, 0x4, 0x7, 0x7, 0xffffffff, 0x0, 0x6, 0x1, 0x9, 0x1, 0xf5cc, 0x0, 0x7, 0x5, 0x6, 0xffffffff, 0x1, 0x8, 0x6303, 0x8, 0x650, 0x3aa, 0xe0, 0x7ff, 0x8, 0x2, 0x5, 0xdc, 0x9, 0x6, 0x1, 0x0, 0x3ff, 0x9, 0x7fffffff, 0x6, 0x28d78768, 0x3ff, 0x8, 0x8, 0x7fff, 0x7, 0x1, 0x400, 0x200, 0x8, 0x80000000, 0x1c0000, 0x9, 0x7fff, 0xed, 0x1, 0xff, 0x8, 0x3, 0x8001, 0x3000000, 0x8, 0x9b2, 0x8, 0x101, 0x2, 0x8, 0x79f39314, 0x6, 0x9, 0x807b, 0xf4, 0x510197b1, 0x5, 0x101, 0x7, 0x7, 0x8fc0, 0xfffffffb, 0x6, 0xfff, 0xfffffffa, 0x7, 0xa8c, 0x7, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x8, 0x2, 0x5, 0x8, 0x4, 0x5, 0x8, 0x2, 0x8, 0x3, 0x2, 0x1, 0x60, 0x2, 0x892, 0x101, 0x7, 0xffff, 0xca, 0x2, 0x10001, 0x9, 0x6, 0x101, 0x7ff, 0x4, 0x0, 0xfd, 0x1, 0x2, 0xe3c, 0x1, 0x0, 0x8001, 0x6368, 0x0, 0x8, 0x1d, 0x7254, 0x8, 0x0, 0x1, 0x1, 0xffff, 0x2, 0x0, 0x2, 0x0, 0x80000001, 0x9, 0x9, 0x10000, 0x7, 0x5, 0x0, 0x6, 0x99, 0x40, 0x0, 0x8001, 0x9, 0x9, 0x3, 0x188, 0x0, 0x9, 0x76b6, 0x8, 0x3d6, 0xb5, 0x10, 0x10001, 0x5, 0x1000, 0x7, 0x7fff, 0x9, 0x1f, 0x9, 0xe, 0x27de, 0x5, 0x80000000, 0x800, 0x1f, 0x4, 0x2, 0x59e, 0x8, 0x2, 0xb211, 0x5, 0x5, 0x8, 0x9, 0x1, 0x79, 0x8001, 0xa1, 0x97ff, 0x9, 0x5, 0x9, 0xf2bb, 0x1, 0xffff, 0x0, 0xadc, 0x3, 0x0, 0x1, 0xfffffff9, 0x80, 0x7, 0x3, 0xff96, 0x1ff, 0x10000, 0xfff, 0x30, 0x1, 0x5, 0x9, 0x3, 0x87, 0x5, 0x8000, 0xcd280000, 0x1f, 0x3f, 0x200, 0x2, 0x0, 0x4, 0x9, 0xe19, 0x107, 0x9, 0x7391, 0x1, 0x6, 0x0, 0x5, 0x1, 0xf8, 0xfc, 0xfffffffa, 0x80, 0xa84f, 0x5, 0x80000001, 0x9f, 0x3ff, 0x4, 0x57d9, 0x8, 0xfffffffd, 0x0, 0x96a, 0x6cf, 0x4, 0x5, 0x3ff, 0x1, 0x4, 0x44, 0x8001, 0x5, 0x1, 0x7ce3d211, 0x20, 0x885b, 0x800, 0xb7, 0x6, 0x8, 0x400, 0x132b, 0xfff, 0x8, 0x0, 0x3410000, 0xffffff25, 0xfffffff8, 0x80000001, 0x12c, 0x3f, 0x0, 0x2, 0x3, 0x8, 0x97, 0x80000000, 0x8001, 0xc615, 0x1, 0x5, 0x7fff, 0x8, 0x9, 0x3, 0x101, 0x4, 0x9, 0x4, 0x88a7, 0x1, 0x9, 0x0, 0xffffffff, 0x3, 0x6b5, 0x40, 0x0, 0x4, 0x6, 0x3, 0x6, 0x2, 0x1ffe00, 0xffffffe1, 0x7, 0x3, 0x5, 0x4, 0x80000000, 0xfffffff7, 0x6, 0x4, 0x3, 0x0, 0x3, 0x6, 0x800, 0x4bc1, 0x1ff, 0x200, 0x3, 0x8, 0x9, 0x8, 0x1, 0x3, 0x4, 0x3, 0xfff, 0xcc0b, 0x3, 0x4, 0x2, 0x8, 0x3, 0x2, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x28, 0x5, 0x3, 0x4, 0x1, 0x4, 0xffffffff, 0x6, 0x3, 0xfffffff7, 0xfffffffa, 0x2, 0x35b0, 0x6, 0x9c8c, 0x613e6915, 0x1, 0x6, 0x53b, 0x8000, 0x5, 0xffffffff, 0x3, 0x100, 0x812, 0x1, 0x10000, 0x1, 0xff, 0x7, 0x1, 0x7f, 0x8, 0x3, 0xe9, 0x2, 0x2, 0xfffffffd, 0x6e3, 0x200, 0x8, 0x0, 0x7f, 0x80, 0x4, 0x9, 0x5, 0x750, 0x2c12, 0x4, 0x1ff, 0x78, 0x8, 0x6, 0x401, 0x4, 0x2fb, 0x8b8, 0x7f, 0x5, 0x7f, 0x80000000, 0x800, 0x786, 0x4, 0x2, 0x100, 0x8, 0x6, 0x5f, 0x56, 0xffffff00, 0x8001, 0x6, 0x8000, 0x10001, 0x80000000, 0x3ff, 0x7, 0x401, 0x8, 0x2, 0xffff, 0x7ff, 0x5, 0x9, 0xad4a, 0x9, 0x2, 0x8001, 0x4, 0x6, 0x1, 0x80000001, 0xa8fe, 0x5, 0x0, 0xfffffffd, 0x9573, 0x4, 0x9, 0x4, 0x2, 0x8, 0x7f, 0x7, 0x7ff, 0x701, 0x54c, 0x1, 0x6, 0x10001, 0x1, 0x221, 0x20, 0x5, 0x80000000, 0x8, 0x7, 0x5, 0x3, 0x7, 0x8, 0x5, 0xfffffff9, 0x1c8e, 0xa3, 0x8000, 0x6, 0x7aa5, 0x3, 0x4, 0x7, 0x7fffffff, 0x20, 0x1f, 0x7, 0x5, 0x8, 0xfffffe01, 0x80000001, 0x9, 0x6, 0x3f, 0x800, 0x8, 0x4, 0xffff8000, 0x7fffffff, 0x6, 0x2, 0x1fc727a7, 0x5, 0x58, 0x1, 0x3, 0x8, 0x7, 0x4, 0x3, 0x100, 0x8, 0x4, 0x10000, 0x10001, 0x1, 0x2, 0x0, 0x7, 0x8, 0x8001, 0x3ff, 0x8, 0xfffffffc, 0x6, 0x8, 0x101, 0x200, 0xdd, 0x200, 0xa57, 0x2, 0x0, 0x4, 0x40, 0x9, 0xffff, 0x9ba1, 0x5, 0x2e, 0x101, 0x4, 0x1, 0xfffffffa, 0x0, 0x0, 0x50000, 0x80000000, 0x8, 0x6, 0x5, 0x9, 0x2, 0x1f, 0x3, 0x100, 0x4, 0x81, 0x1, 0x80, 0xff, 0x2, 0xffff0001, 0x10001, 0x5, 0x7, 0x2, 0x38, 0x97, 0x4, 0x5, 0x4, 0x101, 0x3ff, 0x0, 0x7, 0x7128, 0x6, 0x3, 0x9, 0x3f, 0x3f, 0x6, 0x7, 0xfffffffc, 0xff, 0x2, 0x5, 0xf10, 0xffff, 0x101, 0x591d, 0x6, 0x8, 0xd06a, 0x350, 0xda4, 0x1000, 0x7, 0x9, 0x5, 0x5334, 0x3, 0x1f, 0x1f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x10000000, 0x7, 0x8, 0xffff, {0x3f, 0x2, 0x9, 0x100, 0x7000, 0x87}, {0x9, 0x0, 0x0, 0x1f, 0x7f, 0x6}, 0x7b30, 0x3, 0x9}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x57}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8000, 0x6, 0xfff, 0x9, 0x1, 0x4, 0x3cbf, 0x1, 0x81, 0xffffffff, 0x200, 0x101, 0x20, 0x6, 0x100010, 0xfffffff9, 0x3ff, 0x20, 0x7, 0x6, 0xffff, 0x1000, 0xe24, 0xf85e, 0x7c16, 0x3, 0xffff, 0x5, 0x1, 0x20, 0x1, 0xfffff000, 0x80000001, 0x38, 0xfffffbe7, 0xd5d, 0x7f, 0x9, 0x2, 0x6, 0x4, 0xda0a, 0xee12, 0xfffffffe, 0x8, 0x5, 0x8, 0x3, 0x1, 0x401, 0x3, 0x9, 0x8, 0x1, 0x9, 0x5, 0x1000, 0x80000001, 0x6, 0x7, 0x1, 0x3, 0x3f, 0x3ff, 0x6, 0x0, 0x3, 0x3f, 0x0, 0x81, 0x5, 0x8000, 0xfffff418, 0xeee7, 0x6b, 0x7, 0x1b27, 0xc00000, 0x2, 0x9a1, 0x200, 0xffffff85, 0x80000000, 0x20, 0x6, 0x2, 0x6, 0x6, 0x9, 0x3118, 0x100, 0x9, 0x80000001, 0x7fffffff, 0x2f, 0xffffffe1, 0x7fffffff, 0x9, 0x40, 0x1, 0x18f3f965, 0x1, 0x2, 0x0, 0x800, 0xffffffff, 0x9, 0x1, 0x9, 0x2, 0x5, 0xb3a0, 0xb8, 0x5, 0x5, 0x6, 0x406d59a2, 0x47, 0xfff, 0x100, 0x5, 0x446, 0x3, 0xfffffeff, 0x1, 0x400, 0xb192, 0x8, 0x6e, 0x1, 0x6, 0x8, 0x7, 0x8, 0x401, 0x5, 0x8, 0xff, 0x5, 0x8, 0x7, 0x1, 0x3, 0x3, 0x2, 0xd8, 0x1, 0x4, 0x6, 0x10001, 0x2, 0x9, 0x5, 0x6, 0x2, 0x18e, 0x2, 0xb2, 0x7fffffff, 0xffffffff, 0xfffffffe, 0x9, 0x5, 0x41, 0x10000, 0xee, 0x9, 0x40, 0x7, 0x5c5b, 0x0, 0x0, 0x101, 0xffffffff, 0x3, 0x1c462abb, 0x6, 0x57a1, 0x8240, 0x8, 0x2, 0x8, 0x8, 0x9, 0x7, 0x0, 0x61a, 0xd41, 0xffff, 0xf058, 0x1, 0x8, 0x7ff, 0x7, 0x1, 0x20000, 0x4, 0x8, 0x4, 0xcb00, 0x4, 0x1ff, 0x4, 0x4, 0x1, 0x6, 0x6, 0x800, 0x3832, 0x10001, 0x7f, 0x9, 0x7, 0x4, 0x7fff, 0x80000000, 0x800, 0x6, 0x2cc, 0x0, 0x2, 0x1, 0xfffffffc, 0x10000, 0xd4, 0x200, 0x7ff, 0x101, 0x3ff, 0x1, 0x8000, 0x200, 0x0, 0x1, 0x401, 0x0, 0x3, 0xa9d, 0x3, 0x3ff, 0x8, 0x2, 0x7, 0xfff, 0x5, 0x1, 0x1746000, 0x7, 0x0, 0x4b, 0xfff, 0x2, 0x0, 0x5, 0x5, 0xffff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x6, 0x3, 0x3f, 0x2ec, 0x1, 0x2, 0x1, 0x2, 0x80000001, 0x2, 0x7, 0x10000, 0x2, 0x2, 0x3, 0x7, 0x80, 0xf9f3, 0x9, 0x0, 0x9, 0x4, 0x1, 0x3ff, 0x8000, 0x7fffffff, 0x3f, 0x4, 0x6, 0x4, 0x400, 0xfffffffb, 0x4, 0x1000, 0x1ff, 0x0, 0x8, 0x6, 0x4, 0x8000, 0xfffff308, 0x2ff5, 0x100, 0x7ff, 0x315b9641, 0x5880, 0xfff, 0x81, 0x8, 0x1, 0x3, 0xc4c2, 0x8, 0x2, 0x40, 0x1, 0x0, 0xfffffff8, 0x3d8, 0x80, 0x7, 0x6, 0xd046, 0xfffff801, 0x1, 0xe2c, 0x879, 0x4, 0x2, 0x1, 0x6, 0x0, 0x55fd, 0x8, 0x6, 0x8, 0x9, 0x8, 0x6, 0xc3, 0x0, 0x3f, 0x4, 0xa54c, 0x9, 0x6, 0x3, 0x6, 0x7, 0x8001, 0xfffffffa, 0x1, 0xfffffffc, 0xfffff001, 0x400, 0x743, 0x7ff, 0x2, 0x4, 0x5, 0x5, 0x7, 0x800, 0x844, 0x8, 0x0, 0x9, 0x0, 0x6, 0xfff, 0x6, 0x1, 0x1ff, 0x1000000, 0x4, 0x3, 0xbd, 0xa5, 0x3, 0x5, 0xb70, 0xfffffff8, 0x3, 0x3, 0x8, 0x3, 0x3, 0x7, 0x3, 0x1, 0x9, 0x8, 0x2, 0x9, 0x3, 0x6, 0x5d, 0x5, 0x7, 0x8, 0xeba, 0x1, 0x5, 0x1, 0x8, 0x6, 0x401, 0x2, 0x3f, 0x5, 0x6, 0x10001, 0x6, 0x1, 0x1, 0x4, 0x20, 0x6, 0x7, 0x7ff, 0x9, 0xffffffff, 0x7fffffff, 0x5b, 0xd9, 0x400, 0x4, 0x9, 0x0, 0x7fffffff, 0x8, 0x6, 0x6, 0x7, 0x8, 0x5, 0x6, 0x401, 0x10001, 0x7, 0xb1, 0x2e, 0x7, 0xc6ba, 0x5, 0xb614, 0x0, 0xfffffff8, 0x7caa, 0xffffffff, 0x40, 0x8, 0x40, 0x9, 0x2, 0x1, 0x101, 0xfffffffc, 0x5, 0x8, 0x8, 0x7fffffff, 0x0, 0x6, 0x8, 0x1, 0x6, 0x0, 0x4, 0x5ed19fca, 0xfffffffc, 0x800, 0x4, 0x1f, 0x2105, 0x3f, 0x0, 0x8daf, 0x1, 0x4, 0x9, 0xbd, 0x6, 0x2, 0x0, 0x2cc5, 0x20, 0x4, 0x200, 0x8, 0xab5, 0x4, 0x0, 0x4, 0x2, 0x9, 0x8, 0x7f, 0xff, 0x2, 0x3, 0xfffffffe, 0x284f, 0x9, 0x0, 0x9, 0x7fff, 0x8000, 0x8001, 0x2, 0x6, 0x2, 0x200, 0x9, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]]}, {0x6c, 0x6, "136d610bc7ba8d56962f77a747592d493e14714e53309924a5200b9be54dc6f46b2797849beda3b5c3c784c499bfafc938905965f4edefb09e0613879cda48ea16d8d53c98625f9d16449c3511e4e3f99af0a04a3b5c9572644c8259dd3603d087b1657e29a07ccf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x400, 0x40, 0x1, 0x2, 0x7, 0x32, 0x50000000, 0x822, 0xffff, 0x6, 0x100, 0x40, 0x7, 0xe0, 0x8, 0x101, 0x401, 0x3, 0x0, 0x3f, 0x0, 0xffff, 0x34ef, 0x80000000, 0x3, 0x1000, 0x113, 0x0, 0xb3, 0x9, 0x4, 0x30c961bb, 0x8001, 0x4, 0x7ff, 0x1, 0x7, 0x1, 0x7, 0xffff8001, 0x4, 0x20, 0x0, 0x9, 0x1, 0x2, 0x5, 0xfffffffc, 0xffffffc0, 0x1, 0x7, 0x6, 0x2, 0x4, 0xab5, 0x7, 0x1f, 0x7, 0x8, 0x81, 0xfffffffa, 0x6, 0xfffffffa, 0x1, 0x1, 0x9, 0x1, 0x400, 0xffffff7f, 0x3, 0xc3, 0x0, 0x2aa, 0x8, 0x1, 0xb1, 0xffffffff, 0x400, 0xb156, 0xfff, 0x0, 0xff, 0x1ff, 0xc2, 0x800, 0x3, 0x7, 0x0, 0x43, 0x80000000, 0x3f, 0x9, 0xe244, 0x0, 0xbb, 0x2c, 0x9, 0xd83, 0xff, 0x6, 0x6, 0x7, 0x3, 0x1, 0xffffffff, 0xffffff58, 0x10001, 0x2, 0x2a, 0x3f, 0x20, 0x9, 0x28, 0x4, 0x0, 0x10000, 0x8, 0x800, 0xffffff7f, 0x3, 0x101, 0x3, 0x200, 0x8, 0x0, 0x1, 0x7, 0x5, 0xd52, 0x9e, 0x3f, 0x100, 0x100, 0x7fff, 0x400, 0x5, 0x800, 0x4, 0x1, 0x9, 0x1, 0x7, 0x7fffffff, 0x1f, 0x5, 0x5, 0x4, 0xfff, 0x5, 0x2, 0x20000, 0x4, 0x80000001, 0x20, 0x8, 0x7, 0x0, 0x8, 0x2, 0x7, 0x8, 0x5, 0x15f, 0xbf9b, 0x80000000, 0x3ff, 0x5, 0x3f, 0x6, 0x6, 0x80000000, 0x4, 0x7, 0x0, 0x2, 0x7, 0x7f, 0xffff8001, 0x4, 0x4, 0x99a, 0xca, 0x3f, 0x100, 0x7ff, 0x80000001, 0xffff, 0x7825, 0xffff, 0x80000000, 0x7, 0x8, 0xfffffffd, 0x4, 0xfffffffc, 0x20, 0x81, 0xd65b, 0xff, 0x6, 0xfff, 0x8, 0x80000, 0x80000000, 0x6, 0x9, 0x1, 0xffff, 0x5e, 0x8001, 0x3, 0x5, 0x8001, 0x101, 0x39e2, 0x1, 0xb3b, 0x2, 0x4, 0x4, 0x7, 0xfff, 0x5, 0x7fff, 0x9, 0x1ff, 0x6d, 0x0, 0xfffff800, 0x1000, 0x6, 0x7e1d, 0x5, 0x4, 0xfffffff9, 0xff, 0x3ff, 0x40, 0x100, 0xff, 0x4, 0x20, 0xebe7, 0xfffffffc, 0x1, 0x1f, 0x3, 0x1ff, 0x5f8, 0x9, 0x9, 0x1ff, 0x4, 0xff, 0x7fff]}]}, @TCA_U32_ACT={0x1680, 0x7, [@m_simple={0x10c, 0x9, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x70, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc, 0x3, 'bridge0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0xfffffffe, 0x8, 0x7ff, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x5379, 0x10000000, 0x2, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x1000, 0x3, 0xd2f, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x1, 0x4, 0x642a5849, 0x7}}]}, {0x72, 0x6, "8f982efc4eda3f7b76b56cfb2e7968a2ec33124e31980c77287025a8516efda3dff35ba4988f3476e5ed0702f420c39924a69a8926576e3ca3c798b20b629fb3489869ad60227404c92779c8dab064ab5ef5753d50f297260189b54d66fc9cbe1b6adc3c38169f0c9e38313345ca"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x5c, 0x4, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x8, 0x1, 0x9, 0x3}, @multicast1, @private=0xa010102, 0xff, 0x1}}]}, {0xc, 0x6, "1fd85cc39c17d101"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x38, 0xa, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcbf}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_xt={0x1128, 0xc, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x1040, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x102a, 0x6, {0x9897, 'security\x00', 0x8, 0xe2, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8}]}, {0xc1, 0x6, "27bf41e8d153ce92900513bace90827a3ab20540eed418a37e15bb15b103400ff545cc438201cf53a651e270888fc0d5bf482f41ac6db969f9a064b661675c771f35acbe5ee329e297e1dc7ce98a41b7042dc11e438faa1417ef3da6c855bdcbeebc2889327b7305835469a446c8e6891c55dee105cce077a2c71e4afb232617e72ba318733ce6bde266acaa15a8a9d6608025750769db1531191a3b6afc51ef4682744133e6f035fa19ddf54199a0c05689fb7158ed4f593f66ab4695"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0xec, 0xe, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x72, 0xffff, 0x5, 0x401, 0x5}, 0x7}}]}, {0xa0, 0x6, "206ab41d45ca689a08f07e2a4fc15dbdbd7233161971265d9d6780fd2247adc8d7ac23742cb1a5b56d6d75e7a02960113ce0020647da190210a9ffbf8592f3ee2dff5d2c9fe8bfb2db0b9a73abe35c1f915d0986a165e30f0903a70427162b0d81be0bb12db8a982c2d354b670415ce315d56e52aa7acd9fd2e09b921b83cfb68baa0a2487ccf86cf1016b9ab2fadc814bdd04dc35b584202af8b870"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_nat={0x130, 0x3, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x6, 0x20000007, 0x590c, 0x1}, @broadcast, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe7, 0x7, 0x6, 0x9, 0x1}, @dev={0xac, 0x14, 0x14, 0x1c}, @broadcast, 0xff000000, 0x1}}]}, {0xb8, 0x6, "e0ce71071a02a8aa848ae3b1c5c681c806d17e72e8b49ac2f2eb00df3fee655eefe5035b6811ee73d0dfc2ef3468c398c6eab8ac15e41910de39f289622fa03f0df76c4f2f276458e189e4c95439c65f61a0c2fa612d954d29bcf027c33c2c57f550615845dafc4d07b3150e4fdf7573e64edd6a32232dd2d919446f11e570420748c06d0e0bd26a9417f72fd81a40cb0950d909122c6566a659d834e485e5e3e7eca7bc450a081a7b99e9fd698c9fa1e9dedbaf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xbc, 0x18, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, [], 0x41}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}]}, {0x45, 0x6, "dc200ffdb42949297401e0496a5c4828f35fbfcd61e221df7159c32f9b0a1f5cbeb4fed602be29e90650afb83c247aecf631f1ff0b22dca6f0a52dd0b5b16dc885"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0xdc, 0xb, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7fffffff, 0x1, 0x4, 0x3, 0x1f}}]}, {0x97, 0x6, "930cd2398d402cd3f30973c6665f92a6615a28acf9c69e24cb2ffc77293a3f331fea885e85e15d130603c632d82272213ec10fb0272a334717827b859562053daeef23cd21177c51abdb705c7177c2cb2e30f14263db7d06cacb7c20d57622296037b2815057222937bcb0138a491cae7721aa911617b6d2f3adfee5920e30dd102ec4de32b5157de3d25c59a36f8a707e4ba3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x48c4}, 0x1, 0x0, 0x0, 0x4050}, 0x880) getsockname$unix(r5, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e) 03:38:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0x0) 03:38:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x3]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x9effffff}, 0x0) 03:38:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@llc={0x1a, 0x200, 0x0, 0x81, 0x79, 0x0, @local}, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r4, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)={0xf3c, 0x2, 0x4, 0x20, 0x10000, {}, {0x4, 0x0, 0x8d, 0x1, 0xf9, 0x2, "c8ce5c5d"}, 0x5, 0x1, @fd, 0x1, 0x0, 0xffffffffffffffff}) ioctl$ASHMEM_SET_NAME(r7, 0x41007701, &(0x7f00000001c0)='hash\x00') setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000003c0)={r3, @in6={{0xa, 0x4e20, 0xff8, @private0={0xfc, 0x0, [], 0x1}, 0x5}}}, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r3, 0xfffff800}, 0x8) getsockname$packet(r1, 0x0, &(0x7f0000000000)) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-ce\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 03:38:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0xc00e0000}, 0x0) 03:38:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x5, 0x5, 0x5, 0xffffffe1}, {0x1f, 0x37, 0x3, 0x9}, {0x535, 0xe1, 0x8, 0x3f}, {0x9, 0x2, 0x0, 0x1}, {0x8, 0x2, 0x5, 0xff5}, {0x3, 0x4, 0x81, 0x2}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000080)) [ 1020.325424][ T3130] usb 6-1: new high-speed USB device number 13 using dummy_hcd 03:38:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket(0xb, 0x804, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r2, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x1407, 0x100, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) 03:38:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff}, 0x0) [ 1020.595376][ T3130] usb 6-1: Using ep0 maxpacket: 8 [ 1020.718642][ T3130] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1020.734874][ T3130] usb 6-1: config 0 has no interface number 0 [ 1020.758342][ T3130] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1020.787075][ T3130] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1020.809468][ T3130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.830257][ T3130] usb 6-1: config 0 descriptor?? [ 1020.855312][ T8342] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1020.867036][ T8326] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1020.882808][ T8349] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1021.158391][ T3127] usb 6-1: USB disconnect, device number 13 [ 1021.299797][ T8375] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 03:38:04 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x17}, 0x1) 03:38:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0xfffff000}, 0x0) 03:38:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@llc={0x1a, 0x200, 0x0, 0x81, 0x79, 0x0, @local}, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r4, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)={0xf3c, 0x2, 0x4, 0x20, 0x10000, {}, {0x4, 0x0, 0x8d, 0x1, 0xf9, 0x2, "c8ce5c5d"}, 0x5, 0x1, @fd, 0x1, 0x0, 0xffffffffffffffff}) ioctl$ASHMEM_SET_NAME(r7, 0x41007701, &(0x7f00000001c0)='hash\x00') setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000003c0)={r3, @in6={{0xa, 0x4e20, 0xff8, @private0={0xfc, 0x0, [], 0x1}, 0x5}}}, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r3, 0xfffff800}, 0x8) getsockname$packet(r1, 0x0, &(0x7f0000000000)) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-ce\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 03:38:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr-twofish-3way,hmac(wp256-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 03:38:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) [ 1022.225075][ T3140] usb 6-1: new high-speed USB device number 14 using dummy_hcd 03:38:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x4]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0xffffff7f}, 0x0) 03:38:04 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xaf93010e, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e000000040002800800040036450000000003ccbde638a66c86", @ANYRES32, @ANYBLOB="4e5c841e782764316f9f00c06d8446f9cf7b66e64fffc6497ce67d991661755ba774b576f7115b37e517e8beeae79518de1ac81fec81296498016c5d4e5dcf986b9aa42e45ec9f50457a14602acc00540b5d5fee2f608092a3508003c86174cb50e6606f83331673810cc0be215074cf9d95b9a339c9b61d820a329c63836ae30cd9ad8e7a537df0aaa92fb949515f11789327afc66b767100a644ff5b333e25592781193860d327c8f8fe9e70eac53e0bb721a1ee5104288618ac991c1d569362e967ca3c192ee9707bddec4e48da1fde5fb90bd55603db6a82c12cc2980365b7b90c206b6a61b80c2c68cfe62d275ca2c93542bb0cc1e2ad6ac71fe949e213bfb2ef1eba699b5256c7756841c54fc8cfc534ea0af445cc3f4c3d9d818d0622c5915fd2"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x3, 0x80000000000004) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 03:38:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) bind$alg(r1, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(pcbc(aes-aesni),michael_mic-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 03:38:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0xffffff9e}, 0x0) [ 1022.436756][ T8490] device vxlan0 entered promiscuous mode [ 1022.475093][ T3140] usb 6-1: Using ep0 maxpacket: 8 03:38:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x80000001, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r2, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000200)=ANY=[@ANYBLOB="a200000047f8f756f47086fc548ffbfac83f80d5ed5df00481e356c4b94d92a094deb2e88cdc6e57c237ad399695d6e217fbc580e8c40968a91ce9b672560e968f961d3c8d46b99cf11707e110b9a32bc5511841b2604439ffed201d3a569fe101d82d3a27e58eb02dd42157ccedb8fe21c3c0761223950700876eae426b45bbbadd0c91b18a95fd0a2a564a8fb4616e81185926b6b4c9565257a24c89063bf12fe5a9f01dd841ce94908049103160955c35b56700"/193]) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r1, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r5, 0x40044104, &(0x7f0000000000)=0xa842) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x200200, 0x0) write$input_event(r7, &(0x7f00000000c0)={{0x0, 0xea60}, 0x12, 0x2, 0x40}, 0x18) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 03:38:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) [ 1022.605853][ T3140] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1022.613976][ T3140] usb 6-1: config 0 has no interface number 0 [ 1022.640786][ T3140] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1022.689462][ T3140] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1022.738551][ T3140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.773818][ T3140] usb 6-1: config 0 descriptor?? [ 1022.816725][ T8462] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1023.087768][ T8040] usb 6-1: USB disconnect, device number 14 03:38:05 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) 03:38:05 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000000)='./file0\x00', 0x151) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0x4, 0x6}, {0x8}, 0x6f, 0x0, 0x44}) process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_sctp(0xa, 0x0, 0x84) pipe(0x0) r2 = socket(0x11, 0x0, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r5], 0x20}}, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0) 03:38:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0xfffffff0}, 0x0) 03:38:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0xffffffff) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 03:38:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) [ 1024.004803][ T5] usb 6-1: new high-speed USB device number 15 using dummy_hcd 03:38:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x5]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x1000000000000}, 0x0) 03:38:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) fadvise64(r1, 0x0, 0x2, 0x5) [ 1024.255109][ T5] usb 6-1: Using ep0 maxpacket: 8 03:38:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x40030000000000}, 0x0) [ 1024.375622][ T5] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1024.383740][ T5] usb 6-1: config 0 has no interface number 0 [ 1024.441136][ T5] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1024.498673][ T5] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1024.534785][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:38:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) [ 1024.565773][ T5] usb 6-1: config 0 descriptor?? [ 1024.626205][ T8569] raw-gadget gadget: fail, usb_ep_enable returned -22 03:38:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r2 = socket(0x11, 0x0, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, 0x0, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x6, &(0x7f0000000040)=[{0x5, 0x1f, 0x40}, {0x9, 0xff, 0x0, 0x8001}, {0x72, 0x8, 0xf7, 0x9}, {0x1, 0x0, 0x7f}, {0x9, 0x4, 0x4, 0x2}, {0x6, 0xe5, 0x6c, 0x80c}]}, 0x10) fcntl$addseals(r0, 0x409, 0x9) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) 03:38:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x100000000000000}, 0x0) [ 1024.897605][ T3140] usb 6-1: USB disconnect, device number 15 03:38:07 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) [ 1025.804628][ T3219] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1026.064696][ T3219] usb 6-1: Using ep0 maxpacket: 8 [ 1026.205355][ T3219] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1026.213486][ T3219] usb 6-1: config 0 has no interface number 0 [ 1026.229770][ T3219] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1026.243979][ T3219] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1026.262555][ T3219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.287901][ T3219] usb 6-1: config 0 descriptor?? [ 1026.316170][ T8648] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1026.588581][ T5] usb 6-1: USB disconnect, device number 16 03:38:09 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000000)='./file0\x00', 0x151) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0x4, 0x6}, {0x8}, 0x6f, 0x0, 0x44}) process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_sctp(0xa, 0x0, 0x84) pipe(0x0) r2 = socket(0x11, 0x0, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r5], 0x20}}, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0) 03:38:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x200000000000000}, 0x0) 03:38:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 03:38:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x44, 0x73, 0x0, @remote, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0x76) 03:38:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x6]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x300000000000000}, 0x0) 03:38:09 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) socket(0x11, 0x0, 0x0) 03:38:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) getsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 03:38:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x400000000000000}, 0x0) 03:38:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') 03:38:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0xa00000000000000}, 0x0) 03:38:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0xe00000000000000}, 0x0) [ 1027.544454][ T5] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1027.794467][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 1027.914336][ T5] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1027.922462][ T5] usb 6-1: config 0 has no interface number 0 [ 1027.953744][ T5] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1027.978840][ T5] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1028.013540][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.054840][ T5] usb 6-1: config 0 descriptor?? [ 1028.076908][ T8714] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1028.539249][ T5] usb 6-1: USB disconnect, device number 17 03:38:11 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="2c000000030000000000"], 0x2c) sendfile(r1, r1, &(0x7f0000001000), 0xffff) socket$inet(0x2, 0x4, 0x93) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) clock_getres(0x6, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0), 0x10) 03:38:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) setsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f0000000000)=0x2, 0x4) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r2, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 03:38:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0xf00000000000000}, 0x0) 03:38:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x44, 0x73, 0x0, @remote, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0x76) 03:38:11 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x7]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:11 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:38:11 executing program 2: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0x3f, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) r3 = socket(0x11, 0x0, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, 0x0, &(0x7f0000000000)) accept$ax25(r3, &(0x7f0000000100)={{0x3, @bcast}, [@remote, @null, @remote, @null, @rose, @remote, @default, @rose]}, &(0x7f0000000180)=0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0x1c, &(0x7f00000001c0)="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", 0x17d) 03:38:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x4607000000000000}, 0x0) 03:38:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x6000000000000000}, 0x0) 03:38:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(rfc7539esp(cts(adiantum(cbc(aes-aesni),aes)),sha256_mb))'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) [ 1029.464452][ T5] usb 6-1: new high-speed USB device number 18 using dummy_hcd 03:38:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 03:38:11 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000040402609333300000000000109022400010000000009040000ff0300000009210000000122020009058103f1"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000002ec44817b098c6f1640c4547b0b8a49e545de31d6e4ae621312380ca7334fdd4e6ced70a520d8094f60fa285f8db638c1ab3c2971fb59ff9e4bc"], 0x0}, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x141000, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) syz_open_dev$evdev(&(0x7f00000024c0)='/dev/input/event#\x00', 0x3, 0x40000) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000400)='H') r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:38:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e20, 0xff8, @private0={0xfc, 0x0, [], 0x1}, 0x5}}}, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000040)={r4, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000100)=0x84) 03:38:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0xc00e000000000000}, 0x0) [ 1029.734114][ T5] usb 6-1: Using ep0 maxpacket: 8 03:38:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x11, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000180)={'mangle\x00', 0x9, "76e6346e5178bed754"}, &(0x7f00000001c0)=0x2d) getsockname$packet(r1, 0x0, &(0x7f0000000000)) r2 = socket(0x11, 0x0, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, 0x0, &(0x7f0000000000)) r3 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) ioctl$sock_netdev_private(r3, 0x89f0, &(0x7f0000000400)="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") r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) bind$alg(r1, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) [ 1029.855663][ T5] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1029.867661][ T5] usb 6-1: config 0 has no interface number 0 [ 1029.881210][ T5] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1029.899643][ T5] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1029.919331][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.942573][ T5] usb 6-1: config 0 descriptor?? [ 1029.975684][ T8804] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1030.107546][ T12] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1030.251473][ T5] usb 6-1: USB disconnect, device number 18 03:38:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x44, 0x73, 0x0, @remote, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0x76) [ 1030.494235][ T12] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1030.516613][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.547818][ T12] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1030.599874][ T12] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1030.632064][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.650355][ T12] usb 1-1: config 0 descriptor?? 03:38:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x8]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 03:38:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="343ce7de0b5f2b260b836fc60c2e5760490adb7d92765dbf441ee636791584b2dfe83b1a7c0e0a4974e0b69d6f93d1b065d73cc0a13bb5d6688fd4f5598a195ef534f6514bf8726bc38bd7e65306614ac0283c476358011a009b26036b799a7b5955254e37b242afe60228265a57b0289340abcd02aab8930eb86a2c0e970a5739936d1848d70851f5205db02fb59533b483c24e0a32daeb7b3c0ae6605608bac4478fcebc53d0ee8b4e1e4c6360633a89ebc38d274280a2b52e900440474439d6ab9b734490baa8b3a35045ff524e42ee44c58cbcbdaf2dd7cd8906ca40a08ae9", 0xe1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 03:38:13 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:38:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 03:38:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) [ 1031.573947][ T12] usbhid 1-1:0.0: can't add hid device: -71 [ 1031.579972][ T12] usbhid: probe of 1-1:0.0 failed with error -71 [ 1031.615651][ T12] usb 1-1: USB disconnect, device number 12 [ 1032.403692][ T12] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1032.773791][ T12] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1032.788554][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.799537][ T12] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1032.812695][ T12] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1032.821837][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.833665][ T12] usb 1-1: config 0 descriptor?? 03:38:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 03:38:15 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:38:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r2, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000000)) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x1a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 03:38:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0xd]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) [ 1033.033697][ T12] usbhid 1-1:0.0: can't add hid device: -71 [ 1033.039888][ T12] usbhid: probe of 1-1:0.0 failed with error -71 03:38:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 03:38:15 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) [ 1033.084312][ T12] usb 1-1: USB disconnect, device number 13 03:38:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400880, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x1) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 03:38:15 executing program 5: syz_usb_connect(0x0, 0x35, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:38:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 03:38:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(0x0, 0x0) fdatasync(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz0\x00'}}}}, 0x34}}, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000280)) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="880e00002c00270d00"/20, @ANYRES32=r7, @ANYBLOB="00000000000000000a000000090001007273767000000000580e0200540e0600500e01000a0001007065646974000000240e0280200e04000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d46d15000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000"], 0xe88}}, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) [ 1033.569278][ T9016] tipc: Enabling of bearer rejected, failed to enable media 03:38:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x0) 03:38:16 executing program 5: syz_usb_connect(0x0, 0x35, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:38:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "45c9cd4051c946bf", "efe8693a2e73e87f4bb3b5f80c9b8e23", "1287ea29", "bcc8e7e6d8612869"}, 0x28) r1 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x0, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r2, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000240)={0x3, 0x40, 0x80, 0xcc000, r3}) r5 = socket$alg(0x26, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bind$alg(r5, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80000, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x202100, 0x0) sendto$packet(r7, &(0x7f0000000100)="fe774f38798ec08c4c37bf3f9c0ab0f783bcfd9290283926065e5da9b20262c02b2c7181e4b44a3b393fff5f88cc8e70fceb517ef35d66221b161ca3ff2a9039102e7a2f858053ba94da09d4e65c3434b850670310eb236a0361c9d9b73964b12896325c4526477c0e8e5ff3eaffd5b4ecf0926fc901cef1260fadfe3159063ac87fe3832c8772acdc1c8bd8cdb9a1f7cffa8a6806a0cb229eea0f292a8068e29b268f1759f4a8a6cf513ed70b4e95683e2e5aabed45c680450b32c83a80b1287b5d1faea0bb50685183c086e363d0c2d948620bf334308d316bd08dce55aa3f5990ab0f89c4656807e73fffae14afd946e5", 0xf2, 0x20004000, 0x0, 0x0) ioctl$HIDIOCGUCODE(r7, 0xc018480d, &(0x7f0000000080)={0x1, 0x200, 0x20, 0x5, 0xfff, 0x4}) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x38) 03:38:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0xe]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:38:16 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x18) 03:38:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000180)={0x59, "2836dc7f75bda1c40f0c162a106999c40d6a8f9bf81f9946b2bab14efffe85cc083f2a03f565444c18d850dfe35f66edd4fb113708e80b7dbddef040f8dc319b99cd6567b8d4bee1ea106488046a33d3bf6e5fe3d1b5fd67a2"}) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @random="eac78e0a79dc"}, 0x10) 03:38:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa}, 0x0) 03:38:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xe}, 0x0) 03:38:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf}, 0x0) 03:38:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:18 executing program 5: syz_usb_connect(0x0, 0x35, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:38:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60}, 0x0) 03:38:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(0x0, 0x0) fdatasync(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz0\x00'}}}}, 0x34}}, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000280)) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="880e00002c00270d00"/20, @ANYRES32=r7, @ANYBLOB="00000000000000000a000000090001007273767000000000580e0200540e0600500e01000a0001007065646974000000240e0280200e04000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d46d15000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000"], 0xe88}}, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 03:38:18 executing program 3: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:38:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x2c]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 03:38:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x300}, 0x0) 03:38:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x746}, 0x0) [ 1036.203219][ T8040] usb 4-1: new high-speed USB device number 8 using dummy_hcd 03:38:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 1036.382419][ T9134] tipc: Enabling of bearer rejected, failed to enable media 03:38:18 executing program 2 (fault-call:4 fault-nth:0): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:18 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) [ 1036.463095][ T8040] usb 4-1: Using ep0 maxpacket: 8 [ 1036.583823][ T8040] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 1036.591944][ T8040] usb 4-1: config 0 has no interface number 0 [ 1036.615422][ T8040] usb 4-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1036.651146][ T8040] usb 4-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1036.683193][ T8040] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.716814][ T8040] usb 4-1: config 0 descriptor?? [ 1036.754497][ T9135] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1036.833211][ T3219] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1037.123082][ T3219] usb 6-1: device descriptor read/64, error 18 [ 1037.162114][ T12] usb 4-1: USB disconnect, device number 8 03:38:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 03:38:19 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000100), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x1, @remote}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000640)="f4001100002b3325fe8000000000000005baa68754ba00e8c1344f3e62d76c27e800004102ffffff8880", 0x2a}], 0x1}, 0x20000800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x11, 0x0, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, 0x0, &(0x7f0000000000)) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @initdev}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6=@private1}}, &(0x7f00000003c0)=0xe8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000000000000000000000000000000000000087480f176f774e7b66b230c8b5bdf23ea2bd3737d7cad64618c04d0c61d63e6c34557e8c92a8877f287cfe97573cfe81f61b56d25cf636517e7a9230f273ec84199bbd7e35b13dc34c6585f779080bb0d516dc7afb89337f45399a7932428ab075f07971b14b867e02d6fe405cb1794e6eeac0a1df4692b5c2ab8d867802baba525a29f0e28763de5ee67a0323a1ee80ae96e7996d6133970cec28e9c52958dd64b75f1157706bc75adae8519146b40c3f91d7c7ab6502a03f79d38c24fcd646ad65835a1e555ec9daa21995a9d1da1e81e8a545e17911cee4", @ANYRES32=r9], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="f8000000", @ANYRES16=0x0, @ANYBLOB="10002abd7000fedbdf2504000000600001801400020067656e65766531000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="1400020069703667726574617030000000000000140002007369743000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000004c0001801400000000000008000300a0b6962708000100"/44, @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e300000000000000000080003000000000008000300020000003800018008000100", @ANYRES32=r6, @ANYBLOB="08000300020000001400020067656e6576653100000000000000000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0xf8}, 0x1, 0x0, 0x0, 0x8000044}, 0x0) bind$inet(r4, 0x0, 0x0) bind$inet(r4, 0x0, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) 03:38:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xec0}, 0x0) 03:38:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 1037.583165][ T3219] usb 6-1: device descriptor read/64, error 18 03:38:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x40410, &(0x7f00000003c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7f}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@uid_lt={'uid<', r3}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@audit='audit'}]}}) shutdown(r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x13d8}, 0x1, 0x0, 0x0, 0x200098c4}, 0x8000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x10, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 03:38:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4607}, 0x0) 03:38:20 executing program 0: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r2}, 0xc) 03:38:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x2e]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:20 executing program 0: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) io_submit(0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x5, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) fchdir(0xffffffffffffffff) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x339, 0x0, 0x4, 0x1, 0x34, @multicast}, 0x10) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000140)={[{0x8000, 0x7, 0xd1, 0x0, 0x0, 0x11, 0x0, 0x40, 0x6, 0xff, 0x80, 0x7, 0x537}, {0x80, 0x7fff, 0x9, 0x3, 0x2, 0x9, 0x2, 0xff, 0x9, 0x7f, 0x0, 0x88, 0x100000000}, {0x200, 0x5, 0x8, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff, 0x9}], 0xff}) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25NOUID(r1, 0x89e2, &(0x7f0000000500)) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x18) connect$pptp(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) [ 1037.873087][ T3219] usb 6-1: new high-speed USB device number 20 using dummy_hcd 03:38:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000}, 0x0) [ 1038.086525][ T9259] IPVS: ftp: loaded support on port[0] = 21 [ 1038.172952][ T3219] usb 6-1: device descriptor read/64, error 18 [ 1038.583039][ T3219] usb 6-1: device descriptor read/64, error 18 [ 1038.597797][ T9296] IPVS: ftp: loaded support on port[0] = 21 [ 1038.687595][T25724] tipc: TX() has been purged, node left! [ 1038.713650][ T3219] usb usb6-port1: attempt power cycle [ 1039.452705][ T3219] usb 6-1: new high-speed USB device number 21 using dummy_hcd 03:38:21 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:38:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00e}, 0x0) 03:38:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x5c}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x44]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:21 executing program 0: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) io_submit(0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x5, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) fchdir(0xffffffffffffffff) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x339, 0x0, 0x4, 0x1, 0x34, @multicast}, 0x10) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000140)={[{0x8000, 0x7, 0xd1, 0x0, 0x0, 0x11, 0x0, 0x40, 0x6, 0xff, 0x80, 0x7, 0x537}, {0x80, 0x7fff, 0x9, 0x3, 0x2, 0x9, 0x2, 0xff, 0x9, 0x7f, 0x0, 0x88, 0x100000000}, {0x200, 0x5, 0x8, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff, 0x9}], 0xff}) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25NOUID(r1, 0x89e2, &(0x7f0000000500)) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x18) connect$pptp(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) 03:38:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x40410, &(0x7f00000003c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7f}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@uid_lt={'uid<', r3}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@audit='audit'}]}}) shutdown(r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x13d8}, 0x1, 0x0, 0x0, 0x200098c4}, 0x8000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x10, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 1039.582871][ T3219] usb 6-1: device descriptor read/8, error -71 03:38:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000}, 0x0) [ 1039.698670][ T9334] IPVS: ftp: loaded support on port[0] = 21 [ 1039.812835][ T3219] usb 6-1: device descriptor read/8, error -71 03:38:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 03:38:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 03:38:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) [ 1040.312652][ T3219] usb 6-1: new high-speed USB device number 22 using dummy_hcd 03:38:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) [ 1040.504318][ T3219] usb 6-1: device descriptor read/8, error -61 03:38:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) [ 1040.778130][ T3219] usb 6-1: device descriptor read/8, error -61 [ 1040.912735][ T3219] usb usb6-port1: unable to enumerate USB device 03:38:24 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:38:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 03:38:24 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000240)="0201050000c903c70000ff07000000fff7ffffffffffffff00000400004001fcff58000000014d9ea4f35342c459", 0x2e, 0x1c0}]) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) 03:38:24 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x4c]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) [ 1042.773923][ T9395] Dev loop3: unable to read RDB block 1 [ 1042.779970][ T9395] loop3: AHDI p1 p2 p3 p4 [ 1042.808146][ T9395] loop3: partition table partially beyond EOD, truncated [ 1042.850946][ T9395] loop3: p1 start 4278648832 is beyond EOD, truncated [ 1042.884743][ T9395] loop3: p2 start 4294901760 is beyond EOD, truncated [ 1042.914293][ T9395] loop3: p3 start 1 is beyond EOD, truncated [ 1043.036759][ T12] usb 6-1: new high-speed USB device number 23 using dummy_hcd 03:38:25 executing program 0: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) io_submit(0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x5, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) fchdir(0xffffffffffffffff) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x339, 0x0, 0x4, 0x1, 0x34, @multicast}, 0x10) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000140)={[{0x8000, 0x7, 0xd1, 0x0, 0x0, 0x11, 0x0, 0x40, 0x6, 0xff, 0x80, 0x7, 0x537}, {0x80, 0x7fff, 0x9, 0x3, 0x2, 0x9, 0x2, 0xff, 0x9, 0x7f, 0x0, 0x88, 0x100000000}, {0x200, 0x5, 0x8, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff, 0x9}], 0xff}) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25NOUID(r1, 0x89e2, &(0x7f0000000500)) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x18) connect$pptp(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) 03:38:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 03:38:25 executing program 3: getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) keyctl$invalidate(0x15, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="f00000001200000f1d633f5328bcf8251d057f0400000100030000c1bddf000600000008000000ffffff7f01040000010000000500e24369880f5a8fbdf730a6d36c3d1d3fe3ded846907d68fffe8d04000000a1120b2be75d4c029a8ead2f56e75a00000000000000080000000000000036c821c3629f4ff4fa267e50b094c1261961b627739446ed79416e2efd857437fa7d0b24e8dea6669124e13e70f2de81f8ce1885a24f13", @ANYRES32=r0, @ANYBLOB="0400000003000000ff0100000000000029000100eb28e511565d65d62810cc0b497a100d0301a601fb0000001a00010035441bbd5719c93d8feb6e75cc4e63ddedcb6824e69800005c000100b750df60aad09089d6e748193dabdaaee342217a1320637c83dd8be3f8b0465f0d1ee8bad281c98c0e4975e98f3fa87038cc0ed46caeff3ff810fea8c85be58cb6a60021c145c3985c4fc375f25b0de48a0b243266dfb8ac45075b3100"/180], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x20010000) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getresuid(&(0x7f0000000240), &(0x7f00000002c0), 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf2ba825992b3006c}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x20004811) unshare(0x40000000) 03:38:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) [ 1043.312254][ T12] usb 6-1: device descriptor read/64, error 18 [ 1043.323423][ T9420] IPVS: ftp: loaded support on port[0] = 21 [ 1043.417033][ T9423] IPVS: ftp: loaded support on port[0] = 21 03:38:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 03:38:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) [ 1043.702320][ T12] usb 6-1: device descriptor read/64, error 18 03:38:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x46070000}, 0x0) [ 1043.972097][ T12] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1044.252194][ T12] usb 6-1: device descriptor read/64, error 18 [ 1044.642104][ T12] usb 6-1: device descriptor read/64, error 18 [ 1044.772400][ T12] usb usb6-port1: attempt power cycle [ 1045.492087][ T12] usb 6-1: new high-speed USB device number 25 using dummy_hcd 03:38:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 03:38:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x2}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:28 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:38:28 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x60]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) [ 1045.662038][ T12] usb 6-1: device descriptor read/8, error -61 [ 1045.731920][T26245] tipc: TX() has been purged, node left! [ 1045.842527][T26245] tipc: TX() has been purged, node left! [ 1045.871879][ T12] usb 6-1: device descriptor read/8, error -71 [ 1046.361838][ T12] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1046.541894][ T12] usb 6-1: device descriptor read/8, error -61 [ 1046.812073][ T12] usb 6-1: device descriptor read/8, error -61 [ 1046.931983][ T12] usb usb6-port1: unable to enumerate USB device 03:38:30 executing program 0: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) io_submit(0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x5, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) fchdir(0xffffffffffffffff) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x339, 0x0, 0x4, 0x1, 0x34, @multicast}, 0x10) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000140)={[{0x8000, 0x7, 0xd1, 0x0, 0x0, 0x11, 0x0, 0x40, 0x6, 0xff, 0x80, 0x7, 0x537}, {0x80, 0x7fff, 0x9, 0x3, 0x2, 0x9, 0x2, 0xff, 0x9, 0x7f, 0x0, 0x88, 0x100000000}, {0x200, 0x5, 0x8, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff, 0x9}], 0xff}) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25NOUID(r1, 0x89e2, &(0x7f0000000500)) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x18) connect$pptp(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) 03:38:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_delroute={0x24, 0x19, 0xcca3fd92f6ab885f, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x8140, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x0, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)=""/83, &(0x7f0000000140)=0x53) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x9, 0x7fffffff, 0x1, {0xb, @raw_data="7c6d4fc484f69c4336bcb0734ab941a2078148e6ea282cc1761e3270fca26778572ddb09f459efb10893d0b265b276fa7a8796b84f7ec17fecda96da6a42347df46385f95b425168a9fad8ff0a734d9849b3691e376bc21f7212e8854f4c0f09f0f4c42390de41e63345e85d3671177f46de58fa9e799f2a21fc366436106588e093928c2c27229992cee1b881d6d75b638248159cee62cdd0b9fda8be5942d9255b93037ce23dad0c286b426db0cd43668674df3dd85185e18a6d473ad0ad2b0db9db10a587fde7"}, 0x7eb1}) sendfile(r4, r3, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x5, r1, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000)=0x9) 03:38:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 03:38:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x3}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x73]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00e0000}, 0x0) [ 1048.463343][ T9559] IPVS: ftp: loaded support on port[0] = 21 03:38:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 03:38:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 03:38:31 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:38:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 03:38:31 executing program 3: socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x1) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r3, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000080)={0x20, 0x2, 0x4a2, 0x7}) 03:38:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) [ 1049.251905][ T3140] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1049.293287][ T9594] hub 9-0:1.0: USB hub found [ 1049.306999][ T9594] hub 9-0:1.0: 8 ports detected [ 1049.551563][ T3140] usb 6-1: device descriptor read/64, error 18 [ 1049.981314][ T3140] usb 6-1: device descriptor read/64, error 18 [ 1050.261389][ T3140] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1050.551344][ T3140] usb 6-1: device descriptor read/64, error 18 [ 1050.971393][ T3140] usb 6-1: device descriptor read/64, error 18 [ 1051.091395][ T3140] usb usb6-port1: attempt power cycle [ 1051.831050][ T3140] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1051.961088][ T3140] usb 6-1: device descriptor read/8, error -71 [ 1052.171252][ T3140] usb 6-1: device descriptor read/8, error -71 03:38:36 executing program 3: r0 = dup(0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket(0x8, 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x2, 0x9}, 'port0\x00', 0x0, 0x160800, 0x0, 0x1, 0x4, 0x0, 0x8, 0x0, 0x5, 0x90}) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) r5 = socket(0x11, 0x0, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, 0x0, &(0x7f0000000000)) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000000440)=0x101, 0x4) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x400, 0x0) write$dsp(r6, &(0x7f0000000180)="85da4a8ab893676869ffb9a0b8dde3c78269f9da17f26ffc5bd0f9f86921031b9d185a1e2a87a1655ef670b52a1ab88394a879d29da387e567145761c643b418d7b7b3284a0a42d7981fb7b6b36bf6958fc2c972ffd898e2bcc9a8c7280180f95163715172c6fc52648b176813d05d27d68405d5cc44a8b1a213c098631fdc1ed2d2d1c9429029cd8996847fe12def5951923c", 0x93) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4001000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040880) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-control\x00', 0x204400, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8982, &(0x7f0000000480)={0x6, 'veth0_vlan\x00', {0x8}, 0x5}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010000fff1200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012b108000100687341c872001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r4], 0x48}}, 0x0) rt_sigreturn() r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r8, 0xc01864ba, &(0x7f0000000280)={0x100000001, 0x3, 0x81, 0xdededede}) 03:38:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 03:38:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x4}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:36 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0xff]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:36 executing program 0: openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3cc, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=0x7fffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1d, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@exit, @call={0x85, 0x0, 0x0, 0x1f}]}, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x4, [], r1, 0x14, r2, 0x8, &(0x7f0000000100)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x0, 0xe42, 0x2}, 0x10, 0xffffffffffffffff, r3}, 0x78) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb70000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)=0x9700, 0x4000000000dc) 03:38:36 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:38:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) [ 1053.764159][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1053.788543][ T9677] IPVS: ftp: loaded support on port[0] = 21 03:38:36 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140), 0x0) r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x2400, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES64=r1, @ANYRES32=r0, @ANYRESHEX]) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000200)=0x2000) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r2, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f0000000240)={{0x1, @name="bdafb34a4125a9b8f02084b172cb270ecc7dba9ca5bba21fc1e6b0fe73ccd790"}, "618909bbdb5383d82e02485180c4831091472303dcd77c143ddeb2b53bd6674d", 0x3}) 03:38:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x2) 03:38:36 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100000000307c1c1e0e26a6a2e1e3b0215a435ee1000000010902240001000000000904000001030100000921000000012201000910a206e220340300e123d1115d81cb60df57b23ee8b7be94bc04dce7144f69c86569f067"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00d1b0"], 0x0}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r1, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000080)={0x80000001, 0xc92, 0x4, 0x0, 0x8000, 0x401}) syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0x3, 0x200000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r4, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x7}, 0x10) ioctl$BLKGETSIZE(r5, 0x1260, &(0x7f0000000100)) syz_open_dev$hidraw(0x0, 0x0, 0xcc183) [ 1054.020798][ T3219] usb 6-1: new high-speed USB device number 31 using dummy_hcd 03:38:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x3) 03:38:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4) 03:38:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xa) [ 1054.300788][ T3219] usb 6-1: device descriptor read/64, error 18 03:38:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xe) [ 1054.550803][ T4251] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1054.573814][ T9682] IPVS: ftp: loaded support on port[0] = 21 [ 1054.726111][ T3219] usb 6-1: device descriptor read/64, error 18 [ 1054.848263][T26245] tipc: TX() has been purged, node left! [ 1054.860696][ T4251] usb 4-1: device descriptor read/64, error 18 [ 1055.000655][ T3219] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1055.280619][ T3219] usb 6-1: device descriptor read/64, error 18 [ 1055.690839][ T3219] usb 6-1: device descriptor read/64, error 18 [ 1055.810741][ T3219] usb usb6-port1: attempt power cycle 03:38:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x5}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xf) [ 1055.940516][ T4251] usb 4-1: device descriptor read/64, error 18 [ 1056.210538][ T4251] usb 4-1: new high-speed USB device number 10 using dummy_hcd 03:38:38 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) [ 1056.500425][ T4251] usb 4-1: device descriptor read/64, error 18 [ 1056.520475][ T3219] usb 6-1: new high-speed USB device number 33 using dummy_hcd 03:38:39 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf0000000109022300010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:38:39 executing program 0: modify_ldt$write2(0x11, &(0x7f00000000c0)={0x527, 0x20000000, 0x2000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x2ea001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_GETDRIVER(r0, 0x4008550d, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) pwrite64(0xffffffffffffffff, &(0x7f0000000100)="e2727ff7ba8a83349023ec747cdec52daae50421ca04afad56601ef7d92a1c23748a879b0d3167eecb6187c793065ddfefd7c56a2aa8", 0x36, 0x5ec) 03:38:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x60) [ 1056.701703][ T3219] usb 6-1: device descriptor read/8, error -61 03:38:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xf0) [ 1056.903728][ T4251] usb 4-1: device descriptor read/64, error 18 [ 1056.910483][ T3219] usb 6-1: device descriptor read/8, error -71 [ 1057.024275][ T4251] usb usb4-port1: attempt power cycle 03:38:39 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='exfat\x00', 0x400, 0x0) 03:38:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x2}]}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f00000001c0)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:38:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x300) [ 1057.180668][ T2638] block nbd3: Attempted send on invalid socket [ 1057.186975][ T2638] print_req_error: 56 callbacks suppressed [ 1057.186989][ T2638] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1057.214951][ T9805] exFAT-fs (nbd3): unable to read boot sector [ 1057.222590][ T9805] exFAT-fs (nbd3): failed to recognize exfat type 03:38:39 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r1, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x40) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000480)={{0x6, 0x0, 0x0, 0x3, 'syz0\x00', 0x2}, 0x4, 0x20, 0x0, r4, 0x8, 0x101, 'syz1\x00', &(0x7f0000000100)=['eth1\x00', 'procsystem\x00', 'ethtool\x00', '&lovmnet1\x00', 'fdinfo/3\x00', 'fdinfo/3\x00', 'fdinfo/3\x00', 'fdinfo/3\x00'], 0x46, [], [0x9, 0x9, 0x0, 0x8]}) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000200), 0x2}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) flock(r0, 0x4f26bcf88be88975) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') msgrcv(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006cff76944c4ca0a357b0b2ccab4883f41b81ad"], 0xdc, 0x0, 0x2000) preadv(r5, &(0x7f00000017c0), 0x333, 0x0) 03:38:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x746) [ 1057.410403][ T3219] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1057.511056][ T3219] usb 6-1: Using ep0 maxpacket: 8 03:38:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x6}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xa00) [ 1057.651081][ T3219] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.689217][ T3219] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1057.756355][ T3219] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1057.781942][ T3219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.803247][ T3219] usb 6-1: config 0 descriptor?? 03:38:40 executing program 3: clock_getres(0xfffffefffffffff1, 0x0) r0 = socket(0x1a, 0x0, 0xfdfffffd) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000003c0)={r3, @in6={{0xa, 0x4e20, 0xff8, @private0={0xfc, 0x0, [], 0x1}, 0x5}}}, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r3, 0x1, 0x20}, 0xc) r4 = socket(0x11, 0x0, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1058.099426][ T3219] usb 6-1: USB disconnect, device number 34 03:38:40 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf0000000109022300010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:38:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xe00) 03:38:40 executing program 0: r0 = socket(0x4, 0xa, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket(0x11, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@phonet={0x23, 0x55, 0x49, 0x6}, 0x80) getsockname$packet(r3, 0x0, &(0x7f0000000000)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$SNDRV_PCM_IOCTL_LINK(0xffffffffffffffff, 0x40044160, &(0x7f0000000040)=0x8) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000140)) 03:38:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000840)={'filter\x00', 0x1002, 0x4, 0x3d0, 0xe8, 0x0, 0xe8, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond=[0x2], 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d8}}, {{@arp={@broadcast, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @multicast2, @loopback}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x420) mq_open(0x0, 0x0, 0x0, 0x0) mq_notify(r1, &(0x7f0000000380)) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, 0x0, &(0x7f0000000100)) r2 = socket$inet6(0xa, 0x4, 0x0) dup(r2) 03:38:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x2]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x7}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) [ 1058.717563][ T9867] cannot load conntrack support for proto=3 03:38:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xec0) [ 1058.779836][ T9879] cannot load conntrack support for proto=3 03:38:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000840)={'filter\x00', 0x1002, 0x4, 0x3d0, 0xe8, 0x0, 0xe8, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond=[0x2], 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d8}}, {{@arp={@broadcast, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @multicast2, @loopback}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x420) mq_open(0x0, 0x0, 0x0, 0x0) mq_notify(r1, &(0x7f0000000380)) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, 0x0, &(0x7f0000000100)) r2 = socket$inet6(0xa, 0x4, 0x0) dup(r2) 03:38:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000000000000000a90200000000000000000000fcff3800000000000000010100000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e1a59bfa8cdbae53c0dabf4"], 0x678) lseek(0xffffffffffffffff, 0x4, 0x0) 03:38:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xf00) [ 1058.958769][ T9892] cannot load conntrack support for proto=3 03:38:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x2d5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="4ad5ad658d8612c62400000034d08bf49fc972d3a4987b1197467b681667cf3ae4ccd04f878e2359fe347f2af534f3dad8bb1442f28afaf19500cf42add3921fa3c10e8109df5797beba1485db342484a8eee6d0cc681566da054a665f2817ede90b40707361f35ee5af85000000000000dc499551507f91a31b5600000067ab0ec030686e033db5e47889f33e6a307666b369c4b73ee2650b1d5ef37489da5b094312e68c0e110f4d9c5bf840ef4988a0f176f223a70be2453e8bb1e66f586029c1e942d49d3b2f396d37979e85fdfb22cc158f41f801a8f19fb6324e1cee0a02810ce34c1ca3c1045d6853b8d8819bd0fcbc47facd3dc5c66cd9220f5cf223186e0ffc71c0ae1e24d3d3aeb461c9e036b5fd25b16ed934997e8b1762447be61129223aa94819e23906105b5e028fcb222f89c249aa21a0d4fb682051a74da64adc9de65de325265498e8c9a417762f529063c2d301dbb3649d97ac1168b73a86cc1209015eeb683af2aeee869630c6fde042a398a4d7761666704ebac718bb04266c1ba418a760a7ebcd204e7fd845b08fa13706490aff0ec2a9afa34ce647ce941314d8b89698d08322556a6fc27220d96a8eeb17b6096008bedaf433f9fb5191a6a6165c854b40fa61a6227c4d31fb9c079633d5d3c2451141912169f5fec568919af4ede18965113e29a2c3a3248f1775f506bf60d55465b836e23b6e37dbc9747755c479399cc773d26227996e336aba1cce24de0cc2ca9ad96b1846c7701f4f22cb3829ee2e6540d7e531c344007fd8afc24e43a6f3d3431ffb5c70aa92d3a46c750b34c5c0ab24a96f5e476478b805f643c1e3ec8b0d3d8605df9ce0024d539cf58fcf83c800e63ef4a0f019b6c241504f3e8f3853fcb70d9601b841b055b977d6914ed9961c0a3496ebaabbee014b49f735d7874bff6f36380a00452986b48fdc941c0986fe1dac11d33163240816a82c62c300c92c37f972f444b3635d384067fd04ed1450b9bfb0f6bfeef6593dc9ee4739c66bc52cba5ffc5842299d0b51ac24cb6198904c5578ade6a5c625fb40154f96553051e88cf2c97ece78331892289acb63344737771e00adc4f5f4b57a63668552245f43e31a7981aaca2796248adc8b35b12495dfdd36ca86e5c05a59e0eedb9b9228dd2ba82ac1cb51ca317147696bd94941e80f064800e076c78c273375c4c4a39f734e580b357804fbf80d775417ca00000000000000000000000000000000b0d11b35e856682bbe39acce5a72341045346381217b7c2e7c45e18fb95a631c8e2b0659a9e66a9b2c52db3ffc3a6c4218dec02e91aabaece5a1f67685f741af504580d4905885eab45f46acfcebaecf5b8b327d9ab36dcbdee1665abcb766db94c25ea4b22c51e3a113f3bf8606a83cf9b097ed6f57b52801792f07e66f49c7cc8d45c82c202c532f47b65613868fc42a663880a7d3aba941694e8411d3d6fcda5cc5206dff8a48a4b76a64daf77b9911", @ANYRES16=r2, @ANYRESDEC], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x7c, r2, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7f}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x4c, 0x22, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x86}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xc6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x3f, 0x202000) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x453, 0x640, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78607218f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0xe, 0x0, 0x27) [ 1059.060196][ T4251] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1059.127287][ T9901] IPVS: ftp: loaded support on port[0] = 21 03:38:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4607) [ 1059.310156][ T4251] usb 6-1: Using ep0 maxpacket: 8 [ 1059.430653][ T4251] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.446736][ T4251] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1059.463341][ T4251] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1059.475067][ T4251] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.488149][ T4251] usb 6-1: config 0 descriptor?? [ 1059.803952][ T4251] usb 6-1: USB disconnect, device number 35 [ 1059.933839][ T9936] IPVS: ftp: loaded support on port[0] = 21 03:38:42 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf0000000109022300010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:38:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x6000) 03:38:42 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000002cc9bbb51e0000042cbd7000ff4b2c378fdbdf25"], 0x14}}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x1b) write$P9_RSTAT(r2, &(0x7f0000000100)={0x63, 0x7d, 0x2, {0x0, 0x5c, 0x9293, 0x4, {0x2, 0x0, 0x6}, 0x8040000, 0x80000000, 0x0, 0x5, 0x8, 'vboxnet1', 0x13, '/dev/snd/controlC#\x00', 0x1, '/', 0xd, '#procvboxnet1'}}, 0x63) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x20382) 03:38:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xc00e) [ 1060.390699][ T9960] IPVS: ftp: loaded support on port[0] = 21 03:38:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x3]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x8}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xf000) [ 1060.730078][ T3219] usb 6-1: new high-speed USB device number 36 using dummy_hcd 03:38:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x34000) [ 1060.989877][ T3219] usb 6-1: Using ep0 maxpacket: 8 [ 1061.110547][ T3219] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.135785][ T3219] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1061.180567][ T3219] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1061.209861][ T3219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.252733][ T3219] usb 6-1: config 0 descriptor?? [ 1061.257309][ T9960] IPVS: ftp: loaded support on port[0] = 21 [ 1061.500962][ T3140] usb 6-1: USB disconnect, device number 36 [ 1065.239343][T26245] tipc: TX() has been purged, node left! 03:38:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000000000000000a90200000000000000000000fcff3800000000000000010100000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e1a59bfa8cdbae53c0dabf4"], 0x678) lseek(0xffffffffffffffff, 0x4, 0x0) 03:38:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x400300) 03:38:47 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff76800008"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:38:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x4]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x48}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000300)="8da4363ac0ed12000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d4f4d40eb378238d468fd90a285b0e2c5e2c42e8a32ab2d754ea24d7f7c969901cf420b415a7c37ed4e5a406eb1aa", 0x76, 0x10000}], 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) write(r2, &(0x7f0000000080)="d1023d94069d6d99be0ec0c1c7eb4eda7ac73a6a138a7d2022989063b708b025db81ef15405b6bd16d08aeacc1e41c9c9f8e59d4cd4bcc73d5988d9df80ff88fdd7de66046b05b21995397fc45ea7dfdf7c62eccb1a0292ece91877da80ca986924d9303367bb04e8c1fd215493a666db68938c3f5e8e67754a101d606cdcfca10ed57e4e72bc317353add6f82112b8e8ec363c7a3124a66a41d147fea599df828ebe4ee274c04f85014636788b4cfc1cdcaeefbf4b833fb74f7b61654d658323932893dae8e5f8cbda11660c8621ce89f749466771646b6e71b9684e8608e", 0xdf) 03:38:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xf0ffff) [ 1065.549116][T10076] BTRFS: device fsid fff6f2a2-2997-48ae-b81e-1b00b10efd9a devid 0 transid 15292115711418191183 /dev/loop3 scanned by syz-executor.3 (10076) 03:38:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x1000000) [ 1065.615846][T10080] IPVS: ftp: loaded support on port[0] = 21 03:38:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x2000000) [ 1065.719249][ T3130] usb 6-1: new high-speed USB device number 37 using dummy_hcd 03:38:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x3000000) [ 1065.979349][ T3130] usb 6-1: Using ep0 maxpacket: 8 03:38:48 executing program 3: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0xff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000003c0)={r3, @in6={{0xa, 0x4e20, 0xff8, @private0={0xfc, 0x0, [], 0x1}, 0x5}}}, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r3, 0xaa}, 0x8) close(r0) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 03:38:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4000000) [ 1066.139906][ T3130] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1066.149204][ T3130] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.203620][ T3130] usb 6-1: config 0 has no interface number 0 [ 1066.246349][ T3130] usb 6-1: config 0 interface 18 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1066.308417][ T3130] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1066.319542][ T3130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.346945][ T3130] usb 6-1: config 0 descriptor?? [ 1066.623431][ T3140] usb 6-1: USB disconnect, device number 37 03:38:50 executing program 0: socket$kcm(0x10, 0x2, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) getpid() write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x3c, &(0x7f0000000040)=0x3bca, 0x4) recvmsg(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe43) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x8100, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108043380ecdb4cb92e08480e000d000000e8bd6efb250309000e000100240448ff050005001236", 0x2e}], 0xaf}, 0x20044840) 03:38:50 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x1c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="010000040010000000000600333c2094b98849dfd6534b"]) getpid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x248800) 03:38:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xa000000) 03:38:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0xff}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:50 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff76800008"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:38:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x5]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xe000000) 03:38:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xf000000) 03:38:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x46070000) [ 1068.508948][ T3130] usb 6-1: new high-speed USB device number 38 using dummy_hcd 03:38:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x60000000) [ 1068.684274][T10154] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. 03:38:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x9effffff) [ 1068.742218][T10159] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1068.759186][ T3130] usb 6-1: Using ep0 maxpacket: 8 03:38:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2022}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000000)='net/udp6\x00', &(0x7f0000000040)="111be681b274e4ac704fd8f0", 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000007b40)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/105, 0x69}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x20000003) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f0000000280)) connect(r4, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80) dup3(r4, r3, 0x0) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x10b, 0x0, 0xc7, "95b43da71ff02fd4a43758c338e8a8f1", "e1ce6e6c0cca9cd017599d11d02c4eb6db779f340de126e747283d36f0ec67a547270fa6ddaaa9fc1ca24f18fe721615d04e69f79d8521e8752c53f1c242cefcb5a351debb077bbfaaaad02db8e6eb390692f19d8dd4cc7cb399f152d92b1dddd2ddd7403145559d757a8981c8f4ea6075f44c3db965a7886bc0a13d63475f6617696dd9cb135a3b0f9b571b8b1b2bd8018e3356bca54dcc1ac812ffda0d88763fd4ed7be4c554aa73f46aac4d16039446830b7cc42ef7c4178417f17d30b45fb82e98063fa6628c408f57447d42bc4482a4d8d5d401b25679f3a3c6daeced19eefa0ff76cd0efde80792392134d9ee6eaf58332f556"}, 0x10b, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x10a, 0x1000000) 03:38:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xc00e0000) [ 1068.889612][ T3130] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1068.897736][ T3130] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.934215][ T3130] usb 6-1: config 0 has no interface number 0 [ 1068.946024][ T3130] usb 6-1: config 0 interface 18 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1068.980583][ T3130] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1068.990910][ T3130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.003523][ T3130] usb 6-1: config 0 descriptor?? 03:38:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2022}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000000)='net/udp6\x00', &(0x7f0000000040)="111be681b274e4ac704fd8f0", 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000007b40)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/105, 0x69}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x20000003) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f0000000280)) connect(r4, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80) dup3(r4, r3, 0x0) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x10b, 0x0, 0xc7, "95b43da71ff02fd4a43758c338e8a8f1", "e1ce6e6c0cca9cd017599d11d02c4eb6db779f340de126e747283d36f0ec67a547270fa6ddaaa9fc1ca24f18fe721615d04e69f79d8521e8752c53f1c242cefcb5a351debb077bbfaaaad02db8e6eb390692f19d8dd4cc7cb399f152d92b1dddd2ddd7403145559d757a8981c8f4ea6075f44c3db965a7886bc0a13d63475f6617696dd9cb135a3b0f9b571b8b1b2bd8018e3356bca54dcc1ac812ffda0d88763fd4ed7be4c554aa73f46aac4d16039446830b7cc42ef7c4178417f17d30b45fb82e98063fa6628c408f57447d42bc4482a4d8d5d401b25679f3a3c6daeced19eefa0ff76cd0efde80792392134d9ee6eaf58332f556"}, 0x10b, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x10a, 0x1000000) 03:38:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xf0ffffff) [ 1069.334237][ T3219] usb 6-1: USB disconnect, device number 38 03:38:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:52 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff76800008"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:38:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2022}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000000)='net/udp6\x00', &(0x7f0000000040)="111be681b274e4ac704fd8f0", 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000007b40)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/105, 0x69}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x20000003) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f0000000280)) connect(r4, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80) dup3(r4, r3, 0x0) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x10b, 0x0, 0xc7, "95b43da71ff02fd4a43758c338e8a8f1", "e1ce6e6c0cca9cd017599d11d02c4eb6db779f340de126e747283d36f0ec67a547270fa6ddaaa9fc1ca24f18fe721615d04e69f79d8521e8752c53f1c242cefcb5a351debb077bbfaaaad02db8e6eb390692f19d8dd4cc7cb399f152d92b1dddd2ddd7403145559d757a8981c8f4ea6075f44c3db965a7886bc0a13d63475f6617696dd9cb135a3b0f9b571b8b1b2bd8018e3356bca54dcc1ac812ffda0d88763fd4ed7be4c554aa73f46aac4d16039446830b7cc42ef7c4178417f17d30b45fb82e98063fa6628c408f57447d42bc4482a4d8d5d401b25679f3a3c6daeced19eefa0ff76cd0efde80792392134d9ee6eaf58332f556"}, 0x10b, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x10a, 0x1000000) 03:38:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xfffff000) 03:38:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x6]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000d0700000000ff030000005c", @ANYRES32=r7, @ANYBLOB="00000000e6000500000012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c9ebc206165bd128e0af3bd000000000000e189d94be4dd63288fff", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYRES32=r1], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg0\x00', r7}) dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 03:38:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xffffff7f) 03:38:52 executing program 3: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = accept$alg(r0, 0x0, 0x0) read$alg(r1, &(0x7f0000000240)=""/186, 0xba) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000300)=0x2201080) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r2, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x3, 0x0, 0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) r7 = socket(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(r5, 0xd01c4813, &(0x7f0000000880)={{0x1, 0x100, 0x6, 0x4, 0x8, 0x20}, 0x118, [0x80000001, 0x2, 0x3, 0x2, 0xfffffffa, 0x6, 0x7fff, 0x20, 0x6, 0xfffffc00, 0x1, 0x4f0, 0xfffffc01, 0x10000, 0xe31, 0x4, 0x2, 0x8, 0x15, 0x3f, 0x2, 0x8000, 0x123b, 0x1, 0x5, 0xffffffff, 0x1f, 0x4, 0x5, 0xffffffff, 0x3, 0x5, 0x6, 0x112, 0x400, 0x8, 0x8382, 0x4, 0x3ff, 0x3, 0x7fff, 0x1, 0x4, 0x6, 0x90000000, 0xfffeffff, 0x100, 0x0, 0x4, 0x1ff, 0x6, 0x9, 0x1, 0x3, 0x5, 0x9, 0x20, 0x8, 0x1, 0x401, 0x2, 0x8001, 0x5, 0x80, 0x40, 0x1, 0x8, 0x100, 0xfff, 0x2b9d8277, 0x81, 0x2, 0x40, 0x134, 0x4000, 0xb4, 0xfffa50a, 0x8, 0x13, 0x0, 0x10001, 0x3, 0x9, 0x101, 0x34d3, 0x1, 0x80, 0xffffff27, 0x2, 0xfff, 0x7, 0x2, 0x3063, 0x0, 0x5, 0xc3d, 0x516, 0x7, 0xac3, 0xeb, 0x10000, 0xce, 0x7fffffff, 0x5, 0x0, 0xfafd, 0x7, 0x3, 0x6, 0x4, 0x4, 0x3, 0x20fc28, 0x0, 0xfffffffd, 0x20, 0x6, 0x41c, 0x6, 0x8, 0x1, 0x7fffffff, 0x71, 0x543, 0x8, 0x100, 0x5, 0x8, 0x3f, 0x4, 0xffffffff, 0x80, 0x3, 0x0, 0x40, 0x400, 0x2, 0xcf, 0x5, 0x8000, 0x6, 0x0, 0x9, 0x7fffffff, 0x1000, 0x780c7988, 0x2, 0x8000, 0x8, 0x6, 0x49, 0xf4cb, 0x88d5, 0x1, 0xfffffff3, 0x381, 0x1ff, 0x1000, 0x1, 0xffff8000, 0x7, 0x4, 0xe8, 0x7, 0x1c7, 0xfa, 0x100, 0x3c, 0x3, 0x9, 0x80000000, 0x8, 0xce, 0x46, 0x9, 0x80000000, 0x5, 0x3, 0x0, 0x4, 0x0, 0x6, 0x6, 0x6, 0xff, 0x60da, 0x1, 0xfffffffa, 0x80000000, 0x1f, 0x1, 0x3, 0x5, 0x8, 0x0, 0x1f2, 0xfff, 0x3, 0x100, 0x7ff, 0x8, 0x844, 0x4, 0xffff, 0x8001, 0x9, 0x4, 0x1, 0xd73, 0x6, 0x7, 0x6, 0x81, 0x2, 0x40, 0x6, 0x200, 0x4, 0x7, 0x94a1, 0x306, 0xbc, 0x2, 0x4, 0x9, 0xffff, 0x100, 0x200, 0x3, 0x5, 0x2, 0x200, 0x401, 0xffff, 0x8001, 0x8001, 0x4, 0x0, 0x34b, 0x8001, 0x8, 0x5, 0x0, 0xdcc, 0x482, 0x4, 0x9, 0x7, 0x7, 0x0, 0x10001, 0x2, 0x1940, 0x8, 0x9, 0x80000000, 0x8, 0x9, 0x7fff, 0x2, 0x4, 0x7, 0x4, 0x7, 0x1ff, 0x0, 0xff, 0x8d1c, 0x9, 0x1, 0x4, 0x9, 0x7fff, 0x20, 0x0, 0x3ff, 0x5, 0x9, 0x5, 0x3, 0x46b6, 0xfffffff7, 0x1f, 0x10001, 0x7, 0x269, 0x2, 0x800, 0xd33, 0x7ff, 0x80000000, 0x800000, 0x800, 0x3f, 0xe9, 0x7, 0x1, 0x0, 0x4, 0x6, 0x5, 0x1000, 0x80, 0x9, 0x10001, 0x3, 0x100, 0x2, 0x8, 0x1000, 0x1, 0xa722, 0x5, 0x8, 0x8000, 0x3fc, 0x3e, 0x80000000, 0xffff78c3, 0x8001, 0xf0, 0x45, 0x401, 0x5, 0x101, 0x1, 0x49a, 0x9, 0x8, 0x2866, 0x1000, 0x3ff, 0x9, 0x9, 0x6, 0x3, 0x7ff, 0x200, 0x7a5d, 0x8, 0x3ff, 0x4, 0x9, 0x62d, 0x6, 0x8000, 0x8, 0x3, 0x8, 0xfffffff8, 0x9, 0x7f, 0xfffffff9, 0x8000, 0x7, 0xfff, 0x5, 0x3f, 0x38d3, 0x1c000000, 0xffffffff, 0x4, 0x0, 0x9, 0x2, 0x80000001, 0x2, 0x9, 0x10001, 0x81, 0x0, 0x1000, 0x3, 0x6, 0x1, 0x3f, 0x9, 0xff, 0x3, 0x2, 0x100, 0x4, 0x3f, 0x5, 0x6, 0x41, 0x401, 0x400, 0x0, 0x7ff, 0xaf30, 0x5, 0xa, 0x3f, 0x6, 0x800, 0x1, 0x80000000, 0x3, 0x3, 0x3, 0x1a, 0xffffffff, 0x1, 0x8, 0x35d9ebe, 0x6c0, 0x20, 0xfffffa0c, 0x6, 0x2, 0xff, 0x1, 0x3, 0x5, 0x3, 0x6, 0x3, 0x7, 0x0, 0x1fa, 0x3, 0xffff, 0x80000000, 0xfffffffb, 0x5, 0x4, 0x2, 0xe3b, 0x70e2, 0xa26, 0x7, 0x2, 0x2, 0x2, 0xffffffe0, 0x8001, 0xffffffff, 0x8, 0x40, 0x7ff, 0x20, 0xffffffff, 0x0, 0xa4, 0x5, 0x0, 0x7, 0xf27, 0x1e, 0x5f21, 0x1, 0x1, 0x80000000, 0x61, 0x8, 0x5, 0x7, 0x0, 0x8, 0x3, 0xffffffff, 0x7, 0xfffffff7, 0x10000, 0x3, 0xb89, 0x5, 0x1, 0xffffffc2, 0x8, 0x9, 0x4, 0x6, 0x4, 0x20, 0x401, 0x7f, 0x2, 0x4, 0x3ff, 0x4, 0x6, 0x8, 0xffffff80, 0x101, 0x0, 0x9, 0xfffffffb, 0x9, 0x6, 0x9, 0x50ae, 0x1, 0x1, 0x1, 0x5, 0x1f, 0x1, 0x9, 0x6, 0x9, 0x1200000, 0x49a8, 0x1, 0x7, 0x1ff, 0x5, 0x6, 0x61, 0x5, 0x400, 0x0, 0x5, 0x1, 0x8, 0x84b, 0x4, 0x7ff, 0x0, 0x8, 0x1f, 0x8eb, 0x6, 0x5, 0x40, 0x4, 0x2, 0x9, 0x5, 0x9, 0x3, 0x58, 0x87, 0x4dcde1e6, 0x7f, 0xffff8f48, 0x8, 0x9, 0xf8, 0x1, 0x2, 0x4, 0xe65, 0x3, 0x7fff, 0x4, 0xa4d, 0x7, 0x200, 0x8, 0x9, 0x66d, 0x5b7, 0xffffd575, 0xe0, 0x4, 0x1, 0x4, 0x1, 0x0, 0x8001, 0xa61, 0xfffffffe, 0x6e, 0x1, 0x3, 0x2, 0x5, 0x80, 0x1, 0x7, 0x0, 0x91, 0x5, 0x3ff, 0x400, 0x1000, 0x10000, 0x2, 0x401, 0x2, 0x400, 0x4, 0x80, 0x8, 0x80000000, 0x100, 0x97a, 0x6, 0x4bc8, 0x4, 0x2, 0x2, 0xfffffff8, 0x7ff, 0xc0000000, 0x6, 0x5, 0x2000000, 0x92, 0x81, 0x4, 0x3, 0xd6, 0x2, 0x1, 0x9, 0x1, 0x6, 0x9, 0x509c52d1, 0x5, 0x4, 0x40, 0x6, 0x85b854d6, 0x9, 0x6, 0x800, 0x4, 0xffffffff, 0x2, 0x4a74, 0xffffed84, 0xf9, 0x0, 0x6, 0x5, 0x40, 0x8, 0x0, 0xff, 0xffff4ae5, 0x8000, 0x2, 0x7fff, 0x400, 0x401, 0xc0, 0x9, 0x10000, 0x6, 0xbc77, 0xe9, 0x1, 0xd589, 0x8, 0x3, 0x3, 0xed, 0xfffffffb, 0x6, 0x800, 0x9, 0x800, 0x0, 0x20, 0x2, 0x6, 0x6, 0x40, 0x3, 0x0, 0x2, 0x3ff, 0x5, 0x2, 0xfffffffe, 0x0, 0x200, 0x1, 0x5, 0x1ff, 0x1, 0x200, 0x9, 0x3, 0x5, 0x3, 0x7f, 0x6, 0x6, 0x400, 0x81, 0x4c2, 0x8b8, 0x1000, 0x3, 0x4, 0x8f, 0x11d00, 0x4, 0x8000, 0x3, 0x3, 0x7, 0x1, 0xfffffff7, 0x4, 0x1e4, 0xb1e, 0x7, 0x1, 0x6, 0x10000, 0x9, 0x8, 0x2bd4, 0x1, 0x8001, 0x7f, 0x1, 0x204c, 0x7, 0x1, 0x3, 0x8, 0x0, 0x200, 0x3f, 0x1, 0x46c, 0x9, 0x3, 0x800, 0x7, 0x9, 0x7, 0x201, 0xec, 0x5, 0x4, 0x400, 0x6, 0x3, 0x1, 0x2, 0x6, 0xfffffffb, 0x8, 0x6, 0x10001, 0x24e6, 0x433, 0x7fff, 0x8, 0x334b, 0x0, 0x79e3, 0x6, 0x4, 0x5, 0x1f, 0x9, 0x4259, 0x4, 0x0, 0x0, 0xfffefffe, 0x7, 0x6, 0x4, 0x80000000, 0x2, 0x6, 0xfffff800, 0x9, 0xf0, 0x81, 0x4, 0x0, 0x1, 0x4, 0x0, 0x23b, 0x3ff, 0x860, 0x1, 0x9, 0x7, 0x10000000, 0x1000, 0x7, 0x400, 0x400, 0x7, 0xcb4c, 0x2, 0x0, 0x5, 0x8cf0, 0x9, 0x7, 0x9, 0x97a, 0x7, 0x0, 0x0, 0x3, 0x1, 0xf79, 0x8, 0x1e, 0x5, 0x81, 0x200, 0x1, 0x80000001, 0x10001, 0x1, 0x4, 0x5, 0x68, 0x9, 0x3, 0x7, 0x3, 0x3, 0x3ff, 0x1ff, 0x3, 0x7, 0x401, 0x1, 0xfb, 0x6, 0x11b0fdb4, 0x5, 0x1f, 0x3, 0x8, 0x18a4, 0x7fffffff, 0x7f, 0x7, 0x9, 0x7fff, 0x7fff, 0x7fe, 0x6, 0x3, 0x4, 0x8001, 0x9, 0x8, 0x5, 0xffff, 0x2, 0x7fffffff, 0x1f, 0xffffffff, 0x40, 0x5, 0x1, 0x9, 0x0, 0x7, 0x8, 0x7, 0x9, 0x80000001, 0x10000, 0x1, 0x9, 0x0, 0x6, 0x1ff, 0xfff, 0x1, 0x5, 0x1, 0x6, 0x9, 0x1, 0x800, 0x401, 0xc7, 0x3, 0xffffff80, 0x6, 0x65, 0xfff, 0x9, 0x8001, 0x1, 0x1, 0xfff, 0x401, 0x1f, 0x401, 0x37, 0x1, 0x8, 0x4, 0x10001, 0x0, 0xec, 0x5, 0x6, 0x80, 0x3, 0x5bac, 0x8, 0x80, 0x3, 0xffff, 0x7, 0x447, 0x3f, 0x4, 0xfffff9d8, 0x200, 0x1, 0x40, 0x40, 0x800, 0x20, 0xd7, 0x4, 0x0, 0x8, 0x6, 0x1f, 0x7, 0x1, 0x8, 0x2, 0x9, 0x1, 0x0, 0x80, 0x8, 0x6, 0xe83, 0x6, 0x29, 0xfffffc00, 0x5, 0x8000, 0x7f, 0x9, 0x9, 0x20, 0x4, 0x2, 0x80, 0x80000001, 0x7, 0x8, 0xc7, 0x5, 0x0, 0x1, 0x9, 0x7, 0x100, 0x1ff, 0x1, 0x1, 0x1048, 0x40, 0x400, 0x6, 0x5, 0x2a, 0x3, 0x70, 0x4, 0xfffffbff, 0x3ff, 0x1db4, 0x6b, 0xb6, 0xff, 0x1c, 0x101, 0x1e6, 0x1, 0x5, 0xa, 0x1000, 0x8, 0x1, 0x5, 0x2, 0xea16, 0x7, 0xe660, 0x5, 0x4, 0x4, 0x6, 0x10, 0x4, 0x8, 0x5, 0x81, 0x8, 0xcb45, 0x9, 0x85, 0x9, 0x800, 0x0, 0xfff, 0x4, 0x81, 0x800, 0x100, 0x1000, 0x1, 0x1, 0x9, 0x20, 0x8000, 0x9, 0x6, 0x4, 0x80000000, 0x6, 0x1f, 0x9, 0x36]}) setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000080)=0x9b4f, 0x4) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x9) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 03:38:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xffffff9e) [ 1070.288680][ T12] usb 6-1: new high-speed USB device number 39 using dummy_hcd 03:38:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xfffffff0) 03:38:52 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000000)="0200ee7e08ff01000000ff070000004c000000a440f03562e34981e4042c0000000000010400000000008000000000ffffffeeccf9cd082219ff625f6d846150", 0x40, 0x1c0}]) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80800, 0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x2000000) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0), 0x0, 0x7fffffff}], 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="55617a7974696d652c6c0011000066733d30303030303030303030303030303030303030490c686173832c646566636f6e836578743d757569643d66e40a117b0cda63b14330313366660a66352d393152622d39303865633400652c000000000000000000007dfabf479e280d6e6678ed15"]) [ 1070.538700][ T12] usb 6-1: Using ep0 maxpacket: 8 03:38:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x1000000000000) [ 1070.660887][ T12] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1070.676856][ T12] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.739171][T10267] loop0: [ICS] [ 1070.755704][ T12] usb 6-1: config 0 has no interface number 0 [ 1070.790288][ T12] usb 6-1: config 0 interface 18 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1070.869163][T10267] loop0: [ICS] [ 1070.902078][ T12] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1070.956387][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.988136][ T12] usb 6-1: config 0 descriptor?? [ 1071.327703][ T8040] usb 6-1: USB disconnect, device number 39 03:38:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x2}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:54 executing program 3: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = accept$alg(r0, 0x0, 0x0) read$alg(r1, &(0x7f0000000240)=""/186, 0xba) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000300)=0x2201080) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r2, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x3, 0x0, 0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) r7 = socket(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(r5, 0xd01c4813, &(0x7f0000000880)={{0x1, 0x100, 0x6, 0x4, 0x8, 0x20}, 0x118, [0x80000001, 0x2, 0x3, 0x2, 0xfffffffa, 0x6, 0x7fff, 0x20, 0x6, 0xfffffc00, 0x1, 0x4f0, 0xfffffc01, 0x10000, 0xe31, 0x4, 0x2, 0x8, 0x15, 0x3f, 0x2, 0x8000, 0x123b, 0x1, 0x5, 0xffffffff, 0x1f, 0x4, 0x5, 0xffffffff, 0x3, 0x5, 0x6, 0x112, 0x400, 0x8, 0x8382, 0x4, 0x3ff, 0x3, 0x7fff, 0x1, 0x4, 0x6, 0x90000000, 0xfffeffff, 0x100, 0x0, 0x4, 0x1ff, 0x6, 0x9, 0x1, 0x3, 0x5, 0x9, 0x20, 0x8, 0x1, 0x401, 0x2, 0x8001, 0x5, 0x80, 0x40, 0x1, 0x8, 0x100, 0xfff, 0x2b9d8277, 0x81, 0x2, 0x40, 0x134, 0x4000, 0xb4, 0xfffa50a, 0x8, 0x13, 0x0, 0x10001, 0x3, 0x9, 0x101, 0x34d3, 0x1, 0x80, 0xffffff27, 0x2, 0xfff, 0x7, 0x2, 0x3063, 0x0, 0x5, 0xc3d, 0x516, 0x7, 0xac3, 0xeb, 0x10000, 0xce, 0x7fffffff, 0x5, 0x0, 0xfafd, 0x7, 0x3, 0x6, 0x4, 0x4, 0x3, 0x20fc28, 0x0, 0xfffffffd, 0x20, 0x6, 0x41c, 0x6, 0x8, 0x1, 0x7fffffff, 0x71, 0x543, 0x8, 0x100, 0x5, 0x8, 0x3f, 0x4, 0xffffffff, 0x80, 0x3, 0x0, 0x40, 0x400, 0x2, 0xcf, 0x5, 0x8000, 0x6, 0x0, 0x9, 0x7fffffff, 0x1000, 0x780c7988, 0x2, 0x8000, 0x8, 0x6, 0x49, 0xf4cb, 0x88d5, 0x1, 0xfffffff3, 0x381, 0x1ff, 0x1000, 0x1, 0xffff8000, 0x7, 0x4, 0xe8, 0x7, 0x1c7, 0xfa, 0x100, 0x3c, 0x3, 0x9, 0x80000000, 0x8, 0xce, 0x46, 0x9, 0x80000000, 0x5, 0x3, 0x0, 0x4, 0x0, 0x6, 0x6, 0x6, 0xff, 0x60da, 0x1, 0xfffffffa, 0x80000000, 0x1f, 0x1, 0x3, 0x5, 0x8, 0x0, 0x1f2, 0xfff, 0x3, 0x100, 0x7ff, 0x8, 0x844, 0x4, 0xffff, 0x8001, 0x9, 0x4, 0x1, 0xd73, 0x6, 0x7, 0x6, 0x81, 0x2, 0x40, 0x6, 0x200, 0x4, 0x7, 0x94a1, 0x306, 0xbc, 0x2, 0x4, 0x9, 0xffff, 0x100, 0x200, 0x3, 0x5, 0x2, 0x200, 0x401, 0xffff, 0x8001, 0x8001, 0x4, 0x0, 0x34b, 0x8001, 0x8, 0x5, 0x0, 0xdcc, 0x482, 0x4, 0x9, 0x7, 0x7, 0x0, 0x10001, 0x2, 0x1940, 0x8, 0x9, 0x80000000, 0x8, 0x9, 0x7fff, 0x2, 0x4, 0x7, 0x4, 0x7, 0x1ff, 0x0, 0xff, 0x8d1c, 0x9, 0x1, 0x4, 0x9, 0x7fff, 0x20, 0x0, 0x3ff, 0x5, 0x9, 0x5, 0x3, 0x46b6, 0xfffffff7, 0x1f, 0x10001, 0x7, 0x269, 0x2, 0x800, 0xd33, 0x7ff, 0x80000000, 0x800000, 0x800, 0x3f, 0xe9, 0x7, 0x1, 0x0, 0x4, 0x6, 0x5, 0x1000, 0x80, 0x9, 0x10001, 0x3, 0x100, 0x2, 0x8, 0x1000, 0x1, 0xa722, 0x5, 0x8, 0x8000, 0x3fc, 0x3e, 0x80000000, 0xffff78c3, 0x8001, 0xf0, 0x45, 0x401, 0x5, 0x101, 0x1, 0x49a, 0x9, 0x8, 0x2866, 0x1000, 0x3ff, 0x9, 0x9, 0x6, 0x3, 0x7ff, 0x200, 0x7a5d, 0x8, 0x3ff, 0x4, 0x9, 0x62d, 0x6, 0x8000, 0x8, 0x3, 0x8, 0xfffffff8, 0x9, 0x7f, 0xfffffff9, 0x8000, 0x7, 0xfff, 0x5, 0x3f, 0x38d3, 0x1c000000, 0xffffffff, 0x4, 0x0, 0x9, 0x2, 0x80000001, 0x2, 0x9, 0x10001, 0x81, 0x0, 0x1000, 0x3, 0x6, 0x1, 0x3f, 0x9, 0xff, 0x3, 0x2, 0x100, 0x4, 0x3f, 0x5, 0x6, 0x41, 0x401, 0x400, 0x0, 0x7ff, 0xaf30, 0x5, 0xa, 0x3f, 0x6, 0x800, 0x1, 0x80000000, 0x3, 0x3, 0x3, 0x1a, 0xffffffff, 0x1, 0x8, 0x35d9ebe, 0x6c0, 0x20, 0xfffffa0c, 0x6, 0x2, 0xff, 0x1, 0x3, 0x5, 0x3, 0x6, 0x3, 0x7, 0x0, 0x1fa, 0x3, 0xffff, 0x80000000, 0xfffffffb, 0x5, 0x4, 0x2, 0xe3b, 0x70e2, 0xa26, 0x7, 0x2, 0x2, 0x2, 0xffffffe0, 0x8001, 0xffffffff, 0x8, 0x40, 0x7ff, 0x20, 0xffffffff, 0x0, 0xa4, 0x5, 0x0, 0x7, 0xf27, 0x1e, 0x5f21, 0x1, 0x1, 0x80000000, 0x61, 0x8, 0x5, 0x7, 0x0, 0x8, 0x3, 0xffffffff, 0x7, 0xfffffff7, 0x10000, 0x3, 0xb89, 0x5, 0x1, 0xffffffc2, 0x8, 0x9, 0x4, 0x6, 0x4, 0x20, 0x401, 0x7f, 0x2, 0x4, 0x3ff, 0x4, 0x6, 0x8, 0xffffff80, 0x101, 0x0, 0x9, 0xfffffffb, 0x9, 0x6, 0x9, 0x50ae, 0x1, 0x1, 0x1, 0x5, 0x1f, 0x1, 0x9, 0x6, 0x9, 0x1200000, 0x49a8, 0x1, 0x7, 0x1ff, 0x5, 0x6, 0x61, 0x5, 0x400, 0x0, 0x5, 0x1, 0x8, 0x84b, 0x4, 0x7ff, 0x0, 0x8, 0x1f, 0x8eb, 0x6, 0x5, 0x40, 0x4, 0x2, 0x9, 0x5, 0x9, 0x3, 0x58, 0x87, 0x4dcde1e6, 0x7f, 0xffff8f48, 0x8, 0x9, 0xf8, 0x1, 0x2, 0x4, 0xe65, 0x3, 0x7fff, 0x4, 0xa4d, 0x7, 0x200, 0x8, 0x9, 0x66d, 0x5b7, 0xffffd575, 0xe0, 0x4, 0x1, 0x4, 0x1, 0x0, 0x8001, 0xa61, 0xfffffffe, 0x6e, 0x1, 0x3, 0x2, 0x5, 0x80, 0x1, 0x7, 0x0, 0x91, 0x5, 0x3ff, 0x400, 0x1000, 0x10000, 0x2, 0x401, 0x2, 0x400, 0x4, 0x80, 0x8, 0x80000000, 0x100, 0x97a, 0x6, 0x4bc8, 0x4, 0x2, 0x2, 0xfffffff8, 0x7ff, 0xc0000000, 0x6, 0x5, 0x2000000, 0x92, 0x81, 0x4, 0x3, 0xd6, 0x2, 0x1, 0x9, 0x1, 0x6, 0x9, 0x509c52d1, 0x5, 0x4, 0x40, 0x6, 0x85b854d6, 0x9, 0x6, 0x800, 0x4, 0xffffffff, 0x2, 0x4a74, 0xffffed84, 0xf9, 0x0, 0x6, 0x5, 0x40, 0x8, 0x0, 0xff, 0xffff4ae5, 0x8000, 0x2, 0x7fff, 0x400, 0x401, 0xc0, 0x9, 0x10000, 0x6, 0xbc77, 0xe9, 0x1, 0xd589, 0x8, 0x3, 0x3, 0xed, 0xfffffffb, 0x6, 0x800, 0x9, 0x800, 0x0, 0x20, 0x2, 0x6, 0x6, 0x40, 0x3, 0x0, 0x2, 0x3ff, 0x5, 0x2, 0xfffffffe, 0x0, 0x200, 0x1, 0x5, 0x1ff, 0x1, 0x200, 0x9, 0x3, 0x5, 0x3, 0x7f, 0x6, 0x6, 0x400, 0x81, 0x4c2, 0x8b8, 0x1000, 0x3, 0x4, 0x8f, 0x11d00, 0x4, 0x8000, 0x3, 0x3, 0x7, 0x1, 0xfffffff7, 0x4, 0x1e4, 0xb1e, 0x7, 0x1, 0x6, 0x10000, 0x9, 0x8, 0x2bd4, 0x1, 0x8001, 0x7f, 0x1, 0x204c, 0x7, 0x1, 0x3, 0x8, 0x0, 0x200, 0x3f, 0x1, 0x46c, 0x9, 0x3, 0x800, 0x7, 0x9, 0x7, 0x201, 0xec, 0x5, 0x4, 0x400, 0x6, 0x3, 0x1, 0x2, 0x6, 0xfffffffb, 0x8, 0x6, 0x10001, 0x24e6, 0x433, 0x7fff, 0x8, 0x334b, 0x0, 0x79e3, 0x6, 0x4, 0x5, 0x1f, 0x9, 0x4259, 0x4, 0x0, 0x0, 0xfffefffe, 0x7, 0x6, 0x4, 0x80000000, 0x2, 0x6, 0xfffff800, 0x9, 0xf0, 0x81, 0x4, 0x0, 0x1, 0x4, 0x0, 0x23b, 0x3ff, 0x860, 0x1, 0x9, 0x7, 0x10000000, 0x1000, 0x7, 0x400, 0x400, 0x7, 0xcb4c, 0x2, 0x0, 0x5, 0x8cf0, 0x9, 0x7, 0x9, 0x97a, 0x7, 0x0, 0x0, 0x3, 0x1, 0xf79, 0x8, 0x1e, 0x5, 0x81, 0x200, 0x1, 0x80000001, 0x10001, 0x1, 0x4, 0x5, 0x68, 0x9, 0x3, 0x7, 0x3, 0x3, 0x3ff, 0x1ff, 0x3, 0x7, 0x401, 0x1, 0xfb, 0x6, 0x11b0fdb4, 0x5, 0x1f, 0x3, 0x8, 0x18a4, 0x7fffffff, 0x7f, 0x7, 0x9, 0x7fff, 0x7fff, 0x7fe, 0x6, 0x3, 0x4, 0x8001, 0x9, 0x8, 0x5, 0xffff, 0x2, 0x7fffffff, 0x1f, 0xffffffff, 0x40, 0x5, 0x1, 0x9, 0x0, 0x7, 0x8, 0x7, 0x9, 0x80000001, 0x10000, 0x1, 0x9, 0x0, 0x6, 0x1ff, 0xfff, 0x1, 0x5, 0x1, 0x6, 0x9, 0x1, 0x800, 0x401, 0xc7, 0x3, 0xffffff80, 0x6, 0x65, 0xfff, 0x9, 0x8001, 0x1, 0x1, 0xfff, 0x401, 0x1f, 0x401, 0x37, 0x1, 0x8, 0x4, 0x10001, 0x0, 0xec, 0x5, 0x6, 0x80, 0x3, 0x5bac, 0x8, 0x80, 0x3, 0xffff, 0x7, 0x447, 0x3f, 0x4, 0xfffff9d8, 0x200, 0x1, 0x40, 0x40, 0x800, 0x20, 0xd7, 0x4, 0x0, 0x8, 0x6, 0x1f, 0x7, 0x1, 0x8, 0x2, 0x9, 0x1, 0x0, 0x80, 0x8, 0x6, 0xe83, 0x6, 0x29, 0xfffffc00, 0x5, 0x8000, 0x7f, 0x9, 0x9, 0x20, 0x4, 0x2, 0x80, 0x80000001, 0x7, 0x8, 0xc7, 0x5, 0x0, 0x1, 0x9, 0x7, 0x100, 0x1ff, 0x1, 0x1, 0x1048, 0x40, 0x400, 0x6, 0x5, 0x2a, 0x3, 0x70, 0x4, 0xfffffbff, 0x3ff, 0x1db4, 0x6b, 0xb6, 0xff, 0x1c, 0x101, 0x1e6, 0x1, 0x5, 0xa, 0x1000, 0x8, 0x1, 0x5, 0x2, 0xea16, 0x7, 0xe660, 0x5, 0x4, 0x4, 0x6, 0x10, 0x4, 0x8, 0x5, 0x81, 0x8, 0xcb45, 0x9, 0x85, 0x9, 0x800, 0x0, 0xfff, 0x4, 0x81, 0x800, 0x100, 0x1000, 0x1, 0x1, 0x9, 0x20, 0x8000, 0x9, 0x6, 0x4, 0x80000000, 0x6, 0x1f, 0x9, 0x36]}) setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000080)=0x9b4f, 0x4) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x9) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 03:38:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40030000000000) 03:38:54 executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = accept$alg(r0, 0x0, 0x0) read$alg(r1, &(0x7f0000000240)=""/186, 0xba) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000300)=0x2201080) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r2, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x3, 0x0, 0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) r7 = socket(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(r5, 0xd01c4813, &(0x7f0000000880)={{0x1, 0x100, 0x6, 0x4, 0x8, 0x20}, 0x118, [0x80000001, 0x2, 0x3, 0x2, 0xfffffffa, 0x6, 0x7fff, 0x20, 0x6, 0xfffffc00, 0x1, 0x4f0, 0xfffffc01, 0x10000, 0xe31, 0x4, 0x2, 0x8, 0x15, 0x3f, 0x2, 0x8000, 0x123b, 0x1, 0x5, 0xffffffff, 0x1f, 0x4, 0x5, 0xffffffff, 0x3, 0x5, 0x6, 0x112, 0x400, 0x8, 0x8382, 0x4, 0x3ff, 0x3, 0x7fff, 0x1, 0x4, 0x6, 0x90000000, 0xfffeffff, 0x100, 0x0, 0x4, 0x1ff, 0x6, 0x9, 0x1, 0x3, 0x5, 0x9, 0x20, 0x8, 0x1, 0x401, 0x2, 0x8001, 0x5, 0x80, 0x40, 0x1, 0x8, 0x100, 0xfff, 0x2b9d8277, 0x81, 0x2, 0x40, 0x134, 0x4000, 0xb4, 0xfffa50a, 0x8, 0x13, 0x0, 0x10001, 0x3, 0x9, 0x101, 0x34d3, 0x1, 0x80, 0xffffff27, 0x2, 0xfff, 0x7, 0x2, 0x3063, 0x0, 0x5, 0xc3d, 0x516, 0x7, 0xac3, 0xeb, 0x10000, 0xce, 0x7fffffff, 0x5, 0x0, 0xfafd, 0x7, 0x3, 0x6, 0x4, 0x4, 0x3, 0x20fc28, 0x0, 0xfffffffd, 0x20, 0x6, 0x41c, 0x6, 0x8, 0x1, 0x7fffffff, 0x71, 0x543, 0x8, 0x100, 0x5, 0x8, 0x3f, 0x4, 0xffffffff, 0x80, 0x3, 0x0, 0x40, 0x400, 0x2, 0xcf, 0x5, 0x8000, 0x6, 0x0, 0x9, 0x7fffffff, 0x1000, 0x780c7988, 0x2, 0x8000, 0x8, 0x6, 0x49, 0xf4cb, 0x88d5, 0x1, 0xfffffff3, 0x381, 0x1ff, 0x1000, 0x1, 0xffff8000, 0x7, 0x4, 0xe8, 0x7, 0x1c7, 0xfa, 0x100, 0x3c, 0x3, 0x9, 0x80000000, 0x8, 0xce, 0x46, 0x9, 0x80000000, 0x5, 0x3, 0x0, 0x4, 0x0, 0x6, 0x6, 0x6, 0xff, 0x60da, 0x1, 0xfffffffa, 0x80000000, 0x1f, 0x1, 0x3, 0x5, 0x8, 0x0, 0x1f2, 0xfff, 0x3, 0x100, 0x7ff, 0x8, 0x844, 0x4, 0xffff, 0x8001, 0x9, 0x4, 0x1, 0xd73, 0x6, 0x7, 0x6, 0x81, 0x2, 0x40, 0x6, 0x200, 0x4, 0x7, 0x94a1, 0x306, 0xbc, 0x2, 0x4, 0x9, 0xffff, 0x100, 0x200, 0x3, 0x5, 0x2, 0x200, 0x401, 0xffff, 0x8001, 0x8001, 0x4, 0x0, 0x34b, 0x8001, 0x8, 0x5, 0x0, 0xdcc, 0x482, 0x4, 0x9, 0x7, 0x7, 0x0, 0x10001, 0x2, 0x1940, 0x8, 0x9, 0x80000000, 0x8, 0x9, 0x7fff, 0x2, 0x4, 0x7, 0x4, 0x7, 0x1ff, 0x0, 0xff, 0x8d1c, 0x9, 0x1, 0x4, 0x9, 0x7fff, 0x20, 0x0, 0x3ff, 0x5, 0x9, 0x5, 0x3, 0x46b6, 0xfffffff7, 0x1f, 0x10001, 0x7, 0x269, 0x2, 0x800, 0xd33, 0x7ff, 0x80000000, 0x800000, 0x800, 0x3f, 0xe9, 0x7, 0x1, 0x0, 0x4, 0x6, 0x5, 0x1000, 0x80, 0x9, 0x10001, 0x3, 0x100, 0x2, 0x8, 0x1000, 0x1, 0xa722, 0x5, 0x8, 0x8000, 0x3fc, 0x3e, 0x80000000, 0xffff78c3, 0x8001, 0xf0, 0x45, 0x401, 0x5, 0x101, 0x1, 0x49a, 0x9, 0x8, 0x2866, 0x1000, 0x3ff, 0x9, 0x9, 0x6, 0x3, 0x7ff, 0x200, 0x7a5d, 0x8, 0x3ff, 0x4, 0x9, 0x62d, 0x6, 0x8000, 0x8, 0x3, 0x8, 0xfffffff8, 0x9, 0x7f, 0xfffffff9, 0x8000, 0x7, 0xfff, 0x5, 0x3f, 0x38d3, 0x1c000000, 0xffffffff, 0x4, 0x0, 0x9, 0x2, 0x80000001, 0x2, 0x9, 0x10001, 0x81, 0x0, 0x1000, 0x3, 0x6, 0x1, 0x3f, 0x9, 0xff, 0x3, 0x2, 0x100, 0x4, 0x3f, 0x5, 0x6, 0x41, 0x401, 0x400, 0x0, 0x7ff, 0xaf30, 0x5, 0xa, 0x3f, 0x6, 0x800, 0x1, 0x80000000, 0x3, 0x3, 0x3, 0x1a, 0xffffffff, 0x1, 0x8, 0x35d9ebe, 0x6c0, 0x20, 0xfffffa0c, 0x6, 0x2, 0xff, 0x1, 0x3, 0x5, 0x3, 0x6, 0x3, 0x7, 0x0, 0x1fa, 0x3, 0xffff, 0x80000000, 0xfffffffb, 0x5, 0x4, 0x2, 0xe3b, 0x70e2, 0xa26, 0x7, 0x2, 0x2, 0x2, 0xffffffe0, 0x8001, 0xffffffff, 0x8, 0x40, 0x7ff, 0x20, 0xffffffff, 0x0, 0xa4, 0x5, 0x0, 0x7, 0xf27, 0x1e, 0x5f21, 0x1, 0x1, 0x80000000, 0x61, 0x8, 0x5, 0x7, 0x0, 0x8, 0x3, 0xffffffff, 0x7, 0xfffffff7, 0x10000, 0x3, 0xb89, 0x5, 0x1, 0xffffffc2, 0x8, 0x9, 0x4, 0x6, 0x4, 0x20, 0x401, 0x7f, 0x2, 0x4, 0x3ff, 0x4, 0x6, 0x8, 0xffffff80, 0x101, 0x0, 0x9, 0xfffffffb, 0x9, 0x6, 0x9, 0x50ae, 0x1, 0x1, 0x1, 0x5, 0x1f, 0x1, 0x9, 0x6, 0x9, 0x1200000, 0x49a8, 0x1, 0x7, 0x1ff, 0x5, 0x6, 0x61, 0x5, 0x400, 0x0, 0x5, 0x1, 0x8, 0x84b, 0x4, 0x7ff, 0x0, 0x8, 0x1f, 0x8eb, 0x6, 0x5, 0x40, 0x4, 0x2, 0x9, 0x5, 0x9, 0x3, 0x58, 0x87, 0x4dcde1e6, 0x7f, 0xffff8f48, 0x8, 0x9, 0xf8, 0x1, 0x2, 0x4, 0xe65, 0x3, 0x7fff, 0x4, 0xa4d, 0x7, 0x200, 0x8, 0x9, 0x66d, 0x5b7, 0xffffd575, 0xe0, 0x4, 0x1, 0x4, 0x1, 0x0, 0x8001, 0xa61, 0xfffffffe, 0x6e, 0x1, 0x3, 0x2, 0x5, 0x80, 0x1, 0x7, 0x0, 0x91, 0x5, 0x3ff, 0x400, 0x1000, 0x10000, 0x2, 0x401, 0x2, 0x400, 0x4, 0x80, 0x8, 0x80000000, 0x100, 0x97a, 0x6, 0x4bc8, 0x4, 0x2, 0x2, 0xfffffff8, 0x7ff, 0xc0000000, 0x6, 0x5, 0x2000000, 0x92, 0x81, 0x4, 0x3, 0xd6, 0x2, 0x1, 0x9, 0x1, 0x6, 0x9, 0x509c52d1, 0x5, 0x4, 0x40, 0x6, 0x85b854d6, 0x9, 0x6, 0x800, 0x4, 0xffffffff, 0x2, 0x4a74, 0xffffed84, 0xf9, 0x0, 0x6, 0x5, 0x40, 0x8, 0x0, 0xff, 0xffff4ae5, 0x8000, 0x2, 0x7fff, 0x400, 0x401, 0xc0, 0x9, 0x10000, 0x6, 0xbc77, 0xe9, 0x1, 0xd589, 0x8, 0x3, 0x3, 0xed, 0xfffffffb, 0x6, 0x800, 0x9, 0x800, 0x0, 0x20, 0x2, 0x6, 0x6, 0x40, 0x3, 0x0, 0x2, 0x3ff, 0x5, 0x2, 0xfffffffe, 0x0, 0x200, 0x1, 0x5, 0x1ff, 0x1, 0x200, 0x9, 0x3, 0x5, 0x3, 0x7f, 0x6, 0x6, 0x400, 0x81, 0x4c2, 0x8b8, 0x1000, 0x3, 0x4, 0x8f, 0x11d00, 0x4, 0x8000, 0x3, 0x3, 0x7, 0x1, 0xfffffff7, 0x4, 0x1e4, 0xb1e, 0x7, 0x1, 0x6, 0x10000, 0x9, 0x8, 0x2bd4, 0x1, 0x8001, 0x7f, 0x1, 0x204c, 0x7, 0x1, 0x3, 0x8, 0x0, 0x200, 0x3f, 0x1, 0x46c, 0x9, 0x3, 0x800, 0x7, 0x9, 0x7, 0x201, 0xec, 0x5, 0x4, 0x400, 0x6, 0x3, 0x1, 0x2, 0x6, 0xfffffffb, 0x8, 0x6, 0x10001, 0x24e6, 0x433, 0x7fff, 0x8, 0x334b, 0x0, 0x79e3, 0x6, 0x4, 0x5, 0x1f, 0x9, 0x4259, 0x4, 0x0, 0x0, 0xfffefffe, 0x7, 0x6, 0x4, 0x80000000, 0x2, 0x6, 0xfffff800, 0x9, 0xf0, 0x81, 0x4, 0x0, 0x1, 0x4, 0x0, 0x23b, 0x3ff, 0x860, 0x1, 0x9, 0x7, 0x10000000, 0x1000, 0x7, 0x400, 0x400, 0x7, 0xcb4c, 0x2, 0x0, 0x5, 0x8cf0, 0x9, 0x7, 0x9, 0x97a, 0x7, 0x0, 0x0, 0x3, 0x1, 0xf79, 0x8, 0x1e, 0x5, 0x81, 0x200, 0x1, 0x80000001, 0x10001, 0x1, 0x4, 0x5, 0x68, 0x9, 0x3, 0x7, 0x3, 0x3, 0x3ff, 0x1ff, 0x3, 0x7, 0x401, 0x1, 0xfb, 0x6, 0x11b0fdb4, 0x5, 0x1f, 0x3, 0x8, 0x18a4, 0x7fffffff, 0x7f, 0x7, 0x9, 0x7fff, 0x7fff, 0x7fe, 0x6, 0x3, 0x4, 0x8001, 0x9, 0x8, 0x5, 0xffff, 0x2, 0x7fffffff, 0x1f, 0xffffffff, 0x40, 0x5, 0x1, 0x9, 0x0, 0x7, 0x8, 0x7, 0x9, 0x80000001, 0x10000, 0x1, 0x9, 0x0, 0x6, 0x1ff, 0xfff, 0x1, 0x5, 0x1, 0x6, 0x9, 0x1, 0x800, 0x401, 0xc7, 0x3, 0xffffff80, 0x6, 0x65, 0xfff, 0x9, 0x8001, 0x1, 0x1, 0xfff, 0x401, 0x1f, 0x401, 0x37, 0x1, 0x8, 0x4, 0x10001, 0x0, 0xec, 0x5, 0x6, 0x80, 0x3, 0x5bac, 0x8, 0x80, 0x3, 0xffff, 0x7, 0x447, 0x3f, 0x4, 0xfffff9d8, 0x200, 0x1, 0x40, 0x40, 0x800, 0x20, 0xd7, 0x4, 0x0, 0x8, 0x6, 0x1f, 0x7, 0x1, 0x8, 0x2, 0x9, 0x1, 0x0, 0x80, 0x8, 0x6, 0xe83, 0x6, 0x29, 0xfffffc00, 0x5, 0x8000, 0x7f, 0x9, 0x9, 0x20, 0x4, 0x2, 0x80, 0x80000001, 0x7, 0x8, 0xc7, 0x5, 0x0, 0x1, 0x9, 0x7, 0x100, 0x1ff, 0x1, 0x1, 0x1048, 0x40, 0x400, 0x6, 0x5, 0x2a, 0x3, 0x70, 0x4, 0xfffffbff, 0x3ff, 0x1db4, 0x6b, 0xb6, 0xff, 0x1c, 0x101, 0x1e6, 0x1, 0x5, 0xa, 0x1000, 0x8, 0x1, 0x5, 0x2, 0xea16, 0x7, 0xe660, 0x5, 0x4, 0x4, 0x6, 0x10, 0x4, 0x8, 0x5, 0x81, 0x8, 0xcb45, 0x9, 0x85, 0x9, 0x800, 0x0, 0xfff, 0x4, 0x81, 0x800, 0x100, 0x1000, 0x1, 0x1, 0x9, 0x20, 0x8000, 0x9, 0x6, 0x4, 0x80000000, 0x6, 0x1f, 0x9, 0x36]}) setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000080)=0x9b4f, 0x4) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x9) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 03:38:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x7]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:54 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff76800008240201000000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:38:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xf0ffffffffffff) 03:38:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x100000000000000) [ 1072.538581][ T3219] usb 6-1: new high-speed USB device number 40 using dummy_hcd 03:38:55 executing program 3: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff76800008"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:38:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0400000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 03:38:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x200000000000000) [ 1072.778418][ T3219] usb 6-1: Using ep0 maxpacket: 8 03:38:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x300000000000000) [ 1072.898990][ T3219] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1072.907111][ T3219] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.998477][ T3219] usb 6-1: config 0 has no interface number 0 [ 1073.005320][ T3219] usb 6-1: config 0 interface 18 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1073.100849][ T3219] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1073.118279][ T3219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.133385][ T3219] usb 6-1: config 0 descriptor?? [ 1073.151924][ T4250] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1073.398341][ T4250] usb 4-1: Using ep0 maxpacket: 8 [ 1073.487547][ T3219] usb 6-1: USB disconnect, device number 40 [ 1073.519116][ T4250] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 1073.531844][ T4250] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.556980][ T4250] usb 4-1: config 0 has no interface number 0 [ 1073.572281][ T4250] usb 4-1: config 0 interface 18 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1073.606485][ T4250] usb 4-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1073.648499][ T4250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.673556][ T4250] usb 4-1: config 0 descriptor?? 03:38:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x3}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x400000000000000) 03:38:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/17) mlockall(0x4) 03:38:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x8]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xa00000000000000) 03:38:56 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff76800008240201000000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:38:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) sendfile(r1, r2, 0x0, 0x10000) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'macsec0\x00', 0x400}) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) 03:38:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xe00000000000000) [ 1074.067706][ T4250] usb 4-1: USB disconnect, device number 12 [ 1074.207709][ T28] audit: type=1804 audit(1590982736.559:41): pid=10410 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir674176911/syzkaller.NdmF3R/949/file0/file0" dev="loop0" ino=45 res=1 [ 1074.318188][ T8040] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1074.333255][ T28] audit: type=1800 audit(1590982736.559:42): pid=10410 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=45 res=0 [ 1074.590177][ T8040] usb 6-1: Using ep0 maxpacket: 8 03:38:57 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r0, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000080)) memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81809) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@decompose='decompose'}, {@umask={'umask'}}], [{@dont_hash='dont_hash'}]}) 03:38:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xf00000000000000) [ 1074.708895][ T8040] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1074.717010][ T8040] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.819763][ T8040] usb 6-1: config 0 has no interface number 0 [ 1074.876018][ T8040] usb 6-1: config 0 interface 18 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 03:38:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4607000000000000) [ 1074.959633][T10425] hfsplus: unable to parse mount options [ 1074.966971][T10410] syz-executor.0 (10410) used greatest stack depth: 22896 bytes left 03:38:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x600) sendfile(r1, r2, 0x0, 0x10000) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'macsec0\x00', 0x400}) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) [ 1075.021477][ T8040] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1075.076622][ T8040] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.087500][T10430] hfsplus: unable to parse mount options [ 1075.106010][ T8040] usb 6-1: config 0 descriptor?? [ 1075.378660][ T8040] usb 6-1: USB disconnect, device number 41 [ 1075.460016][ T28] audit: type=1804 audit(1590982737.819:43): pid=10455 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir674176911/syzkaller.NdmF3R/950/file0/file0" dev="loop0" ino=46 res=1 [ 1075.586188][ T28] audit: type=1800 audit(1590982737.819:44): pid=10455 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=46 res=0 03:38:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x4}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x6000000000000000) 03:38:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) sendfile(r1, r2, 0x0, 0x10000) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'macsec0\x00', 0x400}) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) 03:38:59 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff76800008240201000000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:38:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x600) sendfile(r1, r2, 0x0, 0x10000) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'macsec0\x00', 0x400}) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) 03:38:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xd]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:38:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x9effffff00000000) [ 1076.994714][ T28] audit: type=1804 audit(1590982739.349:45): pid=10481 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir674176911/syzkaller.NdmF3R/951/file0/file0" dev="loop0" ino=47 res=1 [ 1077.182624][ T28] audit: type=1800 audit(1590982739.349:46): pid=10481 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=47 res=0 [ 1077.248455][T10175] usb 6-1: new high-speed USB device number 42 using dummy_hcd 03:38:59 executing program 3: r0 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000001440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x9, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02008b5e5a076d83923dd29c034055b67dafc6c8dc3d5d81c07f34e4d5b318e2ec0efd49890000a0091ff110c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d78e0c9c15ab3a14817ac61e4dd11183a13477bf00060e3670ef0e789f61f1328d6704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a17e3c184b691c51160fbcbb010000000000000032e6ea09c346dfebd31a08b32808b8020000000000000092d533f098d442a3547445f1749d9a334d83239dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab0200d029a119ca3c97278087001460000000000045b43a94a11b0876ec890000000000000000009b17522fe73ad545344769f082f9e308f3ed77283535d6b60ba475a5e57f2f6acddaa4dfb5a73237c536092fd4e86f7a4e36bab38e3f4a246ae187ebb65ae7020000009c6d5e9be8c599b3df995cb1001e10de82a9b6cfff8d030b7f92a60752372ae4e21a70e3f1bf1452c7eb245adbf857ba6f96519af31d76572097f5050d9312436cb9e3787e27b491f80baa27065058765bb7067ebd8733837077dd5403f17a8194350bc71616ba21d19df241a0396652a632e5e80c42780000000000000000000011beeb6b56782840e6afca880147523d253ac199e0169c07409e92811d3d0e93139ea22f28d954706bddd0c3b780b8eecc131d32f6f6f2de442799583b4201881a1062fcf39535530cc4cb5f04b374bb59f9de78d40000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xcb, 0xb6, &(0x7f00000000c0)="79770dbe700320b583c7cdc3cdc81f71dc00c971aa77247060885da10a3753f56041e374c86702d0ef8ebaa5ae2c7a82bde494875689dcdd6f8ebdd00f812afc1de9e4c22550cfa1ac0739dd3f50168be1ecd7e5acea46505345baca914b6a255815be2a69f6200f902d60b2491e102934387bf99d661ce893a225f4d6935df257647cba4af4fc1f445b72291b524252bb05e196451fd5358e262656e542a24235722c7ec49c5497a681dac0b748fe6accf60afddbe3751962eb038b8ff0e58c67a4713ec83cd3a2153fdb", &(0x7f0000000280)=""/182, 0x2, 0x0, 0x1c, 0x45, &(0x7f00000001c0)="aa6d8cf54a065e3bbb94f19088ca573c6e5b0750b5f05b9d33a2b0e6", &(0x7f0000000380)="78ce00f98df95a5119d80737a130378e47a5eb231f8310892b9d10febe7317a7e9e6b6a729982576aaf6f607a8d5ec4c23fc566aacd33bd708a084873f37205fb626806a40"}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff00004000632977fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) prlimit64(r2, 0x6, &(0x7f0000000040)={0x7fffffff, 0x47b1}, 0x0) [ 1077.507866][T10175] usb 6-1: Using ep0 maxpacket: 8 03:38:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xc00e000000000000) [ 1077.531064][ T28] audit: type=1800 audit(1590982739.579:47): pid=10490 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=48 res=0 [ 1077.628588][T10175] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1077.661436][T10175] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.668638][ T28] audit: type=1804 audit(1590982739.619:48): pid=10487 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir206584202/syzkaller.TiW8uT/1160/file0/file0" dev="loop3" ino=48 res=1 03:39:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x600) sendfile(r1, r2, 0x0, 0x10000) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'macsec0\x00', 0x400}) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) [ 1077.779701][T10175] usb 6-1: config 0 has no interface number 0 [ 1077.809908][T10175] usb 6-1: config 0 interface 18 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 03:39:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xf0ffffff00000000) [ 1077.871359][T10175] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1077.946350][T10175] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.001316][T10175] usb 6-1: config 0 descriptor?? 03:39:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xffffff7f00000000) [ 1078.298469][T10175] usb 6-1: USB disconnect, device number 42 [ 1078.403520][ T28] audit: type=1804 audit(1590982740.759:49): pid=10526 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir674176911/syzkaller.NdmF3R/952/file0/file0" dev="loop0" ino=49 res=1 [ 1078.428829][ T28] audit: type=1800 audit(1590982740.759:50): pid=10526 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=49 res=0 03:39:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x5}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xfffffffffffff000) 03:39:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="0080000000000000f4c05933e030f87902d370f80f570265746465696d30000000000000fb0000005a00004580f7c1d3d1a87bac9537893b51c982aeecc9dfb95b2d43ba9a332277dd0ecb0ceb6f37c6be023ea3b22f42712608e248eb03f7fe0fdbb3a43ec69b3f1ae9fe0652e1531f7b4df1d3055e7fa63a66d29dc80089e44ea6cccbfbebb55dd2ffe93a0418ee78d4fff36137f38bebac1347d488bce8772e3f3de995701ab97dd43bc694a7942fa9a820375222d94ef1b17fcbc0fe5c957b162099cd669b8f1a4f3120000000992c7422cadc83507f146874e1a14922ef"], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000000}, 0x41) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x7d4, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x7b0, 0x3, 0x0, 0x1, [{0x358, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0xa4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x13, 0x6, 0x1, 0x0, "a1a5f8a59f8621854b84178cf4d6ac"}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY_END={0xc4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbf, 0x1, "2406ce3993d127622c6c742217afde580fa0e64cdee1baa7f10227143c13bc4a7d1b872890cb27acfd3dff974491755f7b3344020b0b9895088e75270ebb7c843131d08a9d473359a7a2ba7bd4bcfee78710909aae19e13caef52d1b78c01c19eb2dad1f6b40d22140fad2092af48495480bc507fad22da4424c07a07f8881325d44d5ff8328da0d74e9f0f500fb8b9ffaac5b2dbb2aba96c04a8ddfc7348e5febf42dc9afeda33418c77cabeb70ce90cb8fa56076da841066f961"}]}, @NFTA_SET_ELEM_KEY={0x11c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x83, 0x1, "a868935f22934475c42e64a597e8ea6a3e9187b887ad7405eaefefb26b3fc9cf3f5ddcf12333c9eaeca15d87970a1f8ae40a594be2b2d6369de15c1863f69f6422d25744719e5731381d8d002927ee280a76a971761e6912d54a9fbd02fdafcf88d4a0d133ff859bb0b3ad80c27f9e0f4e22202d68ca0c61529b783271fd4f"}, @NFTA_DATA_VALUE={0x92, 0x1, "0eaa68e4a29aba3a4b49444d7e960b7051d49852159e49f7c52c20cc5669fcfaf7636d46078a556f525e245e59bc7beabfd4aba042f4595a5d5c82c1a1bf0851d13419261a5d8bc68a68ec07bb0d38178e1ebcede24f1b46cb948e5d58a396f23d94b990d6786fad176c3f7f93d38de6fd0e53aafafcb782f061428619f51ab7c3f40f431d75f7351769f3bc494a"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x84, 0x6, 0x1, 0x0, "f096a06ebd200ed3239ae75ed5ae68f69c29f8df7d7aea2c0c8dd5df88dd5bfdf287b32a7ac962b9c818d33ce019e460b20bce5a08d88c2d7c64503c5be2ad3989b572576ab7d326931f1358967667e90223e2d3c9dc13945ec24e25bb253e966fa86bb280570137ffd3e0e3fcca3d366114de416584da2308a868f3ce1c71a7"}]}, {0x10c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0x9c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x95, 0x1, "10360a20b8c423117d001d86d05b97bb122e504a0a1b75395b6669f418c92f342f5f8db09d584b2d1564d19b46af5dc8b4eb4b1da374f3e0b5f4e576ca0c4ed1b16bfdb1d37b04268f18583f60bf8ea59711f192e9f206c2be7dc38ee7c865fdbb364b7642a1614af6b840430031323a6912303eae7ca1d6b4c6519967403a238035f1ae6ebe18c7b00ec2519d0f64a6a4"}]}, @NFTA_SET_ELEM_USERDATA={0x5a, 0x6, 0x1, 0x0, "62616c63ece8a37dac621feaecdbb71860c14df3122e619f7d9dbb9222fc3826c5213fc1413c20cc70a1c216468b522265b6c5c5f347159db3c8b4f2e5595944450948efba8b1e89b6f4e2931836d78361ec108ea586"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffd3c}]}, {0x348, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_USERDATA={0x48, 0x6, 0x1, 0x0, "e5911c0f6ca9f189ff851e90a3e6834ee636aa2b6b61d043be42dac87252381386795fa91f1adcbace1988849d3242beeaa6e214b2cc330848c815d944b85dd17378ed3c"}, @NFTA_SET_ELEM_KEY_END={0xc4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc0, 0x1, "92d5de4b61201bff842fa6d1b7cfef4f7290a02c28d45ea548ff0d6a4ac988cf1e21fe98e7a24954aff20ad72d6115ef8284e62ec5df1c4d42e5709d4ba3b21e984377b01e239799e87b617da3ac978cef8094e121f3200c1c0b9767246314aeff9135192d2317f74611d562b0fa40db43c55cfda560008a5c52efbed3c59087e0d542c7c5e236a042fbd0a2e505e7eb70bcfa675417f067c19f1c5c008e5625c53a5c01442d739031b09ec243cbe16bc0691ca4784ef9ac8f31df4a"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_DATA={0x20c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa7, 0x1, "b96432e301e862cc76af8524c7b4eb7afba1075495d1509805e7e956193b75ffe8c753c04cc8dc7125c4197fd3359109db6f4f7396730d1230d84da7b5b7c7ae4b17a6c7890f174d5fdb00175ca0edcadbcd428ca6faebf75dd51f3614a5739214df4edc87bf1fbb40db88995ec6c2fd880dbdde375cae017315355c9545078a4a396e9ce62580b1e15f39daf70dcf91e2dfd7d934640c4e3dd1d13793535d7c330ccd"}, @NFTA_DATA_VALUE={0x50, 0x1, "f9e2e5ebee4902de24adb32351286bb795629eb3d902d97175fe1b44980ca5e8b94562b14a0a5aa9d61f6d77b2b4b5b14abea00cf3e0575c583a6bf394cff2f1dbe20f3c832dd6b0a8f69ab4"}, @NFTA_DATA_VALUE={0x63, 0x1, "0008345f59feef0daee5bfa39596dd7bc536d1025bbbf03cb544eef8f072fd2c1dbc85ac9d83cd31e94cbcbaa184661181f0ef38051fa04a98657b834401b155af518e08f74ec0006b83021cfe9c305d6c38599d4bfc324e51f2f471e8911e"}, @NFTA_DATA_VALUE={0x29, 0x1, "dd6246a236c514c7b22befa7bab2d8b550fe8530f13a8c52c489a39e72a37e1fcffc86aa1b"}, @NFTA_DATA_VALUE={0x7e, 0x1, "a118271be5d6ab5a899b6a552782982e282a699d6fbd0bb3367e7c631ab9889a5906b2745b151bae174825a3695e7a5bf8d56d723030a303ca0165379908023915bd4c1d7989909895b42d136d238b65ddefa1cb9e3ccbca3f7994bd4b1cd6add34e0c851670897c516239a6a555a2d522eb7f488ad45508f725"}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14}}, 0x81c}}, 0x0) 03:39:01 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff76800008240201000000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:39:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000030705000000000000000000000000008aaf858d73b61f7da5134cdae6275992fa4d40bf00ba785c0716279f642bbe207e81bbebb02c70d4c4c3c1fc4fcd7683475dc98de023839ecc45c0f1075870847444e693a4417547e794baf63b36e2a8849e7db25c951db612a99b1dc3c60fb90a1891d31474c1a084185f641d1f4a2ba53379a1441a7357d180a55b38ddd58bbfa0a0e75ab466301778ec5102de86d3f512f6380000"], 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r3 = open(&(0x7f0000000100)='./bus\x00', 0x143042, 0x0) sendfile(r3, r2, 0x0, 0x283) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000180)) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x18dab, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x88, 0x10, 0xffffff1f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x304}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x88}}, 0x8000) 03:39:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xe]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="4ad5ad658d8612c62400000034d08bf49fc972d3a4987b1197467b681667cf3ae4ccd04f878e2359fe347f2af534f3dad8bb1442f28afaf19500cf42add3921fa3c10e8109df5797beba1485db342484a8eee6d0cc681566da054a665f2817ede90b40707361f35ee5af85000000000000dc499551507f91a31b5600000067ab0ec030686e033db5e47889f33e6a307666b369c4b73ee2650b1d5ef37489da5b094312e68c0e110f4d9c5bf840ef4988a0f176f223a70be2453e8bb1e66f586029c1e942d49d3b2f396d37979e85fdfb22cc158f41f801a8f19fb6324e1cee0a02810ce34c1ca3c1045d6853b8d8819bd0fcbc47facd3dc5c66cd9220f5cf223186e0ffc71c0ae1e24d3d3aeb461c9e036b5fd25b16ed934997e8b1762447be61129223aa94819e23906105b5e028fcb222f89c249aa21a0d4fb682051a74da64adc9de65de325265498e8c9a417762f529063c2d301dbb3649d97ac1168b73a86cc1209015eeb683af2aeee869630c6fde042a398a4d7761666704ebac718bb04266c1ba418a760a7ebcd204e7fd845b08fa13706490aff0ec2a9afa34ce647ce941314d8b89698d08322556a6fc27220d96a8eeb17b6096008bedaf433f9fb5191a6a6165c854b40fa61a6227c4d31fb9c079633d5d3c2451141912169f5fec568919af4ede18965113e29a2c3a3248f1775f506bf60d55465b836e23b6e37dbc9747755c479399cc773d26227996e336aba1cce24de0cc2ca9ad96b1846c7701f4f22cb3829ee2e6540d7e531c344007fd8afc24e43a6f3d3431ffb5c70aa92d3a46c750b34c5c0ab24a96f5e476478b805f643c1e3ec8b0d3d8605df9ce0024d539cf58fcf83c800e63ef4a0f019b6c241504f3e8f3853fcb70d9601b841b055b977d6914ed9961c0a3496ebaabbee014b49f735d7874bff6f36380a00452986b48fdc941c0986fe1dac11d33163240816a82c62c300c92c37f972f444b3635d384067fd04ed1450b9bfb0f6bfeef6593dc9ee4739c66bc52cba5ffc5842299d0b51ac24cb6198904c5578ade6a5c625fb40154f96553051e88cf2c97ece78331892289acb63344737771e00adc4f5f4b57a63668552245f43e31a7981aaca2796248adc8b35b12495dfdd36ca86e5c05a59e0eedb9b9228dd2ba82ac1cb51ca317147696bd94941e80f064800e076c78c273375c4c4a39f734e580b357804fbf80d775417ca00000000000000000000000000000000b0d11b35e856682bbe39acce5a72341045346381217b7c2e7c45e18fb95a631c8e2b0659a9e66a9b2c52db3ffc3a6c4218dec02e91aabaece5a1f67685f741af504580d4905885eab45f46acfcebaecf5b8b327d9ab36dcbdee1665abcb766db94c25ea4b22c51e3a113f3bf8606a83cf9b097ed6f57b52801792f07e66f49c7cc8d45c82c202c532f47b65613868fc42a663880a7d3aba941694e8411d3d6fcda5cc5206dff8a48a4b76a64daf77b9911", @ANYRES16=r2, @ANYRESDEC], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x2c}}, 0xe0f554e37c5325a7) 03:39:01 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2005000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x22008, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$cont(0x1f, 0x0, 0x7, 0x7) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0xd800, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file0/file0/file0\x00') mount$overlay(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x80040, 0x0) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) syz_usb_connect$uac1(0x6, 0xe2, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xe7, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x3, 0x1, 0x1, 0xc0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x1, 0x8, 0xff, "924f"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2e, 0x9, 0xc2, "052f6eb3ac75f3c6d2"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x86, 0x3, 0x8, 0x36, "071b0db42de4daae"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x20, 0x5, 0x1, "bcc66a4c8affe3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x2, 0x3, {0x7, 0x25, 0x1, 0x80, 0x8, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x2, 0x6}, @as_header={0x7, 0x24, 0x1, 0x88, 0x5, 0x4}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x9, 0x6, 0x1, "b7d26e"}, @as_header={0x7, 0x24, 0x1, 0x20, 0x3, 0x1}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x9, 0x8, 0x7a, "e8"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x1, 0x39, 0x1f, "4ee6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x60, 0x1b, 0x80, {0x7, 0x25, 0x1, 0x82, 0x16, 0x6}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x9, 0x12, 0x2, 0x40, 0x5}, 0x93, &(0x7f00000005c0)={0x5, 0xf, 0x93, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x5, 0xf000, 0x6}, @ssp_cap={0xc, 0x10, 0xa, 0x35, 0x0, 0x9, 0xf, 0x7f36}, @generic={0x47, 0x10, 0x4, "dc888553235da6b6861d152e6f185c0d2a95a238fd6964d466d199620e724fe97d7c88e6da65131ce80365eb89f00df9f5348a8db3c9c8b621f2cde88a22ad04079c170d"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xd, 0x2, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "159d4bf19c21ed883323d2996b12c5e7"}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "0a9c568d41f716181f8abb724a0fd374"}]}, 0x2, [{0xa9, &(0x7f0000000680)=@string={0xa9, 0x3, "655f958cdc51b1e99c6910d07c226e49988f0aa4762dd3957d5146392827d17625961e00225989bb313c45aef1eeed2d5ebb9ccb494c4e5d44c61c5fe02b00f8a972c4526158440b0937a29ce548af6b8c62a32d1f21aa81091121da6e6ea2ee222e83ef1ad613af39c79260a41e7cae50ae85c96a37a916c9ef307e866788697502df91839e525a778cffcef270aabacdca6cbe67493ab586028675fab3bed799b60993dcc4d9"}}, {0xf5, &(0x7f0000000740)=@string={0xf5, 0x3, "961053fa0e20f9c4539cb46b78b89611238e450f7e2129398285f55da2da2aec6c6d54f8922c47d7f64f07ec1e06278d317fb26241822cb45359a59c7764ca5440513d80cad17cd984d3aede068caec577fee61d581b0e3e21576f990f0a14449496a4493d4d55b991d4f123d1eaa5a6cde3004c64492fb5027607f9f95906809142cd205dcf084e134917dd54f93dcf24ef23c9255ff3410492655a36b0fcb9932167cf50be509d461a65a8bbbf2c588cdd39bc0c2c663dea4f2db12b3ec5ab199640cdc831ca17b6a7b66b4651dc46ddff12afa320e4cbe859c7c3bc36098a98f54895459d672d8e2b09e5a746b84adabca0"}}]}) mount$bpf(0x20000000, &(0x7f0000000200)='./file0/file0/file0\x00', 0x0, 0x5890, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) umount2(&(0x7f0000000340)='./file0/file0/file0\x00', 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) sendto$x25(r1, &(0x7f0000000400)="d66253417c55274ff933cfb9fdb993c5182b16cb070000000000000000258d75642aff52893e669e436a7f2dac52ea61182caf040000000000000063b5368d6ed9d6b60aabbb03f9980344aedc1740c60f6462ebcd33e655fa448e8ea437295359a70e82c242e68a0e24dcd92a01b5e7ad7f85e4b9b2d2dc5ef4dcec20716ddddf5d0cf96f9b643af3f3291405c73d0d11e59976293a00000000", 0x9a, 0x40, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x3) keyctl$session_to_parent(0x12) [ 1079.637642][ T5] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1079.732819][T10577] overlayfs: missing 'lowerdir' 03:39:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000030705000000000000000000000000008aaf858d73b61f7da5134cdae6275992fa4d40bf00ba785c0716279f642bbe207e81bbebb02c70d4c4c3c1fc4fcd7683475dc98de023839ecc45c0f1075870847444e693a4417547e794baf63b36e2a8849e7db25c951db612a99b1dc3c60fb90a1891d31474c1a084185f641d1f4a2ba53379a1441a7357d180a55b38ddd58bbfa0a0e75ab466301778ec5102de86d3f512f6380000"], 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r3 = open(&(0x7f0000000100)='./bus\x00', 0x143042, 0x0) sendfile(r3, r2, 0x0, 0x283) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000180)) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x18dab, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x88, 0x10, 0xffffff1f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x304}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x88}}, 0x8000) 03:39:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000018}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000815) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000081d01030000000020000000000000000500010007000000"], 0x1c}}, 0x0) [ 1079.897531][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 1080.018375][ T5] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1080.028367][ T5] usb 6-1: config 0 has no interface number 0 [ 1080.074926][ T5] usb 6-1: config 0 interface 18 altsetting 0 has an invalid endpoint with address 0x0, skipping 03:39:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r1, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000000)={0x9, 0x5}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r9, r8, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r7, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$SG_GET_SCSI_ID(r8, 0x2276, &(0x7f0000000180)) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r4, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f0000000080)={0x5, 0x401, 0xf1, 0x8001, 0xfffffffd, 0x81}) [ 1080.126187][ T5] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1080.150771][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.181135][ T5] usb 6-1: config 0 descriptor?? [ 1080.446990][ T8040] usb 6-1: USB disconnect, device number 43 03:39:02 executing program 1: sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4000040) [ 1080.595026][T10572] overlayfs: missing 'lowerdir' 03:39:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x6}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r1, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) r4 = socket(0x11, 0x0, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, 0x0, &(0x7f0000000000)) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000000)={0x8, 0x9, 0x4, 0xe000, 0x0, {}, {0x5, 0x1, 0x6, 0x7, 0x1, 0x1, "8ae26a86"}, 0x56, 0x4, @userptr=0x7ff, 0x3ff, 0x0, r4}) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000080)={'ah\x00'}, &(0x7f0000000180)=0x1e) 03:39:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009}, 0x25a, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280)}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0xda00) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x3) socket$kcm(0x29, 0x5, 0x0) 03:39:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000030705000000000000000000000000008aaf858d73b61f7da5134cdae6275992fa4d40bf00ba785c0716279f642bbe207e81bbebb02c70d4c4c3c1fc4fcd7683475dc98de023839ecc45c0f1075870847444e693a4417547e794baf63b36e2a8849e7db25c951db612a99b1dc3c60fb90a1891d31474c1a084185f641d1f4a2ba53379a1441a7357d180a55b38ddd58bbfa0a0e75ab466301778ec5102de86d3f512f6380000"], 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r3 = open(&(0x7f0000000100)='./bus\x00', 0x143042, 0x0) sendfile(r3, r2, 0x0, 0x283) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000180)) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x18dab, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x88, 0x10, 0xffffff1f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x304}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x88}}, 0x8000) 03:39:03 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff76800008240201000000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:39:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x2c]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:03 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x410800, 0x0) sendmsg$tipc(r0, &(0x7f0000000500)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x43, 0x2}}}, 0x10, &(0x7f0000000480), 0x0, &(0x7f00000004c0)="c4d5310e443c6fa5f9a17b4a866ac1b1a0d58e1000ef602af2b9a21fe188ee5c531b6feb60f7ffd4c90672", 0x2b, 0x40080}, 0x8001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x11, 0x0, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, 0x0, &(0x7f0000000000)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x20) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e20, 0xff8, @private0={0xfc, 0x0, [], 0x1}, 0x5}}}, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000280)={r7, 0x3ff}, 0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e20, 0xff8, @private0={0xfc, 0x0, [], 0x1}, 0x5}}}, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r5, 0x4}, 0x8) syz_mount_image$msdos(&(0x7f0000000540)='msdos\x00', &(0x7f0000000580)='.\x00', 0x401, 0x7, &(0x7f00000019c0)=[{&(0x7f00000005c0)="4643ab46102ae905fd2a22865f65d3d809f9a8fdceba67829efd731a605dbad4f348e61bdada66938934fa7a764b2764c8fba7f65dd294e8ae8339bd1e0576a29d021531ea3d065867", 0x49, 0x92a6}, {&(0x7f0000000640)="dbaea05d5c782ed4e8975e52c6a8eb0f27bd86032aeb7ac2cf4c", 0x1a, 0xffffffff}, {&(0x7f0000000680)="e1b0feffa7a279d4364ad2af12a4aa65d4f9c8ffd153d888cd0a6288c56e25b1f04319ec7f9a1e00bae0b0fd729a6ca6e71dc222bafafb79352e8de61bc70acf4e153b84f8aaa4ae792b4691e4ccfd72f87b387f7adfe180f6659868832c18ed210537ca7f73552fe670811b6137092f2798570f60cf19b52628bbaa3db511abd0f222cfe020380f6a36", 0x8a, 0x81}, {&(0x7f0000000740)="956c5f2c73af1903341f3f4b4db324f255d5ba0cabbca06c4a3377f48257864e27322e054931733ee5f09d998af8c6c9758426b4c8dd52ff2cecfe158b59101784abbc38b3ae3da524fa5dbc49c498e1e69185cfc250dc2a59fadc9e17ebc6e520ed28fdff67f478b5efc143c20424063446f0c23ff0312e98a84b1e96fd0adb728c5418135adb1c10a77ee91d8a0a400c26f2dade274cfe9695fe2404a59b70f9d9339b6684e1c1c24991923fc52bf4876fcbdd7cbe5a84f7b2cba28cfb534cb863abcee9e29c026b9d106a3e53dd69c7cbdcf3dcd5fa60af7ff4b7c581e25e2d5395cbb74c1bec479086d30e1a85c31ce491dd5df195cdb44bb900971691a3c2a56f3038ffcb60b07aa25fdb591ccf4ab0db4a8c6bafedcd3a928ecc518d47253d8b14b3639aed8d3816afc8efa6f4c18c0c65acbbb714c59bd8564eb046de23ee8c11c9c64a4000bd04a4eef15252691590fa82f9f2e8ec352546c246efba6846f758a7cc49852728b54420b6e83aff804ae3d2f3afda9390c927d74c381e81ab92172607ebd824f57be007448043989091cbbbb15cf04dfbe58541841c4c431d19c2cdf238ce1972449e81611dca45e17191ed2c2dcdd0ea07189569b1a5b757bbc8fe7851114fe38e56833dfa53f45bdd7f0533b44c150f48753f371cdc3b1aa465c0e73783261da5a6a8099acfddc771958598fc195ee2fd2cbb2cdca87e16df0a138c7e7ce97c55884ead52169b6d4a1daa64455c457d77155856919c4a29925c41f2031871f95280afd28958c79893bbfb23e5b54ec54246d66147b55491a5c28bd47662517bad842641d216bf44269b7cff830b3f40b7d5d261e8e8bec84203aa9bfd26082b8072fae73944902352a215483893b89f1c389ba604106c2e869414453295cb312954209d16aea2a75f5af5790618c5230b0639175c04ef54c8447af85681ebabb72e49da6602dec9ecdb12aa1c92c8f6105c8948463db76ddf70f8e1a4e2bc922eca1db970e6eca71afab92fa7e9ba9b0225538e186cdf4974f0dae04fc5f394f965004a7829032ef4838c0ce6ce182442a94b437a93a91063d81a6759bf62f0743cf2e72164174af35bc96d11752fb51ee284a2fa0a7a473b33004667b1f955e8b66835c05968261c6f313b53b29766b118019230b6ac5c634a07160f2c46d49950605c25639ae66e02b321a22bad0a7b459ab8e494bc2e745f9a47603485e2a0922fef3033989913cf6e5989cb619ab94dc4882f5e821c380506af35c6cbce4ee527429bc59c7993324fcb59f730a4877805677c3a9c2eb929203fb907d5c9c8faf88c69c51a7f4f4a3e6ce042b610f27a753995ce48d62294a85b2f44ba7e3a3012728246be0251b164a8bc387286b9051756d7f1917ebf4102a507cbdf357b096ad4d1b1fd71142fa137d19dc0d9193be91c96bc461df0c275c5db00405dc2c30a690ebf751aa2510548342aaa6a090aa6a38cd8bbd312f1d41a7f6059be0ba2207ef5ee6657c74066b5927cc041cb27ed8512fb740c8bdd5769bf79d03c0c5a229b610d7d1ef2e9e2042f6e0f4300557d3d04a3797af0828f329d8ca70393caf2edce8002064c1fc3e0a4a5b1fdf7f8e8c18b7a5c2bf554c17271fbc5b41a691f4de0f6f715d83328ec65848c0d1425466ff8f056423b1f07c62dab73de28adb9d77d3b7ec2ca3528a44bf9478d9f9a5be175278e5c83f9e63c93e86e3783ec61af7e25f29b7837dce0efe7e3d6b6d6d71783ef74449765f6963e87699cdbdaa22d047a99f1d9b4ba08bdcceeeb3cb520c6d9c105c5b68e27f8b8bd48780763154f1f748533f9036c9157a3f650ba4c0c51a7c52d548b9b33aa2af1bcd83526c317897980d5cecb217b0439fc5ce35f3038ead538da47a221b67a8611baa7cb7266ae1629698f18e93d37d79d12e6589d9c2f0b1ee0f60d503cc4925f8380f33c9ea11ced6dd6baf0a0a8cc41c6e6176cecf748c73d3a4c652b919dfb99b35f2ea81af3a0799b27901424096177cd1cfb4f048c535a60df493819ac58265e75816bd292d6c544ef40aaf1dbb5ef23c3659e6c3a69f321657d89d8d0dbe71fce8a8c140ec1a12bf2537007f48227844874900e00422aa17fe712a7bbb532bcde1872dd1f690877e731508e6f2bf015e0411f67a0a9521afaf373109396b7e534428a8bf3405510f5fb073b6fce3af27d9caa1e684ba7c7a15f9cd511223081ccbe8e9765c87e05ef43efe29d7876dd4c7c9b091bf83f16d0702947e46f78654d3302e9e8474c0ae9d9f2533b5f2af590e80822f5331a2b04ddc43d773560d6f1c1ac5ca525c031fb5585676ffc688d2696c8775defff5fabd56f01028a4d69069661da5ea08e7da102f7a852dfc7c1a1e540a48f002c56f2914f8ef5466ed1efb75d5d81aa464343e479a628ef597bdbb2860f4c0dc748d422de3698df49b915b0341e6e41b612e546212f8aced2df088f16067039b7f6ed64c46bcca89d90a496558705161a5dca6b4c9634c9ca58024d10623361a5287fad5efb014d549eceb7bf5ae6637487439f3f6c572035514015b7b11950c44ef7318eefa9a65126532c1ad01003c3dea4824f83b9e8d80759e4417e0caa60e3fc8682764b3a5350807a8116a20dd1f3d1d92ef636cfab2e86130cc3efadfddb31e292af9bb3668d0be0077da7282c1d9896356834c8eface242687189fab15b64a67f772347328f513d2042f832becb8026d9a9fe5e6eac993f81371239e8319e577d7db90c869233089356cdf89044402fc8272c072cc66f8ce7687c62a1539480a90b05ac6f4cb77a53a2fcbae3813875caaa785fc5602501a87de5ab7b037810d8bf2b2382320eb0aa0aa7e9d4de870289cecd4375b98cf49ae2da6077faa70285f8ef5a273fd96e20a339f9a69468299e3ab1f07018046c24f9c4d985da05cd7710483e3f04dccc29c573bb7cb6a267398272d02b9a9be43a1b133aa543c6b6290a39eca4b71fcbc161e7152147144c14f1a23c4f3392a0e221c0f428cce744e9c18cedb4e070119f000445bef2d6381d017dd6a5e32ab5fe6fc84ff0cd7d346c468b644abc6b70d9ce3a08ffa09f54881def9a257e0ced463b3a38498e3ca96ebe1876c4bbe09c29697e5f43d20a91abb8dce301177a3b2a8889e7239522056d405d8cdd1e881be88c8e3c949da81ae718086e3996e380f2b191fc198e57a776cc35c5c8ccf687dc071d74291d0570b92a9ff2e424174e54390ad340c76fd7907e143b156571ea511c8c21a4bbdf20a9ade849d503f25f7d6db000417bb647603719faaa86c8388b923b7aec6b2026fd02de1a1e4793f2d39aff2ab1691b66d2062b1061d030f06b40322e986faf124c5ed30444a705302ef5c38c3da0f47347153ef6da1eeb51fac885347b6b6b27b141e1c23ff5f628c3b851c993b6246428c6a8cffcf91045860f738c2e944fccb7252f636ba3a1adefe6789aecfc2622cad45842eaa6f98d03e8480c2b1a686aa0a48dc4a44aceed6018177c3b74b49c41476c43710df782b9d2b1b605bc2b576ea1094d39bf60f18d72863f98f94328910b603afd8bd403c2eae450c79ab53150742aa371620b78bfef4005a5c87582ed72372585182caba522319a1880f638ffbd85410284f15852cd7e2e74393b882bae5958958d7e46027a2793827af081f1d896df5ad08771b5713eb77d647cf8e52825604d2cf83efc7a84d409396ba534a049a1c9eec4cad246a0a9283f72340b3bb8fb431e1625d368ef6a21a6ca92adf806af0ede8a104bbfa20a0f8139e337f97f21c61bc120ee3674cd80361d5de79b97d46998dd4a60994a19d0f44a79d6f112d41b8b6f620fd6fb9ae101483b136c10a7767c46dbafc4dc70d8135f522b2c9141a4155c6ded655dd66e11add19ebe1d11279cc2f6f28121a18383f0979ef9065309a5303abfc77a86e0384dcc4680a586b909781a3ffd222dde044423ef69ebef5f51ff34e13d4f84d7b059213bca56393dff5357332e0a552f3a8563795c49635f8b9fdae5e10a13cb1c5323a1341c93ee790d71f794764121d921674e279d5fab51586479d3e668d483d43523841a0a84647b4d77074ec49b7810fc2349dc5f073ad815e65f674465085f1be1f4848eff367e9392846831e5d8ed2acac7f2b135d71716a3863a8f752fa736e515149e69590e95baed6026379b9cf06313abf9a49a88498a93c7e3897f0697d7aaf5567c20bb9e58d362383ad67490515263eac562ce41a334f858dc433a11930deed0369b3e1f263e2ef18c9276d698478e1a0b37e14906650e5035d34fa8bdcd5c72f7aa531f2037626682075a18a09ec3902cb2967c0388094e48476ee4c77c2d90392e3f5f4df8b98af98b4d9a68a70ec84635820d29e4e410125b92f30583a98322bf7c2c4c6b21a20c0f45e42e026f1a1ec37dcf5cdbe43edcd60b72db79cb0fc2b7c91754b9d88c304a06c2a75aaa9f22b10f206fa9a1674592b10fb9a98adee3f8932be3658ddc7ea0908bca3b4c1a1b7d7c800eba17ebabd659df0260a64d81bd49cd87e13db8f3f2288d5e0a7661cb62980a103fc2695fa241d190adb474e768645b902b3df022fbb412d290a5397492468f06473d83df04692289580272c950721901463f08d91627710b132eb4ecf8bb2c559b0cae27aaf05e71301cf8b2e88242e3517fde44804d2699cfa278fd660d62f51bd14467cb426e85b046390c738d4540e0f9e262a7999a1159bed2a5969c2cc4abce289ca65dec5986b93664082b748e4b85689302f230ec0bd6b32953f93bf4c7f201db5adb8b65d488282397ddbccd7f09c34220fafadbc7682a61c1ecaa55a33eb03c896b428dfe93e89f7608434f79ffd1a1caf52b6c030ce96a82d3780ced7959f9d1c432bfe7ce3b9428ef731484fb39c5cc3da707a0c0529fda22c2a06d4a123cc8274b127815fbc647af0f115e035de26f9f641b6c0cbbafbf7e4bbaf870a2f882179606571ea46ff226d8136f78235bcc2f33e97c09384ae06615a03bd5b538814c0c871fb1970efa8d751ab6c1434ac49a53711c29c1923b320dd5ab34085d4b1725d08f261e98b904653558540c1adc5c93c0e89a0c9bdbb4317a3939d6269db82ca70029f46de3b5c36bf29d5abb137df633e7a0c46e465232da9c9bbb3ce2abb0fe497dcd5e7c721973562d740835727b292864b5dbba14e144d6ce510ab105c1770957a258a02039a30f2d373b8923d3e99cc6d91d218331273489112d34befbae15872fa8e6af1fe42d9085683eb6f2342e01edfe11f84b4ff8c2d710d03f1920d2b0820969f2767c79f97a5c428bcfa5bd1837acd6681fb9b3c548ef947f590da54befb443eb61b148d4ee43890de1d153723922eb7334932b5a23f9b5ac319490c98bf693adedf7def4c9a7600eaa17fe817df9a7049db5dc1f21e68b962b012691102af796c239129c5603115de9b576c89ab0de480aad73dc331183ffe5ebc35b645d0df4b577b94113ec4d0fc33fd5b516ed29100a5e77a1c505ab72ee2650e053adf0883583597bdf3b8908447fa0c17a346cde6835459a95404ba4f72b7062702869ff55c23eb831f9a34b171a35dcfd38f4cde4e57238cade99767d59a3d22ae24996127dad9d1d142064ab0685c9b082a222a3e6d62f6be043c91cc7bd572585dccdc5ca58bb05f80aca1be088fd1143f5144719ba293503c78419cd39a5b7adb419b799b9856713e5bfeb5c1a8eb57287bcf74f2aa2cdc007bcccc9a08e0662125f87b98e64", 0x1000, 0x8}, {&(0x7f0000001740)="e2696518564e5b41f03091ceac21232cf947c5a9b616fcb839029185f0b1970de141d0a84251baa9b595d81aa86441d31b378dd7b75b792596380041b7e961f5fba544c32394f14c6e7994385a97e3f16dc4107a", 0x54, 0x26}, {&(0x7f00000017c0)="0b4f11738edffe5ee0b861d92b52aed9d4a5be5a3338d214c18952b5729cdf65e0c67cfd4cdd9a798efb14deceb2d0f217442a4ae1edb739d782cdf4dd5b90aa64fa674071347b70af1969d9ffbfd063f48353272cf4bc95f9144b38a152bff3442b7232df99bd129c99a9c5b6fecc4125382b56b2632fb75747f165bf279b6eb59312c2d930e641ec23cab29cd2e06e01e449379c21a7a025dfaf0a0c76faf0fbca8d8c175b5daf7f7b6675f02f4f7d8682d6ecd2578ed2c754bb4d721d9d52de3c64a51d2dc870cac201289610defe57e3fd9685bb0af39a8f97f81fe6fc79b7b30d", 0xe3, 0x6}, {&(0x7f00000018c0)="4990edac724b792b80f139f2b11a73e51515daa3e37195646f676b15185406e041a17721ca000a9d603b6a25a237717d0f64eb883c634f9c406f387c427f879dbd63387182ca283b2ad90b40931233d00e002cde760fc8cc5a1773f1f816b07948d29f4f4ab6fa454d1431f96affca2af9a46308045003b6fe87940b5df1da94aa8c834549ea64a79c9b9cdeee805155caa3690115e7770135634b804814299011cffe35a4f51187bef40c6f4264ee8940dfd2007de6f3ca94cbdabec48e77544b904ed692c1ad52ef1369e52028073b815f80bb", 0xd4, 0x1f}], 0x100000, &(0x7f0000000200)=ANY=[@ANYBLOB="735d626a5f747970653d2c7375636c6162656c2c00dbb3c5195b45b9704f8388c5d9ebf439c64a6045a05c95e6"]) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESOCT], 0x1c}}, 0x20000800) [ 1081.587430][ T5] usb 6-1: new high-speed USB device number 44 using dummy_hcd 03:39:04 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x100, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000180)={0x28, 0x2, 0x0, {0x4, 0x401, 0x3}}, 0x28) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x40000, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001200050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280050001bfb8acb1861092ef67cb948230b18418426a96505688f39530a71702800a00050004000000001900001a7ef25199069d74afe4ab329f208e6bbbf135089639b6d052052fad2693b0aa1988d599cc457dedf964d407639f82aa171c5dba825f0660d0ffdf8f1fd5bb970c"], 0x40}}, 0x0) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f0000000000)=""/18, &(0x7f00000000c0)=0x12) 03:39:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) socket(0x1e, 0x5, 0x1) [ 1081.837338][ T5] usb 6-1: Using ep0 maxpacket: 8 03:39:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00f4ff0706010300e07ee4d70000000000000005fa010007000000"], 0x1c}}, 0x0) [ 1081.917924][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1081.957961][ T5] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 03:39:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 1081.972758][ T5] usb 6-1: config 0 has no interface number 0 [ 1081.994843][ T5] usb 6-1: config 0 interface 18 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1082.046201][ T5] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1082.090363][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:39:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c001d0008060103000000f0ffffffffffffff000500010007000000"], 0x1c}}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x3, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000180)) r2 = socket(0x11, 0x0, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r3, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f00000002c0)={0x3, 0x9, 0x7fffffff}) getsockname$packet(r2, 0x0, &(0x7f0000000000)) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000240)={0xe5eb, "f65e2a132c2ae1d5297accf6635f49151e9da32fbba3d72d04fccbe03a82ab89", 0x2, 0x20, 0x1f, 0x10003, 0x2}) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x96, @private1={0xfc, 0x1, [], 0x1}, 0x7}, 0x20) [ 1082.136726][ T5] usb 6-1: config 0 descriptor?? [ 1082.180306][T10694] Unknown ioctl -2138810781 [ 1082.201437][T10694] Unknown ioctl -1069001168 [ 1082.215438][T10694] Unknown ioctl -2138810781 [ 1082.258076][T10694] Unknown ioctl -1069001168 [ 1082.458246][ T5] usb 6-1: USB disconnect, device number 44 [ 1082.480297][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1082.498937][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1082.553659][T10686] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1082.791502][T10686] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1082.800928][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:39:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x7}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000008060103000000000000000000000000050001000700000057ec6f6d2ac5165cc6242e1b9a8a2571f6590ca50561b89389b4190ee164f3c0b788f2df2602c367a767062bd4421270210bb0d5a8fdbb3fad63cf0f9b9a09d4f5065dfe5cdfaa646a37dc29d3c22442607b86c04f4c4b56356d41dc06eb0cc0865674e5ed119adfd57960e1ae0dda18833cd63c1ff8c47ebe549c3f91c38766"], 0x1c}}, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYRESDEC], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x14, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x6}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x2}]}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x10) 03:39:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000030705000000000000000000000000008aaf858d73b61f7da5134cdae6275992fa4d40bf00ba785c0716279f642bbe207e81bbebb02c70d4c4c3c1fc4fcd7683475dc98de023839ecc45c0f1075870847444e693a4417547e794baf63b36e2a8849e7db25c951db612a99b1dc3c60fb90a1891d31474c1a084185f641d1f4a2ba53379a1441a7357d180a55b38ddd58bbfa0a0e75ab466301778ec5102de86d3f512f6380000"], 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r3 = open(&(0x7f0000000100)='./bus\x00', 0x143042, 0x0) sendfile(r3, r2, 0x0, 0x283) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000180)) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x18dab, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x88, 0x10, 0xffffff1f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x304}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x88}}, 0x8000) 03:39:05 executing program 3: r0 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x4000, 0x100000000}) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0xa00000, 0x2, 0x7f, r1, 0x0, &(0x7f0000000040)={0x380006, 0x9c, [], @value=0x20}}) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') 03:39:05 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff76800008240201000000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:39:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x2e]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x1412, 0x800, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008040}, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000200)) dup3(r2, r0, 0x80000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000080601030000000000000000000000000500a718ae1b76f1"], 0x1c}}, 0x0) [ 1083.273393][ T28] audit: type=1800 audit(1590982745.630:51): pid=10730 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15864 res=0 03:39:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x11) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x100, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1b) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000600)) [ 1083.377277][ T3219] usb 6-1: new high-speed USB device number 45 using dummy_hcd 03:39:05 executing program 1: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x50, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x25}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000090}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0) [ 1083.637041][ T3219] usb 6-1: Using ep0 maxpacket: 8 03:39:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e23, 0x7fffffff, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}, {0xa, 0x4e21, 0x2, @mcast2, 0xfffffffd}, 0x33ba, [0xfffffffd, 0x58, 0xfffffffd, 0x972, 0x4, 0x0, 0x7fff, 0x1f]}, 0x5c) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000001) [ 1083.768981][ T3219] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1083.816942][ T3219] usb 6-1: config 0 has no interface number 0 [ 1083.823199][ T3219] usb 6-1: config 0 interface 18 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1083.888337][ T3219] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1083.919421][ T3219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:39:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) [ 1083.962629][ T3219] usb 6-1: config 0 descriptor?? 03:39:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'gretap0\x00', 0x3}, 0x18) [ 1084.266235][ T3219] usb 6-1: USB disconnect, device number 45 03:39:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x8}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:07 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x4}], {}, [{}, {0x8, 0x6}, {0x8, 0x1}, {}]}, 0x4c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x800000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000740)={@empty}, 0x14) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 03:39:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x3d08, 0xd, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x3ce0, 0x3, 0x0, 0x1, [{0x2564, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xe8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x62, 0x1, "b5ce3b80311cec106b278227958346b21870bf9ba8b21c908a4783154ef7cfd9e192c659540de74fbbd1895b443ab935ea1b972819b0f949c40fa18943b39255b44343521ab4245c7fe74cb00085d07b2f3a0ac9aac2637e9a3e677ff8fd"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x2120, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6d, 0x1, "936e4eaa1a721beebf8c8366d19e7634abffe5fd279f5713dc0696385d46c409fdc41af6793c55caa4a3a9228922d5efb83e2a8f7781fa88ec591a67d476e8f1a2cd290c9ddcb9fb7a7878eb35a359204e735509cf1efdc91201918d1e09192a816e743aef4317fe6f"}, @NFTA_DATA_VALUE={0x7e, 0x1, "049e71987c5dedbf35b7daffe3097c3b4c35c462bcb6f183c80a1fce91fdade7fbb6f49af932b9c9b291a0736a8f487bd8fc6fae4fff374ce604068ffd36933627b02f231574644e8e234eed6856ea8fee6d60207d8c4b2758f44259e745cfd5002186ad8980d5ccbeba107ebfcf866c1a350e2bf1adb044120a"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x22, 0x1, "83ba57a7f7acfc4c45129157b6cdbe7952530a51cddb1cb4ef093ff592b3"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x318, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x64, 0x1, "3dfe9fa19b9779ac1afec1178035e3ba0eb3022f386e44a91ab080caf12488ef5ecb3ef1e7ee69784b1f67c3b138955703450c3177e0970a01a9bf4f9b8d8d2e982e9def9bb0d73106c37d953aead856064054c9aaa208f9d5f0f1a1d97768e0"}, @NFTA_DATA_VALUE={0x8a, 0x1, "3c2e744f4193bda813acdddbcbafb93ae18208d907012cb8669210d89c5d53903e705903f21eaebe4ddd5f93193a8331507149111ee025fc29421f6d466e030830f104625e053ea4267bf59bec0d605bf680dfcfeb3b98a4139c776816a75700b1c6b672fba914047892c9979a030c497e92b321a9ed4abdec1872b3dd7d92829b261a5d853d"}, @NFTA_DATA_VALUE={0x87, 0x1, "0039252a596a3b54f3321fc563e690b99fc4cd307248c1abaee89b700b3deba40b43e3fb12849c99ff04eb8dd2aaa97a6a7dac89f96a02bb7535cc4e5d53084f10869fe9ddb63b4746ebf721c08d2b5347ddd3d6d39f2603705b96aeae5b8d46ef5553b87c0ae9f3ba8dc951088ecd0c08d970fc16dad40d8f3db8eda73186df9482ad"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x97, 0x1, "7b53bb700151842c0196fe06bc6ec844f99e7dbb438bb5361140737747f73621ced0dd811551d937b6e747cd19b874e9c43cf978045ae409950ad587a49aaa9c8f9439afd47e9e4630922bb75b63272876890e004bf988de8b25320f906bfefaaa9e3ae6d6bba023750def2f0f741d65a2dd36c23ee72292620feb5a2ce88aeccd659608ab0b3ac2ac0b1741d03b4048b4a631"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0x1380, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x24c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xfd, 0x1, "463e86696ca9a5bf903c1f5098c61a1ad7c52579f864a77490f9e0ed1909a15dcf2d826ec037cb5857ffcb461ee4ec9ccd8fe277815544b66c4d2b72d075eaa2e01a49c95a5c8d350f63545791174fb0ad6d51e97d4b535fb0e3c00f749b8bf36b73ae6fe88227d36c22a7a6f41a22485a58c1c95b324805de95d9f6a9c39da46b8589fe579e1d5eb610ca91295415d98fd908da66875b9da9cfd3414ed7eb9ee2702682929d9ffa8f6570cb86ff51013007aff6c89556b592ac4ee8ca411fa8edff8aa4cfbe93e4560d4c70654ecd084922e4580227b66954b3c651f3a78ce7c021af80e7e653ca5ff6fa0fa8d3d75d4fb65d43fafb00382f"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1c047b4d9ef4fafe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xad}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x1118, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x87, 0x1, "314780a822cc1c598e12f656d4428d6b3c6a89540363c70f7d029eada887c6914454fbd3f6a3a4ca3dc4bce82a8def0150d2a2ec017752c4fd548ba8c2808d73e75a606308db534eb2251bf5498968fba13bc5f659ff09beedd2f974a5b3a45693aac2398595e2d537f4d99936d0293a9d0e2f752e200ee4a3222b235e430ea99d9ced"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x18, 0x1, "1ede7d46da09a70ffabd4216ac0d539618913399"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}, {0x4}, {0x204, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0x74, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6e, 0x1, "d7b3abe710c44fc8064990952fd888f3fe131fa777ea246d1ba3bb83e02dc41e969aed21550da98b4d1a5a7a78bf352c1fa4890a979fc7ba1600598de27464497c76bb71278d7c2c330dc8a2e3c5188347b625f55b40b933d618da9798a1d1e7e822de434b4babc529d9"}]}, @NFTA_SET_ELEM_KEY={0x178, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x88, 0x1, "800ec8642fe162311b82088c5e1170c342bd7858f8b2fe0bfeb9ad632dddacfbb92521f652af5d52c2d868719269ef1f56b028c443797d8db839abfd720b44bbf01580d49222847b7960cac04a18502da8948490ddeb584e26b327af85db05480627a68fe020c80c051f18006a495e10c4e0a7a776b4f2eee097f7743acc59975aae9ed5"}, @NFTA_DATA_VALUE={0x4e, 0x1, "46b560a9b99619db98ae352718323ae4fe81ac582fc577ad5c35017aebb14960552c151d839a1ac8e9806a6b8ca46016e7a3fc6e42997f09692452cf8eec9e1f950b54d52c0d3681bf16"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}, {0x1e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x178, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb8, 0x1, "1861c197c5933c5e7dfd8e33e887e77a3eca80cb65899edfed6956191c639fa78576c09e42f163e5a5f0e128c9a39b7a162ea18d98c8468a130c2a3e2f7925f74f0e4ac42636f43fa68a4bf922a77a441c53db8db4fa0ccc83227a9a1df508ccd14c707582f004a38fc6d8640a613fdf58a4f12f93b25bd8745e733c6aafc8704c88ab9483e8ea867692faca2de0c105945e6a90efc9fb01bc7ce909e5b61b15b983a47785c70e526e1a633e2ca542f6811be00c"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xea9c4caa460c0272}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x19, 0x1, "5f83ca7f22cf8dcc16ca1d9d3b9a902428933f25ce"}]}, @NFTA_SET_ELEM_DATA={0x68, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x62, 0x1, "bdd3a6fa854ac65188ccb98e6c0d2621b0752f4017d69446017ff2bd8c8b979a9acc7b9fd12e789985bcce770c2939c4bce6cc4407a4747f1df09198ae23b16d87ed28820c7f0baaff288622c245b51177732e3a74a3b0f68c96aafb3576"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3d08}, 0x1, 0x0, 0x0, 0x40}, 0x801) 03:39:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xd811) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x6, @multicast2, 0x2e01, 0x0, 'dh\x00'}, 0x2c) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x20, 0x3220c5bf767677e0) mmap$snddsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x40010, r3, 0x10000) 03:39:07 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0e"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:39:07 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x44]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000806ec020000000000000000000000000500010007000000"], 0x1c}}, 0x0) 03:39:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xd811) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x6, @multicast2, 0x2e01, 0x0, 'dh\x00'}, 0x2c) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x20, 0x3220c5bf767677e0) mmap$snddsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x40010, r3, 0x10000) [ 1085.150794][T10824] overlayfs: filesystem on './file0' not supported as upperdir 03:39:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xd811) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x6, @multicast2, 0x2e01, 0x0, 'dh\x00'}, 0x2c) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x20, 0x3220c5bf767677e0) mmap$snddsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x40010, r3, 0x10000) 03:39:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x40162, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0xfffffff, 0x4, 0x4, r1, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0x80044dfe, &(0x7f0000000000)) 03:39:07 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x4}], {}, [{}, {0x8, 0x6}, {0x8, 0x1}, {}]}, 0x4c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x800000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000740)={@empty}, 0x14) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1085.286857][T10175] usb 6-1: new high-speed USB device number 46 using dummy_hcd 03:39:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 1085.556839][T10175] usb 6-1: Using ep0 maxpacket: 8 [ 1085.697625][T10175] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1085.714282][T10175] usb 6-1: config 0 has no interface number 0 [ 1085.776825][T10175] usb 6-1: config 0 interface 18 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1085.840227][T10175] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 1085.883645][T10175] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1085.940300][T10175] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.962798][T10175] usb 6-1: config 0 descriptor?? [ 1086.058934][T10175] snd-usb-audio: probe of 6-1:0.18 failed with error -12 [ 1086.316272][ T3140] usb 6-1: USB disconnect, device number 46 03:39:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x48}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xd811) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x6, @multicast2, 0x2e01, 0x0, 'dh\x00'}, 0x2c) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x20, 0x3220c5bf767677e0) mmap$snddsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x40010, r3, 0x10000) 03:39:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) dup(r1) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 03:39:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x16}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x110, 0x0, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000280), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x2}}}, {{@arp={@remote, @empty, 0xff000000, 0xffffff00, 0xc, 0xc, {@mac=@multicast, {[0xff, 0x0, 0xff, 0x7f, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x9, 0x5, 0x6, 0xff01, 0x40, 0x800, 'wg2\x00', 'veth0_to_team\x00', {0xff}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x100, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) r4 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xba, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) r5 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xba, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) r6 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xba, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x95821149c37a3993}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r6) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x11}, 0x40084) tee(r0, r1, 0x8, 0x526226826cb81bbe) setsockopt$inet_tcp_int(r3, 0x6, 0x5, &(0x7f0000000200)=0x20, 0x4) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000040)) 03:39:09 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0e"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:39:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x4c]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:09 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(0xffffffffffffffff, 0x2008003) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYRES32=r0, @ANYRES64=r2, @ANYRESHEX, @ANYBLOB="10130a0000ff070ed17e8c67bff39904dcb7c6de265ccdf42eb2a7209c0e"], 0x4}}, 0x8010) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) r3 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f00000001c0), 0x4) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2300cfa70c3b0800000000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fcdbdf250400000014000600fe98000000000000000000000000000108000400ffffffff0800080064010101"], 0x38}, 0x1, 0x0, 0x0, 0x82}, 0xc000044) open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f0000000140)=[{0x6, 0x77, 0x0, 0x1}]}, 0x10) connect$unix(r3, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) [ 1086.914045][T10904] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1086.972553][ T28] audit: type=1804 audit(1590982749.330:52): pid=10904 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir206584202/syzkaller.TiW8uT/1172/bus" dev="sda1" ino=16019 res=1 03:39:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), 0x14) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1000}, &(0x7f00000001c0)=0x8) fchmodat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={r3}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r3, 0x80000001, 0x30}, 0xc) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000300)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5, 0x0, 0x0, 0xa}, {0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x5, 0xffffffffffff90a7}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) lsetxattr$security_ima(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.ima\x00', &(0x7f00000002c0)=@md5={0x1, "c7f463c8a60ee334ce905c5055d1fc45"}, 0x11, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) getpid() openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x212c01, 0x0) 03:39:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x16}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x110, 0x0, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000280), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x2}}}, {{@arp={@remote, @empty, 0xff000000, 0xffffff00, 0xc, 0xc, {@mac=@multicast, {[0xff, 0x0, 0xff, 0x7f, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x9, 0x5, 0x6, 0xff01, 0x40, 0x800, 'wg2\x00', 'veth0_to_team\x00', {0xff}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x100, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) r4 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xba, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) r5 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xba, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) r6 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xba, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x95821149c37a3993}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r6) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000000001000b0000000000000000070000012000170000000008000000060000000800000007000007ff00000001000000002000170000000051000000000000000500000000000000040000907c00000003180017000000000000000fff0000000100df04e7000080012c0017000000000300000006000000050000f9c80000000000000003000000050800154000000002000000000000000000000000aa08f561dc37b9b71364743dcbc8a60ea2c19d714ff89b1c908f7c786ee312ed197f725c96e8255367f5190ce64ef26d07f70862123a8585c3505aea90f34bd12ede54586cae75095bc13d00e4d29177b6862c3e459007260485d8632577e6caefb59fadd4c4ea9056cf3d6b697ec1aeb18ea0a2764f8d1ae52e203d51f7e19c52578c2d5adbc439d497d91eb2a0ca6b872689f8ee57379b49140a3110da71672fcbae98ccd57a1c57eb"], 0xa0}, 0x1, 0x0, 0x0, 0x11}, 0x40084) tee(r0, r1, 0x8, 0x526226826cb81bbe) setsockopt$inet_tcp_int(r3, 0x6, 0x5, &(0x7f0000000200)=0x20, 0x4) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000040)) [ 1087.216854][ T3140] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1087.476797][ T3140] usb 6-1: Using ep0 maxpacket: 8 [ 1087.618822][ T3140] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1087.642475][ T3140] usb 6-1: config 0 has no interface number 0 [ 1087.651968][ T3140] usb 6-1: config 0 interface 18 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 03:39:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r2, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f0000000140)={0x18, 0x0, 0x0, 0xb9}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x6, &(0x7f00000000c0)=@raw=[@generic={0x40, 0xa, 0xa, 0x6, 0x200}, @generic={0xeb, 0x0, 0x2, 0x4, 0x7ff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9d5}, @map={0x18, 0x4, 0x1, 0x0, r1}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x13db, 0xfffffffd}, 0x10}, 0x78) [ 1087.663554][ T3140] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 1087.675397][ T3140] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1087.686283][ T3140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.709051][ T3140] usb 6-1: config 0 descriptor?? [ 1087.770174][ T3140] snd-usb-audio: probe of 6-1:0.18 failed with error -12 03:39:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[], 0x8) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000100)) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e20, 0xff8, @private0={0xfc, 0x0, [], 0x1}, 0x5}}}, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r4, 0x101, 0xfffc}, &(0x7f0000000200)=0x8) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000000c0)) flistxattr(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'icmp\x00'}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1087.991104][ T3130] usb 6-1: USB disconnect, device number 47 03:39:10 executing program 0: lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x3b4, &(0x7f0000001040)={[{0x5d, 0x4e00, "2a1830ce0aeedc1bca1220ca3583543a5c0f1bb3abe6b69ae5542cbdb258df0826257805ebf9330cdc3bb67ca5dbdabc94d9f6fe96b5e2206b99ae3d41174af8d68691b933baa244ff6ec1aeecf8ef48931325eb4d03ca88b61449c828"}, {0x2e, 0x4e00, "d3c2dfd7b8cfffeb7f998a6ccbc8a0237b44f89de9e4efc5ca049d8d37606f9144cd265b470903bf30f6542b2576"}, {0xcc, 0x4e00, "17d1b05e7ce19c3994f30d00301f0e2d23dbd8b26ea202e0e76d61df8ea2655f1aa56a5c95865cc4957819fe9e51acbd2fee10ce52c0a2a2f2760ef8138a7cb47ab2e85ead322d8a2ba71e5df8d952b7341c31dafc47a13051830e24b0efbc2484c678c59ed457b849ad43c6772fc57ac1a525c6a994ab425bee33f5c4a1ae472eee32a2231471b7a9f06d31a6b9514ecae61fde829dc2bd203eaf2c7504d7f5ace4e340f992cb2e7014ba981647f193647a2e509e4c77ca43271533a011e8042b71ce13b2c482e05952d80e"}, {0x62, 0x4e00, "a79ce24d0fa76289420e0052a447da4edb3b91ee954cdab0b641d5439416c2cf0622c55b768ed6946d25449cad84d079be3ee1215c05690a5ced4a44c37080364cb13548f82c9c3b461ea44cd29458890b49045815a1a3664aeb3fc1262784bb86a4"}, {0xbc, 0x4e00, "6da7d3ec3f23f4d3755bd890d074e8ac1500f0e289edb17f73e05e84028226dca77bd8bd56644683a541cb7e2660f4dbe41487018d3091829dd18944204a432ec1897b6cf5b9ee7959302fed620dd0fccf15b59c493b0bfe2c9fb1efee953aaac6fc91c8465cb1b31128155b3348567e06f36843a0eee508f0b34331e51ad3530f1c4b7a0b3f26887a8d1f71b4d179623ca1770611bac21ca4707e34ed452f44a29c1da1a09daa6c72a343d4b6e2f8f169c3524840dcf4547e61f933"}, {0xe3, 0x4e00, "62b6669b38d3e3c31d10f910bb9da9c2b69e5174248b778e90dd4aeac6e7c3b71467b2153924ada0edb905715c79259444496de47aa005ced4b9959bbc99b8df0be330ce70a251ca85c92df2f025de02e9b859568cc2b109279161adbb482214410f075d0af3a2bae405ab985779501954d63a235d75f6ea575483d660d9ac4a3ccc8d52b689e2759df3622c73efa33befad8b5710d8318a320777f782dcaa91fbe1cb21d5583f3bb219f640292da369472209742fbe527104d0100a01681367658859033a0a73f271f42ca0a300556ae04b19aef0a33255ed694ff1bce5eb75779e29"}, {0x35, 0x4e00, "23496da9f51168122d7c1c3461e7c5b18e584a8d189e195c942281c917d0eb601406601aa481f465d028dac846f75f2d040253d7d7"}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040)=0x2, 0x4) dup2(r1, r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000)={0x2, 'nr0\x00', {0x4}, 0x1}) fallocate(r4, 0x0, 0x0, 0x8020001) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r6, &(0x7f0000000280), 0x1033b) fdatasync(r6) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x0, r6}) 03:39:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x300}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r7, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010003b0dfff30000000000000000e1ff", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="140012000b000100627269646765f3055af7ba5f6836cdb689a8"], 0x3c}}, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000002c0)={0x0, @tipc=@name={0x1e, 0x2, 0x1, {{0x2, 0x1}}}, @xdp={0x2c, 0x8, r7, 0xd}, @rc={0x1f, @any, 0xff}, 0x100, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)='lo\x00', 0x6, 0x7ff, 0x5}) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r1, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000140)={0x990000, 0xb39, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9c0909, 0x4, [], @p_u16=&(0x7f0000000080)=0x9}}) r9 = syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r9, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r10, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14200006", @ANYRES16=r10, @ANYBLOB="100023bd7000fcdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x80) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000080601030000000000001ab4aae751312721be6ed6ea58f900000000cd0f1fdb46a2ab125a4c87da2c4c806d71ab0b1048c0cac8f0e510330e7527ab4f0cfcfc7f02ca81983515fbf2e90b65a78111fa485b77e500"/102], 0x20}}, 0x0) 03:39:10 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r2 = perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x4, 0xd8, 0x3b, 0x7, 0x0, 0x6, 0xd2224, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x12080, 0x10000, 0x96, 0x9, 0x7, 0x800, 0x5}, 0xffffffffffffffff, 0xf, r1, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x351) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r0, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000f1dff8)={0x0, r5}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYRESHEX, @ANYBLOB="7f1d373ee55bf9d2ff5d1506d4ddcf90f59d322dc370166f", @ANYRES16=r2], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f0000000800)=0xe8) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8088}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006011300000000000851000000200000085010000000080009500c20a0000000095007a1200000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, [0x0, 0xff, 0xff, 0x3d, 0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_mount_image$reiserfs(&(0x7f00000002c0)='reiserfs\x00', &(0x7f00000005c0)='./file0\x00', 0x7, 0x1, &(0x7f00000006c0)=[{&(0x7f0000000600)="b515a91c593b6fe60e1da3bd6dccbe957c0ee158a79d60afb1b33f6099ccca16d547e779a7b38d2437f4db962cbaead69993ce11130620bbce027474359d0c56ba16b280182be4b7968d40268cc62073ee159ca68d945d4f58a9753003e84ff0859c7d14f5ed7977bd5385d90ec8443f31e1db3ea6e07d97f16837b0d3e14f4fe99ddd2db8c72e4e409a9462fca942", 0x8f, 0x3a55}], 0x800000, &(0x7f0000000700)={[{@conv='conv'}], [{@uid_lt={'uid<'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x66, 0x35, 0x0, 0x30, 0x66, 0x66, 0x30], 0x2d, [0x61, 0x62, 0x34, 0x35], 0x2d, [0x36, 0x33, 0x36, 0x36], 0x2d, [0x32, 0x32, 0x0, 0x62], 0x2d, [0x31, 0x30, 0x33, 0x36, 0x32, 0x34, 0x31, 0x35]}}}, {@uid_lt={'uid<'}}, {@subj_type={'subj_type', 0x3d, '&vmnet0'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '['}}, {@seclabel='seclabel'}]}) 03:39:10 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0e"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) [ 1088.762176][T10991] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "uid<00000000000000000000" [ 1088.863854][T10998] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1088.906481][T10175] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1089.096068][T10990] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1089.156333][T10175] usb 6-1: Using ep0 maxpacket: 8 [ 1089.167590][T10991] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "uid<00000000000000000000" 03:39:11 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x60]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) [ 1089.287753][T10175] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1089.324409][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1089.375643][T10175] usb 6-1: config 0 has no interface number 0 [ 1089.429850][T10175] usb 6-1: config 0 interface 18 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 03:39:11 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r2 = perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x4, 0xd8, 0x3b, 0x7, 0x0, 0x6, 0xd2224, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x12080, 0x10000, 0x96, 0x9, 0x7, 0x800, 0x5}, 0xffffffffffffffff, 0xf, r1, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x351) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r0, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000f1dff8)={0x0, r5}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYRESHEX, @ANYBLOB="7f1d373ee55bf9d2ff5d1506d4ddcf90f59d322dc370166f", @ANYRES16=r2], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f0000000800)=0xe8) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8088}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006011300000000000851000000200000085010000000080009500c20a0000000095007a1200000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, [0x0, 0xff, 0xff, 0x3d, 0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_mount_image$reiserfs(&(0x7f00000002c0)='reiserfs\x00', &(0x7f00000005c0)='./file0\x00', 0x7, 0x1, &(0x7f00000006c0)=[{&(0x7f0000000600)="b515a91c593b6fe60e1da3bd6dccbe957c0ee158a79d60afb1b33f6099ccca16d547e779a7b38d2437f4db962cbaead69993ce11130620bbce027474359d0c56ba16b280182be4b7968d40268cc62073ee159ca68d945d4f58a9753003e84ff0859c7d14f5ed7977bd5385d90ec8443f31e1db3ea6e07d97f16837b0d3e14f4fe99ddd2db8c72e4e409a9462fca942", 0x8f, 0x3a55}], 0x800000, &(0x7f0000000700)={[{@conv='conv'}], [{@uid_lt={'uid<'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x66, 0x35, 0x0, 0x30, 0x66, 0x66, 0x30], 0x2d, [0x61, 0x62, 0x34, 0x35], 0x2d, [0x36, 0x33, 0x36, 0x36], 0x2d, [0x32, 0x32, 0x0, 0x62], 0x2d, [0x31, 0x30, 0x33, 0x36, 0x32, 0x34, 0x31, 0x35]}}}, {@uid_lt={'uid<'}}, {@subj_type={'subj_type', 0x3d, '&vmnet0'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '['}}, {@seclabel='seclabel'}]}) [ 1089.473380][T10175] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 1089.497167][T10175] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1089.535819][T10175] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.577382][T10175] usb 6-1: config 0 descriptor?? [ 1089.618747][T10175] snd-usb-audio: probe of 6-1:0.18 failed with error -12 [ 1089.763233][T11060] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "uid<00000000000000000000" [ 1089.844586][ T3130] usb 6-1: USB disconnect, device number 48 03:39:12 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r2 = perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x4, 0xd8, 0x3b, 0x7, 0x0, 0x6, 0xd2224, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x12080, 0x10000, 0x96, 0x9, 0x7, 0x800, 0x5}, 0xffffffffffffffff, 0xf, r1, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x351) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r0, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000f1dff8)={0x0, r5}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYRESHEX, @ANYBLOB="7f1d373ee55bf9d2ff5d1506d4ddcf90f59d322dc370166f", @ANYRES16=r2], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f0000000800)=0xe8) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8088}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006011300000000000851000000200000085010000000080009500c20a0000000095007a1200000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, [0x0, 0xff, 0xff, 0x3d, 0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_mount_image$reiserfs(&(0x7f00000002c0)='reiserfs\x00', &(0x7f00000005c0)='./file0\x00', 0x7, 0x1, &(0x7f00000006c0)=[{&(0x7f0000000600)="b515a91c593b6fe60e1da3bd6dccbe957c0ee158a79d60afb1b33f6099ccca16d547e779a7b38d2437f4db962cbaead69993ce11130620bbce027474359d0c56ba16b280182be4b7968d40268cc62073ee159ca68d945d4f58a9753003e84ff0859c7d14f5ed7977bd5385d90ec8443f31e1db3ea6e07d97f16837b0d3e14f4fe99ddd2db8c72e4e409a9462fca942", 0x8f, 0x3a55}], 0x800000, &(0x7f0000000700)={[{@conv='conv'}], [{@uid_lt={'uid<'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x66, 0x35, 0x0, 0x30, 0x66, 0x66, 0x30], 0x2d, [0x61, 0x62, 0x34, 0x35], 0x2d, [0x36, 0x33, 0x36, 0x36], 0x2d, [0x32, 0x32, 0x0, 0x62], 0x2d, [0x31, 0x30, 0x33, 0x36, 0x32, 0x34, 0x31, 0x35]}}}, {@uid_lt={'uid<'}}, {@subj_type={'subj_type', 0x3d, '&vmnet0'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '['}}, {@seclabel='seclabel'}]}) [ 1090.216327][T11074] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "uid<00000000000000000000" 03:39:12 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc006, 0x0) [ 1090.456734][ T28] audit: type=1800 audit(1590982752.801:53): pid=10975 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15876 res=0 [ 1090.526660][T10998] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1090.535237][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:39:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r1, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000000)) 03:39:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:39:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="0a000000080601030000000000000000000000000500010007000000"], 0x1c}}, 0x0) [ 1090.826173][ T12] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1091.077353][ T12] usb 6-1: Using ep0 maxpacket: 8 03:39:13 executing program 0: lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x3b4, &(0x7f0000001040)={[{0x5d, 0x4e00, "2a1830ce0aeedc1bca1220ca3583543a5c0f1bb3abe6b69ae5542cbdb258df0826257805ebf9330cdc3bb67ca5dbdabc94d9f6fe96b5e2206b99ae3d41174af8d68691b933baa244ff6ec1aeecf8ef48931325eb4d03ca88b61449c828"}, {0x2e, 0x4e00, "d3c2dfd7b8cfffeb7f998a6ccbc8a0237b44f89de9e4efc5ca049d8d37606f9144cd265b470903bf30f6542b2576"}, {0xcc, 0x4e00, "17d1b05e7ce19c3994f30d00301f0e2d23dbd8b26ea202e0e76d61df8ea2655f1aa56a5c95865cc4957819fe9e51acbd2fee10ce52c0a2a2f2760ef8138a7cb47ab2e85ead322d8a2ba71e5df8d952b7341c31dafc47a13051830e24b0efbc2484c678c59ed457b849ad43c6772fc57ac1a525c6a994ab425bee33f5c4a1ae472eee32a2231471b7a9f06d31a6b9514ecae61fde829dc2bd203eaf2c7504d7f5ace4e340f992cb2e7014ba981647f193647a2e509e4c77ca43271533a011e8042b71ce13b2c482e05952d80e"}, {0x62, 0x4e00, "a79ce24d0fa76289420e0052a447da4edb3b91ee954cdab0b641d5439416c2cf0622c55b768ed6946d25449cad84d079be3ee1215c05690a5ced4a44c37080364cb13548f82c9c3b461ea44cd29458890b49045815a1a3664aeb3fc1262784bb86a4"}, {0xbc, 0x4e00, "6da7d3ec3f23f4d3755bd890d074e8ac1500f0e289edb17f73e05e84028226dca77bd8bd56644683a541cb7e2660f4dbe41487018d3091829dd18944204a432ec1897b6cf5b9ee7959302fed620dd0fccf15b59c493b0bfe2c9fb1efee953aaac6fc91c8465cb1b31128155b3348567e06f36843a0eee508f0b34331e51ad3530f1c4b7a0b3f26887a8d1f71b4d179623ca1770611bac21ca4707e34ed452f44a29c1da1a09daa6c72a343d4b6e2f8f169c3524840dcf4547e61f933"}, {0xe3, 0x4e00, "62b6669b38d3e3c31d10f910bb9da9c2b69e5174248b778e90dd4aeac6e7c3b71467b2153924ada0edb905715c79259444496de47aa005ced4b9959bbc99b8df0be330ce70a251ca85c92df2f025de02e9b859568cc2b109279161adbb482214410f075d0af3a2bae405ab985779501954d63a235d75f6ea575483d660d9ac4a3ccc8d52b689e2759df3622c73efa33befad8b5710d8318a320777f782dcaa91fbe1cb21d5583f3bb219f640292da369472209742fbe527104d0100a01681367658859033a0a73f271f42ca0a300556ae04b19aef0a33255ed694ff1bce5eb75779e29"}, {0x35, 0x4e00, "23496da9f51168122d7c1c3461e7c5b18e584a8d189e195c942281c917d0eb601406601aa481f465d028dac846f75f2d040253d7d7"}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040)=0x2, 0x4) dup2(r1, r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000)={0x2, 'nr0\x00', {0x4}, 0x1}) fallocate(r4, 0x0, 0x0, 0x8020001) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r6, &(0x7f0000000280), 0x1033b) fdatasync(r6) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x0, r6}) 03:39:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000080e0103000000000000000000000000050001000700080097360ab01c3e373c8d17525868a71aabe6680f6ddf50f1c463b1c2e882fa50ea9da03c37472b85e7daab324f80086ab525adfc7c38aaa670ea581f4f3550299f3fd8f4714360e0a7174dd3cc4abf9b41559e8eff4450bda330a3477b8863f0c4fc607deb1d4f0de9fce56fe73a1ffdd429a1e70800000000000000025c855a40b8d6c75ce1850b7637753410b24b90fa07482081bf4cd449a33a6614c15d3e4e541af6d6d7399dcedffa00c8e2b8092838f91676fb853b07b7b8279e617c88badabdf94304ac9cbf7640eee211011155de"], 0x1c}}, 0x0) 03:39:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x500}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:13 executing program 3: lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x3b4, &(0x7f0000001040)={[{0x5d, 0x4e00, "2a1830ce0aeedc1bca1220ca3583543a5c0f1bb3abe6b69ae5542cbdb258df0826257805ebf9330cdc3bb67ca5dbdabc94d9f6fe96b5e2206b99ae3d41174af8d68691b933baa244ff6ec1aeecf8ef48931325eb4d03ca88b61449c828"}, {0x2e, 0x4e00, "d3c2dfd7b8cfffeb7f998a6ccbc8a0237b44f89de9e4efc5ca049d8d37606f9144cd265b470903bf30f6542b2576"}, {0xcc, 0x4e00, "17d1b05e7ce19c3994f30d00301f0e2d23dbd8b26ea202e0e76d61df8ea2655f1aa56a5c95865cc4957819fe9e51acbd2fee10ce52c0a2a2f2760ef8138a7cb47ab2e85ead322d8a2ba71e5df8d952b7341c31dafc47a13051830e24b0efbc2484c678c59ed457b849ad43c6772fc57ac1a525c6a994ab425bee33f5c4a1ae472eee32a2231471b7a9f06d31a6b9514ecae61fde829dc2bd203eaf2c7504d7f5ace4e340f992cb2e7014ba981647f193647a2e509e4c77ca43271533a011e8042b71ce13b2c482e05952d80e"}, {0x62, 0x4e00, "a79ce24d0fa76289420e0052a447da4edb3b91ee954cdab0b641d5439416c2cf0622c55b768ed6946d25449cad84d079be3ee1215c05690a5ced4a44c37080364cb13548f82c9c3b461ea44cd29458890b49045815a1a3664aeb3fc1262784bb86a4"}, {0xbc, 0x4e00, "6da7d3ec3f23f4d3755bd890d074e8ac1500f0e289edb17f73e05e84028226dca77bd8bd56644683a541cb7e2660f4dbe41487018d3091829dd18944204a432ec1897b6cf5b9ee7959302fed620dd0fccf15b59c493b0bfe2c9fb1efee953aaac6fc91c8465cb1b31128155b3348567e06f36843a0eee508f0b34331e51ad3530f1c4b7a0b3f26887a8d1f71b4d179623ca1770611bac21ca4707e34ed452f44a29c1da1a09daa6c72a343d4b6e2f8f169c3524840dcf4547e61f933"}, {0xe3, 0x4e00, "62b6669b38d3e3c31d10f910bb9da9c2b69e5174248b778e90dd4aeac6e7c3b71467b2153924ada0edb905715c79259444496de47aa005ced4b9959bbc99b8df0be330ce70a251ca85c92df2f025de02e9b859568cc2b109279161adbb482214410f075d0af3a2bae405ab985779501954d63a235d75f6ea575483d660d9ac4a3ccc8d52b689e2759df3622c73efa33befad8b5710d8318a320777f782dcaa91fbe1cb21d5583f3bb219f640292da369472209742fbe527104d0100a01681367658859033a0a73f271f42ca0a300556ae04b19aef0a33255ed694ff1bce5eb75779e29"}, {0x35, 0x4e00, "23496da9f51168122d7c1c3461e7c5b18e584a8d189e195c942281c917d0eb601406601aa481f465d028dac846f75f2d040253d7d7"}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040)=0x2, 0x4) dup2(r1, r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000)={0x2, 'nr0\x00', {0x4}, 0x1}) fallocate(r4, 0x0, 0x0, 0x8020001) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r6, &(0x7f0000000280), 0x1033b) fdatasync(r6) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x0, r6}) [ 1091.196990][ T12] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1091.206506][ T12] usb 6-1: config 0 has no interface number 0 03:39:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r2, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x800, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r7, r6, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r5, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) write$UHID_DESTROY(r3, &(0x7f0000000180), 0x4) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$peek(0x2, r1, &(0x7f0000000040)) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x8100, 0x0) 03:39:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x73]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) [ 1091.247959][ T12] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1091.312068][ T12] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1091.348728][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.377557][ T12] usb 6-1: config 0 descriptor?? [ 1091.407702][T11088] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1091.644114][ T4250] usb 6-1: USB disconnect, device number 49 03:39:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000005440)=0x0, &(0x7f0000005480)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r4], 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r11, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff30000000000000000e1ff", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB="140012002919f277e2081b56b777"], 0x3c}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000005ec0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005e80)={&(0x7f00000054c0)={0x9a4, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xffffff7f}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x19}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x4c5d}}, {0x8}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x401}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x3c, 0x4, [{0x81, 0x2, 0x1d, 0x400}, {0x6, 0x2, 0x8}, {0x7, 0x7, 0x91, 0x5}, {0x1, 0x2, 0xfd, 0x1}, {0x81b1, 0x6, 0x80, 0x1ff}, {0x3, 0x26, 0x0, 0x7}, {0x8000, 0xff, 0x0, 0x1}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x63e}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x1f, 0x1, 0x7f, 0x1}, {0xc7, 0xf6, 0x7, 0xfff}, {0x1, 0x3b, 0xc1, 0x2}, {0x7ff, 0x20, 0x9, 0xfffffff7}, {0x9, 0x7, 0x4, 0xfff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x1, 0xff, 0x0, 0x1}, {0x5, 0x40, 0x7, 0xfffffff8}, {0x4f4, 0x7, 0x8, 0xfffffff9}, {0x1, 0x91, 0x7, 0x98}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x8000, 0x9, 0x37, 0xb16}]}}}]}}]}, 0x9a4}, 0x1, 0x0, 0x0, 0x44080}, 0x40c0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 03:39:14 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc006, 0x0) [ 1092.405042][T11174] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1092.511913][T11177] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1092.556092][ T3219] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1092.565186][T11174] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1092.599977][T11174] bond4 (uninitialized): Released all slaves [ 1092.813002][ T3219] usb 6-1: Using ep0 maxpacket: 8 03:39:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x600}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) [ 1092.907534][T11171] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1092.937864][ T3219] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 03:39:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xff]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x44) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) connect$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @empty, 0x1}, 0x10) [ 1092.977154][ T3219] usb 6-1: config 0 has no interface number 0 [ 1092.983312][ T3219] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1093.031328][ T3219] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1093.053764][ T3219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.087331][ T3219] usb 6-1: config 0 descriptor?? [ 1093.107306][T11178] raw-gadget gadget: fail, usb_ep_enable returned -22 03:39:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x7ed1492382d93be}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x48, 0x1, 0x9, 0x101, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x80000001}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 1093.434620][ T3140] usb 6-1: USB disconnect, device number 50 03:39:16 executing program 0: lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x3b4, &(0x7f0000001040)={[{0x5d, 0x4e00, "2a1830ce0aeedc1bca1220ca3583543a5c0f1bb3abe6b69ae5542cbdb258df0826257805ebf9330cdc3bb67ca5dbdabc94d9f6fe96b5e2206b99ae3d41174af8d68691b933baa244ff6ec1aeecf8ef48931325eb4d03ca88b61449c828"}, {0x2e, 0x4e00, "d3c2dfd7b8cfffeb7f998a6ccbc8a0237b44f89de9e4efc5ca049d8d37606f9144cd265b470903bf30f6542b2576"}, {0xcc, 0x4e00, "17d1b05e7ce19c3994f30d00301f0e2d23dbd8b26ea202e0e76d61df8ea2655f1aa56a5c95865cc4957819fe9e51acbd2fee10ce52c0a2a2f2760ef8138a7cb47ab2e85ead322d8a2ba71e5df8d952b7341c31dafc47a13051830e24b0efbc2484c678c59ed457b849ad43c6772fc57ac1a525c6a994ab425bee33f5c4a1ae472eee32a2231471b7a9f06d31a6b9514ecae61fde829dc2bd203eaf2c7504d7f5ace4e340f992cb2e7014ba981647f193647a2e509e4c77ca43271533a011e8042b71ce13b2c482e05952d80e"}, {0x62, 0x4e00, "a79ce24d0fa76289420e0052a447da4edb3b91ee954cdab0b641d5439416c2cf0622c55b768ed6946d25449cad84d079be3ee1215c05690a5ced4a44c37080364cb13548f82c9c3b461ea44cd29458890b49045815a1a3664aeb3fc1262784bb86a4"}, {0xbc, 0x4e00, "6da7d3ec3f23f4d3755bd890d074e8ac1500f0e289edb17f73e05e84028226dca77bd8bd56644683a541cb7e2660f4dbe41487018d3091829dd18944204a432ec1897b6cf5b9ee7959302fed620dd0fccf15b59c493b0bfe2c9fb1efee953aaac6fc91c8465cb1b31128155b3348567e06f36843a0eee508f0b34331e51ad3530f1c4b7a0b3f26887a8d1f71b4d179623ca1770611bac21ca4707e34ed452f44a29c1da1a09daa6c72a343d4b6e2f8f169c3524840dcf4547e61f933"}, {0xe3, 0x4e00, "62b6669b38d3e3c31d10f910bb9da9c2b69e5174248b778e90dd4aeac6e7c3b71467b2153924ada0edb905715c79259444496de47aa005ced4b9959bbc99b8df0be330ce70a251ca85c92df2f025de02e9b859568cc2b109279161adbb482214410f075d0af3a2bae405ab985779501954d63a235d75f6ea575483d660d9ac4a3ccc8d52b689e2759df3622c73efa33befad8b5710d8318a320777f782dcaa91fbe1cb21d5583f3bb219f640292da369472209742fbe527104d0100a01681367658859033a0a73f271f42ca0a300556ae04b19aef0a33255ed694ff1bce5eb75779e29"}, {0x35, 0x4e00, "23496da9f51168122d7c1c3461e7c5b18e584a8d189e195c942281c917d0eb601406601aa481f465d028dac846f75f2d040253d7d7"}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040)=0x2, 0x4) dup2(r1, r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000)={0x2, 'nr0\x00', {0x4}, 0x1}) fallocate(r4, 0x0, 0x0, 0x8020001) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r6, &(0x7f0000000280), 0x1033b) fdatasync(r6) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x0, r6}) 03:39:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000008060103000000000000"], 0x1c}}, 0x4000805) 03:39:16 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc006, 0x0) 03:39:16 executing program 3: lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x3b4, &(0x7f0000001040)={[{0x5d, 0x4e00, "2a1830ce0aeedc1bca1220ca3583543a5c0f1bb3abe6b69ae5542cbdb258df0826257805ebf9330cdc3bb67ca5dbdabc94d9f6fe96b5e2206b99ae3d41174af8d68691b933baa244ff6ec1aeecf8ef48931325eb4d03ca88b61449c828"}, {0x2e, 0x4e00, "d3c2dfd7b8cfffeb7f998a6ccbc8a0237b44f89de9e4efc5ca049d8d37606f9144cd265b470903bf30f6542b2576"}, {0xcc, 0x4e00, "17d1b05e7ce19c3994f30d00301f0e2d23dbd8b26ea202e0e76d61df8ea2655f1aa56a5c95865cc4957819fe9e51acbd2fee10ce52c0a2a2f2760ef8138a7cb47ab2e85ead322d8a2ba71e5df8d952b7341c31dafc47a13051830e24b0efbc2484c678c59ed457b849ad43c6772fc57ac1a525c6a994ab425bee33f5c4a1ae472eee32a2231471b7a9f06d31a6b9514ecae61fde829dc2bd203eaf2c7504d7f5ace4e340f992cb2e7014ba981647f193647a2e509e4c77ca43271533a011e8042b71ce13b2c482e05952d80e"}, {0x62, 0x4e00, "a79ce24d0fa76289420e0052a447da4edb3b91ee954cdab0b641d5439416c2cf0622c55b768ed6946d25449cad84d079be3ee1215c05690a5ced4a44c37080364cb13548f82c9c3b461ea44cd29458890b49045815a1a3664aeb3fc1262784bb86a4"}, {0xbc, 0x4e00, "6da7d3ec3f23f4d3755bd890d074e8ac1500f0e289edb17f73e05e84028226dca77bd8bd56644683a541cb7e2660f4dbe41487018d3091829dd18944204a432ec1897b6cf5b9ee7959302fed620dd0fccf15b59c493b0bfe2c9fb1efee953aaac6fc91c8465cb1b31128155b3348567e06f36843a0eee508f0b34331e51ad3530f1c4b7a0b3f26887a8d1f71b4d179623ca1770611bac21ca4707e34ed452f44a29c1da1a09daa6c72a343d4b6e2f8f169c3524840dcf4547e61f933"}, {0xe3, 0x4e00, "62b6669b38d3e3c31d10f910bb9da9c2b69e5174248b778e90dd4aeac6e7c3b71467b2153924ada0edb905715c79259444496de47aa005ced4b9959bbc99b8df0be330ce70a251ca85c92df2f025de02e9b859568cc2b109279161adbb482214410f075d0af3a2bae405ab985779501954d63a235d75f6ea575483d660d9ac4a3ccc8d52b689e2759df3622c73efa33befad8b5710d8318a320777f782dcaa91fbe1cb21d5583f3bb219f640292da369472209742fbe527104d0100a01681367658859033a0a73f271f42ca0a300556ae04b19aef0a33255ed694ff1bce5eb75779e29"}, {0x35, 0x4e00, "23496da9f51168122d7c1c3461e7c5b18e584a8d189e195c942281c917d0eb601406601aa481f465d028dac846f75f2d040253d7d7"}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040)=0x2, 0x4) dup2(r1, r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000)={0x2, 'nr0\x00', {0x4}, 0x1}) fallocate(r4, 0x0, 0x0, 0x8020001) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r6, &(0x7f0000000280), 0x1033b) fdatasync(r6) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x0, r6}) 03:39:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x700}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000080901030000000000000000220000000500010007000000"], 0x1c}}, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r2 = add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', 0x0) keyctl$link(0x8, r1, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r3, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) r6 = socket(0x11, 0x0, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x804) ioctl$SG_GET_SG_TABLESIZE(r4, 0x227f, &(0x7f0000000080)) [ 1094.895617][ T12] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1095.145751][ T12] usb 6-1: Using ep0 maxpacket: 8 [ 1095.266387][ T12] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1095.274510][ T12] usb 6-1: config 0 has no interface number 0 [ 1095.331567][ T12] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1095.365661][ T12] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1095.374735][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.420024][ T12] usb 6-1: config 0 descriptor?? [ 1095.437039][T11318] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1095.683417][ T3219] usb 6-1: USB disconnect, device number 51 03:39:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x2000}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:18 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 03:39:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x48001, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r2], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x20004005) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001800)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3600f5a3", @ANYRES16=r3, @ANYBLOB="005b29bd7000ffdbdf25010000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x801) 03:39:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELTABLE={0x3c, 0x2, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWOBJ={0x28, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_DATA={0x14, 0x4, 0x0, 0x1, [@NFTA_CT_TIMEOUT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x888e}, @NFTA_CT_TIMEOUT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x809b}]}}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x44, 0x0, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x102, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}], {0x14}}, 0x170}, 0x1, 0x0, 0x0, 0x40}, 0x11) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 1096.585489][ T4250] usb 6-1: new high-speed USB device number 52 using dummy_hcd 03:39:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x2]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) [ 1096.845555][ T4250] usb 6-1: Using ep0 maxpacket: 8 [ 1096.966245][ T4250] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1096.974528][ T4250] usb 6-1: config 0 has no interface number 0 [ 1096.986953][ T4250] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1097.015618][ T4250] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1097.036744][ T4250] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.058125][ T4250] usb 6-1: config 0 descriptor?? [ 1097.097158][T11392] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1097.340620][ T4250] usb 6-1: USB disconnect, device number 52 03:39:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x21) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r1, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r4, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) syz_extract_tcp_res(&(0x7f0000000040), 0x0, 0x0) 03:39:19 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x200080e1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r5], 0x20}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={r5, 0x1, 0x6, @broadcast}, 0x10) r6 = socket(0x11, 0x0, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r6}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e20, 0xff8, @private0={0xfc, 0x0, [], 0x1}, 0x5}}}, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000080)={r4, 0x6d, "57a43a50115620b6b3b1e26eb5497c11b8a1342f54fd930acfc4e745b195b693eabb86615270103eb2021e2c8aafb8f6d515a85a66aa851c9f77f03435b9fd26ef2b563abdf6e1f739d7be67a4bbe4022aa8e90c54789917a1ecbdd2f351b88953c8f476457b980e3e169ad7dd"}, &(0x7f0000000100)=0x75) 03:39:19 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r1, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x401, 0x8, 0x4, 0x44561368c2268839, 0x4, {0x0, 0x2710}, {0x3, 0x1, 0x4, 0x1, 0x81, 0x1, "52b575d5"}, 0x2, 0x2, @fd, 0xbd, 0x0, 0xffffffffffffffff}) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 03:39:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x30, r3, 0x511, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000dbdbdf25010000000000000008410000004c00180000000765746800"/98], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket(0x11, 0x0, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, 0x0, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') connect$can_bcm(0xffffffffffffffff, &(0x7f0000000280), 0x10) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r7, r6, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r5, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000200)={0xf5, 0x14, &(0x7f0000000380)}) close(r4) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000080601030004000000000000000000000500010007000000"], 0x1c}}, 0x0) 03:39:20 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000100)=@filename='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x241000, 0x0) mount(&(0x7f00000004c0)=ANY=[@ANYBLOB="90899790eb3db1a03118bd9ed9f4280914b3de319df17c25df640d1c96a08ec28dc1814354eb771f5edae26d3e4a0345af97c6e2b3b8aa221855a9b00fc069563371d897d2d55ebab7fb2e1acf329d98d800cf3ff4eaabee5bb2868a411f27a85fcf57fd1445c8c5f6963f2df586c7c78fedf32a16f8f5d219d31f5b0ffcd1beaca8290957c93595f8cdbe5b0311a8cf1d0474526da9c511da0b14fcdba327c4597e5136a7e06359e9c72e7ab847d49ce6c630b7f42772879c7060a04ae3040ab3891714d178d878f3bf2f940ddb7e485a0a338c0e42514add6d9985be"], &(0x7f0000000140)='./file0/file0\x00', 0x0, 0xf080, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='fuse\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYRESDEC, @ANYRESOCT=r3, @ANYBLOB="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", @ANYRESHEX=r2, @ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303031303030312c6f626a5f757365723d666434506edd636b6673666c6f6f762c000244e0f06185ff471c4b25b354611da4d2f6adcad02b9f85a228e10dbc984bf7653127e613f81d0b20ad49420000000000"]) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r0, 0x0, 0x7ffff000) r6 = socket(0x11, 0x0, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, 0x0, &(0x7f0000000000)) connect$bt_rfcomm(r6, &(0x7f00000000c0)={0x1f, @none, 0x4}, 0xa) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d18, &(0x7f0000000080)=0x5e) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x2) 03:39:20 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) [ 1097.971026][T11478] fuse: Unknown parameter '1844674407370955161500000000000000000006377' 03:39:20 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20, @rand_addr=0x64010101}, 0x80) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES64, @ANYRESDEC, @ANYRES32]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0x0}) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x35) r4 = socket(0x1, 0x4, 0x1) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, 0x0, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2810000008060799e17c980000ea0000020000001700020073797a128000000005000100070000008bed35872ab9f97a02804a60a6afe376fe7d2ae16b7207d4940b7660"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x24004040) 03:39:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x3f00}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) [ 1098.203102][T11478] fuse: Unknown parameter '1844674407370955161500000000000000000006377' 03:39:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1d7) r1 = socket$inet_sctp(0x2, 0x801, 0x84) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000040)='hsr0\x00') setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) sendmsg(r1, &(0x7f0000000180)={&(0x7f00000009c0)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000a40)="b2", 0x25}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 03:39:20 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x3, 0xc, &(0x7f00000001c0), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) r4 = syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/pid\x00') sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x2c}}, 0xc089) setns(r4, 0x0) ptrace$cont(0xffffffffffffffff, r3, 0x0, 0x0) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r5, &(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x46503) close(r6) sendfile(r5, r6, &(0x7f0000000080)=0x51, 0xfffffffffffff9e9) clone(0x10000, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'macvlan1\x00', 0x4}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x10, &(0x7f0000000340)={&(0x7f0000000300)=""/54, 0x36}}, 0x10) [ 1098.315507][ T4250] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1098.705407][ T4250] usb 6-1: Using ep0 maxpacket: 8 03:39:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffff, 0x200) mmap$snddsp_status(&(0x7f0000c00000/0x400000)=nil, 0x1000, 0x6000007, 0x80010, r1, 0x82000000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 1098.825911][ T4250] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1098.835505][ T4250] usb 6-1: config 0 has no interface number 0 [ 1098.854752][ T4250] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1098.891473][ T4250] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1098.939989][ T4250] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.008282][ T4250] usb 6-1: config 0 descriptor?? [ 1099.036689][T11482] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1099.309559][ T4250] usb 6-1: USB disconnect, device number 53 03:39:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000806010300000000000000000000000005000100070000002d387493f349c11272508f4503e5571f085e3831f919b36de85e41ed11ee9dff2d2c3d9e9e0a4c8ec67f4ead191e5b76972e68c3798dd2b18808acf0b03959f7267311f6efced0a75fd8cea89cc615f8514025ff4792a4cf4fdf00"/132], 0x1c}}, 0x0) 03:39:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) connect$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x1, 0x2, 0x6, 0x80, "bc6bb4c5548b20c52e741a963870776d7a454d5d66fc6abb9519b997a0264fb15595397ae46adbb89e045f30fd59670c22364df61173f7ffb409953add95a4", 0x29}, 0x60) 03:39:22 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 03:39:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x28, r3, 0x5, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}, 0x1, 0x6c}, 0x0) r4 = socket(0x11, 0x0, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, 0x0, &(0x7f0000000000)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f00000001c0)={0x3, @bcast, r6}) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r3, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x3c}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7b}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x40b0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 03:39:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1d7) r1 = socket$inet_sctp(0x2, 0x801, 0x84) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000040)='hsr0\x00') setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) sendmsg(r1, &(0x7f0000000180)={&(0x7f00000009c0)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000a40)="b2", 0x25}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 03:39:22 executing program 1: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 1100.205097][ T3140] usb 6-1: new high-speed USB device number 54 using dummy_hcd 03:39:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, r3, 0x1, 0x0, 0x0, {0x18}}, 0x14}, 0x1, 0x4800}, 0x0) r4 = socket(0x11, 0x0, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008008eac7087a71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, 0x0, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, r6, 0x1, 0x0, 0x0, {0x18}}, 0x14}, 0x1, 0x4800}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r6, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x44000) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000227bd7000fddbdf25050000003c00038008000300090000000800b94a04000000080001000500000008000200000000800800030000080000080002003f00000008000200060000001c00068004000200080001000000000004000200080001006901000099e4e27afd8887e8e582a717116b7bd8ae4e59b4f0ab6230d5416fd263fc8131bce79288337948c122d08b96d01f628a1965f34a4153698c2571bfdd10d0fe92afd252bd35e8e4d62ed2b9bedbdff92481ed0d7cf48fdba292bc765d87d9e373e9f6238ce0168563140e482595dcfef5a85da0a499e3b2063a53ff94302cff7099b18bfe33c2be581658"], 0x6c}}, 0x40) [ 1100.529581][ T3140] usb 6-1: Using ep0 maxpacket: 8 [ 1100.645703][ T3140] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1100.653820][ T3140] usb 6-1: config 0 has no interface number 0 [ 1100.698117][ T3140] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1100.745647][ T3140] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1100.754720][ T3140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.797274][ T3140] usb 6-1: config 0 descriptor?? [ 1100.816592][T11558] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1101.054417][ T3130] usb 6-1: USB disconnect, device number 54 [ 1101.336116][T11581] tipc: All keys are flushed! [ 1101.354141][T11583] tipc: All keys are flushed! 03:39:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x4800}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:24 executing program 0: syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 03:39:24 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x1, 0x1f}, {0x40, 0x4}, 0x3, 0x0, 0x6}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000300)={{0x2, 0x4e24, @rand_addr=0x64010102}, {0x1, @random="192950c69b75"}, 0x42, {0x2, 0x4e24, @multicast2}, 'bond_slave_1\x00'}) sendfile(r7, r6, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r5, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x4, 0x4, 0x0, 0x5}) close(r4) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r8, 0x20}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 03:39:24 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) 03:39:24 executing program 5 (fault-call:1 fault-nth:0): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:39:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000806010300000000204d0000000000ff6e716aa7936386a17b44f8e79b38126e958fa436a8361174c5c4af13a4f1d014797b98de66824a4ea49bf7294fdfdc6c82ac20cfe2a95cad380e5401370860e9ea2860eb7446cd0acb94e7cb15e4fef45962c9d013bfc67703a5481ef9487aaaa80a1c4e6a4ef1ba7d60b3a9127d102be65dff8e893040548b0b9a37d559395b65eb44931291fa7c576e12bb98aae534d628daa5181492ec1d3f23c145be23"], 0x1c}}, 0x0) [ 1102.067814][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:39:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000000806010800000000000000000000000009e1ffffffffffffff0000000900020073797a32000000000900020073797a3000000000cf31d27d2a730ddfd0c29fede1470dab7a37714ddfb04125c85e84daaccbe1447aefa9a63a3a46a3c169783b3a22fee9007c52bedf2f24037771b35228c5a235002edfe4d71b3abfedae3ca4b9f8243e9242ba6a2234b868274c8e14e3967d06b5859e12bbb728648daf2ecdd4d5df"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = socket(0x11, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x40, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3f2, 0x4, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4c000}, 0x40) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) r3 = socket(0x11, 0x0, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x5}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000002c0)={r4, 0x0, 0xffe1, 0x8, 0x0, 0x1}, 0x14) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x3) r6 = socket(0x11, 0x0, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x13, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x8014}, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000000)) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9e}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8000) [ 1102.194850][ T8040] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1102.236641][T11652] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1102.264458][T11652] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 03:39:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000806010300000000000000000000def66f228bfcd46c610091ead5c9f4572b95c4ad3fcd777be019d229c568959a35a416e3f110433c3fd0dfe3cb8ca0d2b4eec22d4fb98d9fef"], 0x1c}}, 0x0) [ 1102.396345][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:39:24 executing program 1: sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 1102.444788][ T8040] usb 6-1: Using ep0 maxpacket: 8 [ 1102.565453][ T8040] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1102.593928][ T8040] usb 6-1: config 0 has no interface number 0 [ 1102.602040][ T8040] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 03:39:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x20000, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f00000001c0), 0x8, &(0x7f0000000240)) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ioprio_get$pid(0x2, r2) getsockname$packet(r1, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x16c, 0x8, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x78, 0x7, 0x1, 0x0, "7e121236f16c1a8f0c4b79708cb30e7074fd8d61b1cc7b505edfe0041104aab9bfdd6f7eb2c0cf7413ef52257818f7b06cb19cfcd7f861e04d80a0f3d7219a54af4b9b047325f657945f0691525be955dda938ced6f85c68602a2aa12fef22453cc57e541738ad8a130188ef02883e95f741aa87"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xcc, 0x7, 0x1, 0x0, "403152e14bd7aa7c65efe7ff37134aa4ba7593e38f72e8c2a80efa16501bd154d05701b45f610cff9c542f68fb4dded1e8594d00aca4b35abef0455de2f2bf74a19e24ac137b0961d4b9fe2d346df947d235f803aa0d9ba01fb128202743ab575e983decdcc3f6c4fa3eba8e67e2cad5b4421615917383cd6b8190021239bb562cf5d67c219dc131bbcfd98cbe8f0d9ecf6ccaca4556e22edddad618ca1e2d25d4e9a54ba2f92a94518a99080411a6215cc6ba21e4fac069828e2823d0f48687e1774a7b62dbf239"}]}], {0x14}}, 0x1c0}, 0x1, 0x0, 0x0, 0x48001}, 0x40001) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f00000005c0)) getsockname$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000080601030000a186455f4dca4197b7ca000000000000000000000500010007000003ac40"], 0x1c}}, 0x0) [ 1102.642651][ T8040] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a 03:39:25 executing program 3: r0 = socket(0x2b, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000100)="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") syz_read_part_table(0x10000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0200ee7e00ff01000000ff07008dee4c000000a440f03562e3493c0000000000180000010400000000002b127d370000000026ccf9cd082219dd625f000055aa5244534b", 0x44, 0x1c0}]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r1, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000001100)={&(0x7f0000ffb000/0x3000)=nil, 0x1, 0x4, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3ff}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r4, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$FBIOGET_VSCREENINFO(r5, 0x4600, &(0x7f0000001140)) [ 1102.694758][ T8040] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.742071][ T8040] usb 6-1: config 0 descriptor?? [ 1102.786201][T11638] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1103.074247][T11638] FAULT_INJECTION: forcing a failure. [ 1103.074247][T11638] name failslab, interval 1, probability 0, space 0, times 0 [ 1103.114473][T11638] CPU: 0 PID: 11638 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1103.123225][T11638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1103.133549][T11638] Call Trace: [ 1103.136873][T11638] dump_stack+0x188/0x20d [ 1103.141225][T11638] should_fail.cold+0x5/0xa [ 1103.145740][T11638] ? lock_downgrade+0x840/0x840 [ 1103.150600][T11638] ? fault_create_debugfs_attr+0x140/0x140 [ 1103.156423][T11638] should_failslab+0x5/0xf [ 1103.160848][T11638] kmem_cache_alloc+0x29b/0x740 [ 1103.165708][T11638] ? ksys_write+0x212/0x250 [ 1103.170253][T11638] getname_flags+0xd2/0x5b0 [ 1103.174771][T11638] do_sys_openat2+0x3fc/0x7d0 [ 1103.179464][T11638] ? file_open_root+0x400/0x400 [ 1103.184348][T11638] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1103.189921][T11638] ? wait_for_completion+0x270/0x270 [ 1103.197897][T11638] ? __this_cpu_preempt_check+0x28/0x190 [ 1103.203567][T11638] ? __sb_end_write+0x101/0x1d0 [ 1103.208427][T11638] do_sys_open+0xc3/0x140 [ 1103.212766][T11638] ? filp_open+0x70/0x70 [ 1103.217009][T11638] ? ksys_write+0x1a5/0x250 [ 1103.221517][T11638] ? __ia32_sys_clock_settime+0x260/0x260 [ 1103.227273][T11638] ? trace_hardirqs_off_caller+0x55/0x230 [ 1103.233023][T11638] do_syscall_64+0xf6/0x7d0 [ 1103.237548][T11638] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1103.243447][T11638] RIP: 0033:0x45ca69 [ 1103.247434][T11638] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1103.267569][T11638] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1103.275995][T11638] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1103.283973][T11638] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1103.291952][T11638] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1103.299928][T11638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1103.307907][T11638] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1103.391970][ T3130] usb 6-1: USB disconnect, device number 55 03:39:27 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x5]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) [ 1105.207326][ T9629] tipc: TX() has been purged, node left! [ 1105.913436][T11782] IPVS: ftp: loaded support on port[0] = 21 [ 1106.073648][T11782] chnl_net:caif_netlink_parms(): no params data found [ 1106.220959][T11782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.228252][T11782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.239372][T11782] device bridge_slave_0 entered promiscuous mode [ 1106.248448][T11782] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.256566][T11782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.265814][T11782] device bridge_slave_1 entered promiscuous mode [ 1106.290699][T11782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.302447][T11782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.332801][T11782] team0: Port device team_slave_0 added [ 1106.341997][T11782] team0: Port device team_slave_1 added [ 1106.361570][T11782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.370250][T11782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.396389][T11782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.409828][T11782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.416878][T11782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.442831][T11782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.516878][T11782] device hsr_slave_0 entered promiscuous mode [ 1106.566217][T11782] device hsr_slave_1 entered promiscuous mode [ 1106.594301][T11782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1106.601883][T11782] Cannot create hsr debugfs directory [ 1106.789680][T11782] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.796812][T11782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.804661][T11782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.811779][T11782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.821927][ T3140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.831143][ T3140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.980219][T11782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1106.995805][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1107.003613][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1107.022568][T11782] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.033567][ T3130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1107.043905][ T3130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1107.052835][ T3130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.059977][ T3130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.084648][ T3130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1107.093429][ T3130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1107.102764][ T3130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.109925][ T3130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.118449][ T3130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1107.152918][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1107.161724][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1107.171936][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1107.181813][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1107.191029][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1107.210665][T11782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1107.222093][T11782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1107.236013][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1107.243977][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1107.253534][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1107.262395][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1107.272681][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1107.283035][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1107.307259][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1107.316005][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1107.329581][T11782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1107.398407][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1107.408165][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1107.514435][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1107.522873][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1107.533720][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1107.543799][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1107.553720][T11782] device veth0_vlan entered promiscuous mode [ 1107.570294][T11782] device veth1_vlan entered promiscuous mode [ 1107.598890][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1107.608610][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1107.623570][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1107.638881][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1107.650834][T11782] device veth0_macvtap entered promiscuous mode [ 1107.663362][T11782] device veth1_macvtap entered promiscuous mode [ 1107.683585][T11782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1107.697352][T11782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.708635][T11782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1107.719148][T11782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.729032][T11782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1107.739929][T11782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.749884][T11782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1107.760389][T11782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.770396][T11782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1107.780954][T11782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.790845][T11782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1107.801528][T11782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.813745][T11782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1107.908426][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1107.916801][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1107.926876][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1107.935984][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1107.949679][T11782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1107.968435][T11782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.979608][T11782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1107.990138][T11782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.000047][T11782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1108.011338][T11782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.021664][T11782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1108.032159][T11782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.042061][T11782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1108.052770][T11782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.062858][T11782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1108.074667][T11782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.086134][T11782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.097867][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1108.107848][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1108.714300][ T3130] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1108.954004][ T3130] usb 1-1: Using ep0 maxpacket: 8 [ 1109.074209][ T3130] usb 1-1: config 0 has an invalid interface number: 18 but max is 0 [ 1109.082483][ T3130] usb 1-1: config 0 has no interface number 0 [ 1109.090280][ T3130] usb 1-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1109.101458][ T3130] usb 1-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1109.111377][ T3130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.131887][ T3130] usb 1-1: config 0 descriptor?? [ 1109.154754][T11988] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1109.171864][ T9629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1109.182497][ T9629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1109.212131][ T9629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1109.229213][ T9629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.254870][ T9629] device bridge_slave_1 left promiscuous mode [ 1109.274684][ T9629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.365048][ T9629] device bridge_slave_0 left promiscuous mode [ 1109.371610][ T9629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.413309][ T3130] usb 1-1: USB disconnect, device number 14 [ 1109.477449][ T9629] device veth1_macvtap left promiscuous mode [ 1109.496598][ T9629] device veth0_macvtap left promiscuous mode [ 1109.507534][ T9629] device veth1_vlan left promiscuous mode [ 1109.513691][ T9629] device veth0_vlan left promiscuous mode 03:39:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_delneigh={0x70, 0x1d, 0x800, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r3, 0x20, 0x0, 0x5}, [@NDA_SRC_VNI={0x8, 0xb, 0x3}, @NDA_VNI={0x8, 0x7, 0x4}, @NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NDA_LLADDR={0xa, 0x2, @dev={[], 0x18}}, @NDA_CACHEINFO={0x14, 0x3, {0xe286, 0x2, 0x6, 0x1}}, @NDA_VLAN={0x6}, @NDA_PROBES={0x8, 0x4, 0x8}]}, 0x70}}, 0x0) 03:39:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x6]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x60ea}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:32 executing program 5 (fault-call:1 fault-nth:1): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:39:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000040)) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000080601030000000000000000000000000500010007000000213ab0147da22e27481cb2ce48dc25c266b7acf3d87faa669d09eb5ec0c3841f256c53c9a90433b2f654422f68819396718c5188fd138107f84fae63fa4d68731229d84b536bc737d2fc20cacdb711b9128403e57edbbadb99fda8a5b06d7bc932def0d8e5b6657d095a8c"], 0x1c}}, 0x0) 03:39:32 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000000}, [@ldst={0x0, 0x0, 0x2, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)={0x5, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}]}) 03:39:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"/382], 0x1c}}, 0x0) 03:39:32 executing program 3: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x1918b, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9c0000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c0002800600010000000000040003804c0003800c000100ffffffff090000000c0041007f000000020000000c00010002000000070002000c00010000000000da0000000c00010009000000fc0200000c00010004000000faffffff08000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:39:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0xffffffffffffffba}, 0x1, 0x0, 0x0, 0x60000044}, 0x0) 03:39:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) r2 = accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000080)) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000008060103c652243048d888443403da00000000001a0000000000090900020073797a3200000000"], 0x20}}, 0x0) [ 1110.293893][ T8040] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1110.396327][T12059] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1110.423307][T12062] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 03:39:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bridge_slave_1\x00', {0x2, 0x4e22, @remote}}) [ 1110.573104][ T8040] usb 6-1: Using ep0 maxpacket: 8 [ 1110.704686][ T8040] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1110.714379][ T8040] usb 6-1: config 0 has no interface number 0 [ 1110.745254][ T8040] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1110.800315][ T8040] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1110.812044][ T8040] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.835207][ T8040] usb 6-1: config 0 descriptor?? [ 1110.885643][T12032] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1111.124044][T12032] FAULT_INJECTION: forcing a failure. [ 1111.124044][T12032] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1111.137280][T12032] CPU: 0 PID: 12032 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1111.145955][T12032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1111.156011][T12032] Call Trace: [ 1111.159317][T12032] dump_stack+0x188/0x20d [ 1111.163658][T12032] should_fail.cold+0x5/0xa [ 1111.168176][T12032] ? fault_create_debugfs_attr+0x140/0x140 [ 1111.173992][T12032] ? mark_held_locks+0xe0/0xe0 [ 1111.178787][T12032] __alloc_pages_nodemask+0x17a/0x810 [ 1111.184160][T12032] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1111.190925][T12032] ? find_held_lock+0x2d/0x110 [ 1111.195852][T12032] ? lock_downgrade+0x840/0x840 [ 1111.200686][T12032] cache_grow_begin+0x8c/0xc10 [ 1111.205540][T12032] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1111.210996][T12032] kmem_cache_alloc+0x670/0x740 [ 1111.215856][T12032] ? ksys_write+0x212/0x250 [ 1111.220373][T12032] getname_flags+0xd2/0x5b0 [ 1111.224891][T12032] do_sys_openat2+0x3fc/0x7d0 [ 1111.229580][T12032] ? file_open_root+0x400/0x400 [ 1111.234435][T12032] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1111.239991][T12032] ? wait_for_completion+0x270/0x270 [ 1111.245279][T12032] ? __this_cpu_preempt_check+0x28/0x190 [ 1111.251098][T12032] ? __sb_end_write+0x101/0x1d0 [ 1111.255959][T12032] do_sys_open+0xc3/0x140 [ 1111.260295][T12032] ? filp_open+0x70/0x70 [ 1111.264540][T12032] ? ksys_write+0x1a5/0x250 [ 1111.269050][T12032] ? __ia32_sys_clock_settime+0x260/0x260 [ 1111.274780][T12032] ? trace_hardirqs_off_caller+0x55/0x230 [ 1111.280512][T12032] do_syscall_64+0xf6/0x7d0 [ 1111.285029][T12032] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1111.290935][T12032] RIP: 0033:0x45ca69 [ 1111.294830][T12032] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1111.314438][T12032] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1111.322859][T12032] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1111.330841][T12032] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1111.338823][T12032] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1111.346804][T12032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1111.354781][T12032] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1111.822835][ T3130] usb 6-1: USB disconnect, device number 56 03:39:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000008060103004b030000000082000000000500010007000000"], 0x1c}}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r1, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) r4 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x200, 0x4103) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf2ba825992b3006c}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES16=r5, @ANYRES64], 0x3}, 0x1, 0x0, 0x0, 0x44000}, 0x20004811) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x1, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x0, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0x0, 0x2, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000084) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9201e3e7", @ANYRES16=r5, @ANYBLOB="00042bbd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x40010) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004806) r6 = socket(0x11, 0x0, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, 0x0, &(0x7f0000000000)) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000480)={'lo\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r7, 0x1, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x48880) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000080)={0x20000ff, 0x400, @name="081c830d7f9c53bc290054514bf255ee7735ab4ef07bd20604f58887f6144274"}) [ 1115.739726][ T9629] bond4 (unregistering): Released all slaves [ 1115.977981][ T9629] bond2 (unregistering): (slave bridge14): Releasing active interface [ 1116.117897][ T9629] bond3 (unregistering): Released all slaves [ 1116.179732][ T9629] bond2 (unregistering): (slave bridge13): Releasing active interface [ 1116.316998][ T9629] bond2 (unregistering): Released all slaves [ 1117.115966][ T9629] bond1 (unregistering): (slave bridge4): Releasing active interface [ 1117.255511][ T9629] bond1 (unregistering): (slave bridge3): Releasing active interface [ 1117.405467][ T9629] bond1 (unregistering): Released all slaves [ 1117.755714][ T9629] device hsr_slave_0 left promiscuous mode [ 1117.803339][ T9629] device hsr_slave_1 left promiscuous mode [ 1117.927737][ T9629] team0 (unregistering): Port device team_slave_1 removed [ 1117.940792][ T9629] team0 (unregistering): Port device team_slave_0 removed [ 1117.957948][ T9629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1118.011138][ T9629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.161912][ T9629] bond0 (unregistering): Released all slaves 03:39:40 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036746e6c000030000280050021000400000005000600f0000000060012004e200000040013000500040003000010080008001a00000008000a00", @ANYRES32, @ANYBLOB="0800040030767da3db0c94256e971000c410fedd68a950abab929999e6edf740fc872e7f580441eca3f1328817089c1c8ffb1429158031b50500c50fe4910c3960c7eaaf9d048d886dc02799de9a84c69d395d8a32f0e235411a1ac1a8ad08469c35585bb333ba4bcc542cd69a9f91c580a56600db28bba0472ac593"], 0x70}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x28, 0x1406, 0x400, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4800) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r6, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff30000000000000000e1ff", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x9, r6, 0x1, 0xd8, 0x6, @random="ffd5dfe85a27"}, 0x14) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x9, 0x6, 0xde72b26f0b1e3cd, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x84) [ 1118.983823][T12146] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 03:39:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x7]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x44010) 03:39:41 executing program 5 (fault-call:1 fault-nth:2): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:39:41 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r1, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f00000000c0)={0x0, 0x1000, 0x6, 0xd9d8}) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@flush='flush'}]}) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x40000, 0x0) 03:39:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0xea60}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00040008060103bcf900000000000002000000050001001700000060b35f1a67d1aa0da93c0e4f192b8311d09491618b77df674be802e53d6a1db20a4032cc8f559508ad10854e7c607f"], 0x1c}}, 0x0) [ 1119.215677][T12195] FAT-fs (loop3): bogus number of reserved sectors [ 1119.250057][T12195] FAT-fs (loop3): Can't find a valid FAT filesystem 03:39:41 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2301, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 1119.273950][T12146] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 03:39:41 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x1) r4 = dup2(r1, r1) close(r4) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r6, 0x200006) r7 = socket(0x11, 0x0, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x46) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e21, 0x3ff, @private2={0xfc, 0x2, [], 0x1}, 0x7}, 0x1c) sendfile(r0, r6, 0x0, 0x8000fffffffe) [ 1119.429284][ T4250] usb 6-1: new high-speed USB device number 57 using dummy_hcd 03:39:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = socket(0x11, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x12400, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket(0x11, 0x0, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, 0x0, &(0x7f0000000000)) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x9, r5, 0xf, r6}, 0x10) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000000)) [ 1119.732997][ T4250] usb 6-1: Using ep0 maxpacket: 8 03:39:42 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001580)=[{0x0}, {&(0x7f0000000740)=""/191, 0xbf}, {&(0x7f00000001c0)=""/253, 0xfd}, {&(0x7f0000001a00)=""/4073, 0xfe9}], 0x4, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000004fc8)={0x0, 0xfffffffffffffed4, &(0x7f000000b000)={&(0x7f0000000500)=ANY=[@ANYBLOB="240085001800210000000000000000001c140000fe000001000000000000dfcbbc5e514e651bb0d3c387af0fa90d90d5f6f63cc31da6a432259ef7c286ea92a8ac7c6509f290579a592eefc8e92f799e3888f4690ef89500"/101], 0x24}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) r5 = accept(r0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="030000010ffbffcb11be0f7fc66709a3bd172bc4420af722fdaf99b260b636ce22f5c94d92525d6a785e1cbf1cd4f2180aa5", @ANYRES16=0x0, @ANYBLOB="f8000080000000"], 0x3}}, 0x0) sendmmsg(r1, &(0x7f0000000ac0)=[{{&(0x7f0000003900)=@caif=@dbg={0x25, 0xff, 0x2}, 0x80, &(0x7f0000003b80), 0x0, &(0x7f0000003bc0)}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000880)="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", 0xff}, {&(0x7f0000000980)="557948d8249dbed515266aad464150b1680eb31d9b394f6daae18026e235112b167f6fcca16800e364e2ed8dfa16e5aac0cd82d6cfcecb1e9f8f8131d87c20168b15f12c5942d6406c8003d5fede75782370ebbf7a76009a647e130c0a0971ae53905b3efffa753b4dbd7a84d4", 0x6d}, {&(0x7f0000000a00)="7ab77975bdf273747b63d7a79e38430ebfc9b40e32ff9b76b09eb3c751718bd37b1f675fd05cb54b73e13cdfbfc44399ef7d60a484d1f68b154bc5249f94eba0a6301ca20b106f54f9770659b54325f043fd83ebf15f9639cadeb73967dabc9abbf2628635d20b1879bef621d87f2837eedb1a2a3a04aeac148ec1e37aa012b322ecf89abda674d8fc9873d5b99f07281ed1139c72f0bd84bed6d1fb7760ff50", 0xa0}], 0x3}}], 0x2, 0x0) [ 1119.863452][ T4250] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1119.875220][ T4250] usb 6-1: config 0 has no interface number 0 [ 1119.891803][ T4250] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1119.924245][ T4250] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1119.942471][ T4250] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.955575][ T4250] usb 6-1: config 0 descriptor?? [ 1119.984442][T12189] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1120.215167][T12189] FAULT_INJECTION: forcing a failure. [ 1120.215167][T12189] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.244227][T12189] CPU: 0 PID: 12189 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1120.253024][T12189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1120.263087][T12189] Call Trace: [ 1120.266402][T12189] dump_stack+0x188/0x20d [ 1120.270747][T12189] should_fail.cold+0x5/0xa [ 1120.275273][T12189] ? lock_downgrade+0x840/0x840 [ 1120.280133][T12189] ? fault_create_debugfs_attr+0x140/0x140 [ 1120.285960][T12189] should_failslab+0x5/0xf [ 1120.290384][T12189] kmem_cache_alloc+0x29b/0x740 [ 1120.295256][T12189] ? kmem_cache_alloc+0x358/0x740 [ 1120.300299][T12189] security_file_alloc+0x34/0x160 [ 1120.305338][T12189] __alloc_file+0xd8/0x350 [ 1120.309756][T12189] alloc_empty_file+0x6d/0x170 [ 1120.314536][T12189] path_openat+0xe3/0x27d0 [ 1120.318970][T12189] ? mark_held_locks+0xe0/0xe0 [ 1120.323747][T12189] ? path_lookupat.isra.0+0x530/0x530 [ 1120.329156][T12189] ? mark_held_locks+0xe0/0xe0 [ 1120.333928][T12189] ? _kstrtoull+0x13f/0x1f0 [ 1120.338450][T12189] do_filp_open+0x192/0x260 [ 1120.343053][T12189] ? may_open_dev+0xf0/0xf0 [ 1120.347567][T12189] ? __alloc_fd+0x46d/0x600 [ 1120.352086][T12189] ? lock_downgrade+0x840/0x840 [ 1120.356936][T12189] ? do_raw_spin_lock+0x129/0x2e0 [ 1120.361991][T12189] ? _raw_spin_unlock+0x24/0x40 [ 1120.366843][T12189] ? __alloc_fd+0x46d/0x600 [ 1120.371369][T12189] do_sys_openat2+0x585/0x7d0 [ 1120.376067][T12189] ? file_open_root+0x400/0x400 [ 1120.381027][T12189] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1120.386595][T12189] ? wait_for_completion+0x270/0x270 [ 1120.392002][T12189] ? __this_cpu_preempt_check+0x28/0x190 [ 1120.397819][T12189] ? __sb_end_write+0x101/0x1d0 [ 1120.402681][T12189] do_sys_open+0xc3/0x140 [ 1120.407627][T12189] ? filp_open+0x70/0x70 [ 1120.411991][T12189] ? ksys_write+0x1a5/0x250 [ 1120.416538][T12189] ? __ia32_sys_clock_settime+0x260/0x260 [ 1120.422268][T12189] ? trace_hardirqs_off_caller+0x55/0x230 [ 1120.427999][T12189] do_syscall_64+0xf6/0x7d0 [ 1120.432513][T12189] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1120.438403][T12189] RIP: 0033:0x45ca69 [ 1120.442302][T12189] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1120.462015][T12189] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1120.470432][T12189] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1120.478410][T12189] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1120.486389][T12189] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1120.494367][T12189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1120.502341][T12189] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 03:39:42 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_bp={0x0}, 0x1004, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000340)={0x0, 0x1}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000280)={0x0, 0x2}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getpid() getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0xe, &(0x7f000059aff8), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) times(&(0x7f0000000040)) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r3, 0x200004) sendto$inet6(r1, &(0x7f0000000180)="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", 0xfa, 0x5, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x80001d00c0d0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) [ 1120.949264][ T3140] usb 6-1: USB disconnect, device number 57 [ 1121.333624][T12235] dccp_close: ABORT with 3 bytes unread 03:39:43 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_bp={0x0}, 0x1004, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000340)={0x0, 0x1}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000280)={0x0, 0x2}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getpid() getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0xe, &(0x7f000059aff8), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) times(&(0x7f0000000040)) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r3, 0x200004) sendto$inet6(r1, &(0x7f0000000180)="23c5ee00cc11ee91cec4b6a3ef47bed9a5b9d025d5a36a7ab521984b24126373e4020a7a67eac54528fd8ddd9f78cc981f64d0d4c45ebd507ce4d914b81373908ab55ab4687af8d32fcf5e915d16471dba737bd467f10a53531790343fe49aab02a2fde323ae1fff4ecf39e9a733f77448da8567c49994fd55f365f076fd29d7a2516422966f630070194019395815eb0108d56dac0c9034526f56edd21e58a69f0cbc52e89465f5abc51d613c6e0d1ca0e33026e0627402cb17fb3e4b8d27695fd148fb77c1a6feee1a7ea5386df5e614be49421feb1c44c985582f8bc41ac903099bd77590e2655cdb66eb4a523d96e7b606fb04548c2031d6", 0xfa, 0x5, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x80001d00c0d0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 03:39:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x8]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) 03:39:43 executing program 5 (fault-call:1 fault-nth:3): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:39:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0xffff}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r1, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000180)={0x7fff, 0x9, &(0x7f0000000040)=[0x1ff, 0x5, 0x3722, 0x8, 0x7, 0x20, 0x7, 0xffff, 0xec], &(0x7f0000000080)=[0x7f, 0xfff7, 0x88a, 0x5, 0x6, 0x9, 0x6], &(0x7f00000000c0)=[0x1, 0x3, 0x1, 0x6, 0x100]}) [ 1121.932658][T10175] usb 6-1: new high-speed USB device number 58 using dummy_hcd 03:39:44 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000050001ad42af750a41000700"/34], 0x1c}}, 0x0) 03:39:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14}]}}]}, 0x5c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 03:39:44 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000180)=@rc={0x1f, @fixed={[], 0x12}, 0x39}, 0x6f) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000740)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r2], 0x2) request_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000200)='vmnet0\x00', r2) getsockname$packet(r0, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000fe0517080000000000000000000000000500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x804) [ 1122.182482][T10175] usb 6-1: Using ep0 maxpacket: 8 03:39:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) socket$isdn(0x22, 0x3, 0x2) [ 1122.303098][T10175] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1122.311219][T10175] usb 6-1: config 0 has no interface number 0 [ 1122.320254][T10175] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1122.339758][T10175] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1122.374902][T10175] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.419984][T10175] usb 6-1: config 0 descriptor?? [ 1122.444329][T12307] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1122.680010][T12307] FAULT_INJECTION: forcing a failure. [ 1122.680010][T12307] name failslab, interval 1, probability 0, space 0, times 0 [ 1122.713816][T12307] CPU: 0 PID: 12307 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1122.722528][T12307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1122.732588][T12307] Call Trace: [ 1122.736040][T12307] dump_stack+0x188/0x20d [ 1122.740382][T12307] should_fail.cold+0x5/0xa [ 1122.744892][T12307] ? fault_create_debugfs_attr+0x140/0x140 [ 1122.750739][T12307] should_failslab+0x5/0xf [ 1122.755177][T12307] __kmalloc+0x2d9/0x7a0 [ 1122.759435][T12307] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1122.765433][T12307] ? tomoyo_realpath_from_path+0xc2/0x620 [ 1122.771221][T12307] ? lock_release+0x800/0x800 [ 1122.775897][T12307] ? print_usage_bug+0x240/0x240 [ 1122.781077][T12307] tomoyo_realpath_from_path+0xc2/0x620 [ 1122.786823][T12307] tomoyo_check_open_permission+0x26d/0x370 [ 1122.792735][T12307] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 1122.798398][T12307] ? __lock_acquire+0xcbb/0x4c50 [ 1122.803350][T12307] ? lock_downgrade+0x840/0x840 [ 1122.808289][T12307] ? do_raw_spin_lock+0x129/0x2e0 [ 1122.813330][T12307] tomoyo_file_open+0xa3/0xd0 [ 1122.818013][T12307] security_file_open+0x6e/0x410 [ 1122.822997][T12307] do_dentry_open+0x358/0x1290 [ 1122.827794][T12307] ? devcgroup_check_permission+0x1a8/0x420 [ 1122.833715][T12307] ? security_inode_permission+0xc4/0xf0 [ 1122.839348][T12307] ? chown_common+0x550/0x550 [ 1122.844036][T12307] ? inode_permission+0xab/0x500 [ 1122.848993][T12307] path_openat+0x1e59/0x27d0 [ 1122.853607][T12307] ? path_lookupat.isra.0+0x530/0x530 [ 1122.858984][T12307] ? _kstrtoull+0x13f/0x1f0 [ 1122.863513][T12307] do_filp_open+0x192/0x260 [ 1122.868027][T12307] ? may_open_dev+0xf0/0xf0 [ 1122.872550][T12307] ? do_raw_spin_lock+0x129/0x2e0 [ 1122.877593][T12307] ? _raw_spin_unlock+0x24/0x40 [ 1122.882450][T12307] ? __alloc_fd+0x46d/0x600 [ 1122.887015][T12307] do_sys_openat2+0x585/0x7d0 [ 1122.891707][T12307] ? file_open_root+0x400/0x400 [ 1122.896571][T12307] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1122.902128][T12307] ? wait_for_completion+0x270/0x270 [ 1122.908029][T12307] ? __this_cpu_preempt_check+0x28/0x190 [ 1122.913708][T12307] ? __sb_end_write+0x101/0x1d0 [ 1122.918565][T12307] do_sys_open+0xc3/0x140 [ 1122.922898][T12307] ? filp_open+0x70/0x70 [ 1122.927492][T12307] ? ksys_write+0x1a5/0x250 [ 1122.932003][T12307] ? __ia32_sys_clock_settime+0x260/0x260 [ 1122.937727][T12307] ? trace_hardirqs_off_caller+0x55/0x230 [ 1122.943466][T12307] do_syscall_64+0xf6/0x7d0 [ 1122.947996][T12307] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1122.953897][T12307] RIP: 0033:0x45ca69 [ 1122.957795][T12307] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:39:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040), 0x4) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 03:39:45 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001580)=[{0x0}, {&(0x7f0000000740)=""/191, 0xbf}, {&(0x7f00000001c0)=""/253, 0xfd}, {&(0x7f0000001a00)=""/4073, 0xfe9}], 0x4, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000004fc8)={0x0, 0xfffffffffffffed4, &(0x7f000000b000)={&(0x7f0000000500)=ANY=[@ANYBLOB="240085001800210000000000000000001c140000fe000001000000000000dfcbbc5e514e651bb0d3c387af0fa90d90d5f6f63cc31da6a432259ef7c286ea92a8ac7c6509f290579a592eefc8e92f799e3888f4690ef89500"/101], 0x24}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) r5 = accept(r0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="030000010ffbffcb11be0f7fc66709a3bd172bc4420af722fdaf99b260b636ce22f5c94d92525d6a785e1cbf1cd4f2180aa5", @ANYRES16=0x0, @ANYBLOB="f8000080000000"], 0x3}}, 0x0) sendmmsg(r1, &(0x7f0000000ac0)=[{{&(0x7f0000003900)=@caif=@dbg={0x25, 0xff, 0x2}, 0x80, &(0x7f0000003b80), 0x0, &(0x7f0000003bc0)}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000880)="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", 0xff}, {&(0x7f0000000980)="557948d8249dbed515266aad464150b1680eb31d9b394f6daae18026e235112b167f6fcca16800e364e2ed8dfa16e5aac0cd82d6cfcecb1e9f8f8131d87c20168b15f12c5942d6406c8003d5fede75782370ebbf7a76009a647e130c0a0971ae53905b3efffa753b4dbd7a84d4", 0x6d}, {&(0x7f0000000a00)="7ab77975bdf273747b63d7a79e38430ebfc9b40e32ff9b76b09eb3c751718bd37b1f675fd05cb54b73e13cdfbfc44399ef7d60a484d1f68b154bc5249f94eba0a6301ca20b106f54f9770659b54325f043fd83ebf15f9639cadeb73967dabc9abbf2628635d20b1879bef621d87f2837eedb1a2a3a04aeac148ec1e37aa012b322ecf89abda674d8fc9873d5b99f07281ed1139c72f0bd84bed6d1fb7760ff50", 0xa0}], 0x3}}], 0x2, 0x0) [ 1122.977493][T12307] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1122.985919][T12307] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1122.993900][T12307] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1123.001912][T12307] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1123.010444][T12307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1123.018425][T12307] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1123.079073][T12330] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1123.172592][T12363] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:39:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r1, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000000)) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 1123.600078][T12307] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1123.680185][ T3219] usb 6-1: USB disconnect, device number 58 03:39:46 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x11, 0x0, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "00fb000000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0305b4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8edecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x60, 0x5, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008008}, 0x80) r3 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r5, &(0x7f0000000480)=ANY=[], 0x9) close(r6) socket$netlink(0x10, 0x3, 0x4) bind(0xffffffffffffffff, &(0x7f0000000140)=@xdp={0x2c, 0x0, 0x0, 0x7fffc}, 0x80) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r4, 0x0, r6, 0x0, 0x82000001, 0x0) 03:39:46 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x8, 0x6, 0x401, 0x0, 0x0, {0xc}}, 0x14}}, 0x400c990) 03:39:46 executing program 5 (fault-call:1 fault-nth:4): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:39:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xd]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:46 executing program 0: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x109441, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000080)={r2, r3/1000+60000}, 0x10) r4 = socket$inet6(0xa, 0x1, 0xc4) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xb}, 0x42414, 0xffffffffffffffff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f00000002c0)={'TPROXY\x00'}, &(0x7f00000003c0)=0x1e) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x408d4}, 0xa085) 03:39:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40000) 03:39:46 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'bridge_slave_0\x00', {0x4}, 0x8}) getsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001080)='/dev/btrfs-control\x00', 0xc0981, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000010c0), &(0x7f0000001100)=0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000014c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f00000017c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001780)={&(0x7f0000001540)={0x218, 0x1, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x4080}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}]}, @NFQA_PAYLOAD={0x17, 0xa, "d521e8051380a7bdd8a3c3b22df7f56faaa6a5"}, @NFQA_PAYLOAD={0xd9, 0xa, "1a76796dfd5169e98dc2f0444d1de337dcc11085e90aa0024fbff5fee5ee3c1c7388e0c4c155c25dd76b7738bf4527fea60cb43328fc6ed03a377c2d059033d686ba9e156e70af1b6479e9602691bec8feb7db2b833417f0de36b4647a3e7f66cb548b0bbd1dfcbdc4a2ad3059d9db1ddf19672279071cc7905a114bbd4708b7f0510f1c18ffaa2cc7d2f4144e3602e7aac7aeaf3b0c64632a0c6f9df44fca93d6a43a039389c75f3d3148c44e199e92e8a35c7b2d192c1a9f07935ee5c43c28095cdb97701d2b54429fa5a4d43c6327955ec3bcbc"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x9b}}, @NFQA_CT={0x14, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0x10, 0x17, [0x5, 0xda89, 0x9f3]}]}, @NFQA_EXP={0xac, 0xf, 0x0, 0x1, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9a9}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3c}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_MASK={0x60, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @private=0xa010102}}, {0x14, 0x4, @private1={0xfc, 0x1, [], 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x4}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x100000}}]}, 0x218}, 0x1, 0x0, 0x0, 0x40010}, 0x40081) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001840)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x24, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x91}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x80010, r1, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000001940)=""/65) connect$caif(0xffffffffffffffff, &(0x7f00000019c0)=@dgm={0x25, 0x4, 0x1}, 0x18) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000001a00)={0x3, 0x4, 0x4, 0x80000000, 0x7, {}, {0x2, 0xc, 0xff, 0x85, 0x8, 0x80, "925002f2"}, 0x8, 0x4, @userptr, 0x0, 0x0, r2}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000001a80)=@sack_info={0x0, 0x4, 0x10001}, &(0x7f0000001ac0)=0xc) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000001b00)={r5, 0x8}, 0x8) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000001b40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001bc0)=""/70, 0x46}, {&(0x7f0000001c40)=""/169, 0xa9}, {&(0x7f0000001d00)=""/221, 0xdd}, {&(0x7f0000001e00)=""/23, 0x17}, {&(0x7f0000001e40)=""/168, 0xa8}], 0x5, &(0x7f0000001f80)=""/4096, 0x1000}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000002fc0)={0x7, [0x0, 0x0, 0x401, 0xff, 0x0, 0x9, 0x1]}, &(0x7f0000003000)=0x12) recvmmsg(0xffffffffffffffff, &(0x7f0000006140)=[{{&(0x7f0000003040)=@caif=@dbg, 0x80, &(0x7f00000032c0)=[{&(0x7f00000030c0)=""/234, 0xea}, {&(0x7f00000031c0)=""/74, 0x4a}, {&(0x7f0000003240)=""/125, 0x7d}], 0x3, &(0x7f0000003300)=""/199, 0xc7}, 0x1000}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000003400)=""/73, 0x49}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/44, 0x2c}, {&(0x7f00000044c0)=""/70, 0x46}, {&(0x7f0000004540)=""/4096, 0x1000}], 0x5, &(0x7f00000055c0)=""/57, 0x39}, 0x7}, {{&(0x7f0000005600)=@nfc_llcp, 0x80, &(0x7f00000059c0)=[{&(0x7f0000005680)=""/175, 0xaf}, {&(0x7f0000005740)=""/92, 0x5c}, {&(0x7f00000057c0)=""/104, 0x68}, {&(0x7f0000005840)=""/180, 0xb4}, {&(0x7f0000005900)}, {&(0x7f0000005940)=""/75, 0x4b}], 0x6, &(0x7f0000005a40)=""/91, 0x5b}}, {{&(0x7f0000005ac0)=@tipc=@id, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005b40)=""/2, 0x2}, {&(0x7f0000005b80)=""/186, 0xba}, {&(0x7f0000005c40)=""/179, 0xb3}, {&(0x7f0000005d00)}, {&(0x7f0000005d40)=""/40, 0x28}, {&(0x7f0000005d80)=""/153, 0x99}, {&(0x7f0000005e40)=""/39, 0x27}], 0x7, &(0x7f0000005f00)=""/16, 0x10}, 0x8001}, {{&(0x7f0000005f40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000060c0)=[{&(0x7f0000005fc0)=""/113, 0x71}, {&(0x7f0000006040)=""/102, 0x66}], 0x2, &(0x7f0000006100)=""/30, 0x1e}, 0x6}], 0x5, 0x20, &(0x7f0000006280)={0x77359400}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000006300)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000006500)={&(0x7f00000062c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000064c0)={&(0x7f0000006340)={0x168, r8, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x60000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x74b2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc4}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa27e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x24}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff7}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 03:39:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) sendto$ax25(r1, &(0x7f0000000180)="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", 0x1000, 0x4000, 0x0, 0x0) 03:39:46 executing program 3: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3}}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vlan0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_virt_wifi\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40002) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='uni_xlate=1,nonumtail']) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) syz_mount_image$btrfs(&(0x7f00000001c0)='btrfs\x00', &(0x7f0000000200)='./file0\x00', 0x1, 0x2, &(0x7f0000000400)=[{&(0x7f0000000300)="ecd8adf515d583eba2d08a1538bd148adf018ef9349d08526e5a46de584441e040e3c4d577a87ec3b5db21cd6c3eb84ef88b9f6ffdc0e8df612a1edf551b6f4df1ab6958f0f9fdf30dca952862fa218d9b90db21968634036e942c31cba784f0f21d5d945fd59197c07757932dd7b8104749a00f7bd02ea9719be234d150f7f6bf6c81453f49937bdc56f803e41b23217a6d324f2021efcfc40e9db4d3250d4388ec266dba7d14a4fb9aed7f1d8cd44a2246be69418d34f6cb755a70a3433b859c69cee2be43e7cd2d1270996e24aba09b5077d80d9cc3ddc570c07dca0e70532faea9d89928f2f2d2abeca54513d18c6129f14c92c3671c12", 0xf9, 0x1}, {&(0x7f0000000240)="a344513a24f17b6a29450e9d7671c226814dc22e5d93422a66306ec3f476b70f83a69815940d25b9d23652896a9c635e3c64ba243a1aa8aa7a5cdb5baffe382ca8689794474fc2ad9fd11e254a57c093bcd70d5dcd3581cf12191ec371fc4ee9d4f87ca740d6d361bc5c34b2f9d61bd6b81cb2", 0x73, 0x1}], 0x104008, &(0x7f0000000440)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', r2}}, {@fowner_gt={'fowner>', r4}}, {@uid_eq={'uid', 0x3d, r6}}, {@appraise='appraise'}, {@subj_type={'subj_type', 0x3d, 'vfat\x00'}}]}) 03:39:46 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x4, 0x5, 0x0) bind(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x4, 0x1}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100)=0x4, 0x1) r1 = socket(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff30000000000000000e1ff", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) bind(r1, &(0x7f0000000080)=@un=@file={0x1, './file0\x00'}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x4040050}, 0x40095) [ 1124.467927][T12451] FAT-fs (loop3): bogus number of reserved sectors [ 1124.509306][T12451] FAT-fs (loop3): Can't find a valid FAT filesystem 03:39:47 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xc60}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40) [ 1124.622410][ T3140] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1124.759187][T12457] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1124.808274][T12462] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1124.872184][ T3140] usb 6-1: Using ep0 maxpacket: 8 [ 1124.901051][T12462] bond4: (slave bridge12): making interface the new active one [ 1124.941335][T12462] bond4: (slave bridge12): Enslaving as an active interface with an up link [ 1124.992891][ T3140] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1125.008907][ T3140] usb 6-1: config 0 has no interface number 0 [ 1125.039002][ T3140] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1125.088910][ T3140] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1125.134872][ T3140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.184328][ T3140] usb 6-1: config 0 descriptor?? [ 1125.274125][T12439] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1125.427077][T12465] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1125.442368][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:39:47 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r1, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x2, r2}) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xb1d000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r5 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendfile(r5, r4, 0x0, 0xffffffff880) [ 1125.529995][T12515] bond4: (slave bridge13): Enslaving as an active interface with a down link [ 1125.535865][T12439] FAULT_INJECTION: forcing a failure. [ 1125.535865][T12439] name failslab, interval 1, probability 0, space 0, times 0 03:39:47 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xc60}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40) [ 1125.636652][T12439] CPU: 0 PID: 12439 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1125.645369][T12439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1125.655454][T12439] Call Trace: [ 1125.658764][T12439] dump_stack+0x188/0x20d [ 1125.663115][T12439] should_fail.cold+0x5/0xa [ 1125.667640][T12439] ? fault_create_debugfs_attr+0x140/0x140 [ 1125.673476][T12439] should_failslab+0x5/0xf [ 1125.677905][T12439] __kmalloc+0x2d9/0x7a0 [ 1125.682158][T12439] ? tomoyo_encode2.part.0+0xec/0x3b0 [ 1125.687555][T12439] ? d_absolute_path+0x10c/0x160 [ 1125.692507][T12439] ? __d_path+0x140/0x140 [ 1125.696877][T12439] tomoyo_encode2.part.0+0xec/0x3b0 [ 1125.702096][T12439] tomoyo_encode+0x28/0x50 [ 1125.706534][T12439] tomoyo_realpath_from_path+0x184/0x620 [ 1125.712198][T12439] tomoyo_check_open_permission+0x26d/0x370 [ 1125.718108][T12439] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 1125.723758][T12439] ? __lock_acquire+0xcbb/0x4c50 [ 1125.728742][T12439] ? lock_downgrade+0x840/0x840 [ 1125.733604][T12439] ? do_raw_spin_lock+0x129/0x2e0 [ 1125.738649][T12439] tomoyo_file_open+0xa3/0xd0 [ 1125.743368][T12439] security_file_open+0x6e/0x410 [ 1125.748333][T12439] do_dentry_open+0x358/0x1290 [ 1125.753120][T12439] ? devcgroup_check_permission+0x1a8/0x420 [ 1125.759032][T12439] ? security_inode_permission+0xc4/0xf0 [ 1125.764682][T12439] ? chown_common+0x550/0x550 [ 1125.769375][T12439] ? inode_permission+0xab/0x500 [ 1125.774335][T12439] path_openat+0x1e59/0x27d0 [ 1125.778953][T12439] ? path_lookupat.isra.0+0x530/0x530 [ 1125.784345][T12439] ? _kstrtoull+0x13f/0x1f0 [ 1125.788872][T12439] do_filp_open+0x192/0x260 [ 1125.793391][T12439] ? may_open_dev+0xf0/0xf0 [ 1125.797935][T12439] ? do_raw_spin_lock+0x129/0x2e0 [ 1125.802990][T12439] ? _raw_spin_unlock+0x24/0x40 [ 1125.807861][T12439] ? __alloc_fd+0x46d/0x600 [ 1125.812400][T12439] do_sys_openat2+0x585/0x7d0 [ 1125.817077][T12439] ? file_open_root+0x400/0x400 [ 1125.821939][T12439] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1125.827478][T12439] ? wait_for_completion+0x270/0x270 [ 1125.832746][T12439] ? __this_cpu_preempt_check+0x28/0x190 [ 1125.838425][T12439] ? __sb_end_write+0x101/0x1d0 [ 1125.843281][T12439] do_sys_open+0xc3/0x140 [ 1125.847601][T12439] ? filp_open+0x70/0x70 [ 1125.851823][T12439] ? ksys_write+0x1a5/0x250 [ 1125.856312][T12439] ? __ia32_sys_clock_settime+0x260/0x260 [ 1125.862014][T12439] ? trace_hardirqs_off_caller+0x55/0x230 [ 1125.867735][T12439] do_syscall_64+0xf6/0x7d0 [ 1125.872230][T12439] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1125.878108][T12439] RIP: 0033:0x45ca69 [ 1125.881985][T12439] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1125.901586][T12439] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1125.909981][T12439] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1125.917934][T12439] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1125.925897][T12439] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1125.933864][T12439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1125.941814][T12439] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1126.174947][ T28] audit: type=1804 audit(1590982788.535:54): pid=12558 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir312650048/syzkaller.pirc2g/7/memory.events" dev="sda1" ino=15954 res=1 [ 1126.197681][T12439] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1126.266659][ T4251] usb 6-1: USB disconnect, device number 59 [ 1126.378278][ T28] audit: type=1800 audit(1590982788.535:55): pid=12558 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=15954 res=0 [ 1126.455160][ T28] audit: type=1804 audit(1590982788.595:56): pid=12559 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir312650048/syzkaller.pirc2g/7/memory.events" dev="sda1" ino=15954 res=1 [ 1126.541176][ T28] audit: type=1800 audit(1590982788.595:57): pid=12559 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=15954 res=0 03:39:49 executing program 5 (fault-call:1 fault-nth:5): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:39:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000008060103000000000000020000010007002100"], 0x1c}}, 0x0) 03:39:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xe]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:49 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x3}, 0x80, 0x0}, 0x20008041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f0000000400), 0x8) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socketpair(0xf, 0x0, 0x8, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000000)=r1, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) r4 = socket(0x11, 0x0, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000300)) getsockname$packet(r4, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x2, @private0, 0x6}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, @in6={0xa, 0x8, 0xfffffff7, @ipv4={[], [], @broadcast}, 0xadc4}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0xec60, @private1, 0x800}], 0x94) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f00000001c0)={0x5, &(0x7f0000000480)=[{@fixed}, {@none}, {@none}, {@fixed}, {@fixed}]}) 03:39:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x2}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x16000) 03:39:49 executing program 1: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 03:39:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) 03:39:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x16000) 03:39:49 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x3}, 0x80, 0x0}, 0x20008041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f0000000400), 0x8) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socketpair(0xf, 0x0, 0x8, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000000)=r1, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) r4 = socket(0x11, 0x0, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000300)) getsockname$packet(r4, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x2, @private0, 0x6}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, @in6={0xa, 0x8, 0xfffffff7, @ipv4={[], [], @broadcast}, 0xadc4}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0xec60, @private1, 0x800}], 0x94) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f00000001c0)={0x5, &(0x7f0000000480)=[{@fixed}, {@none}, {@none}, {@fixed}, {@fixed}]}) 03:39:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x80, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x2, &(0x7f0000000040)=""/110, 0x6e) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x3, &(0x7f0000000180)=0xe5, 0x4) eventfd(0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f00000001c0), &(0x7f0000000200)=0x10) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000080601aee909010000000020000000000000000000"], 0x1c}}, 0x0) r3 = socket(0x11, 0x0, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, 0x0, &(0x7f0000000000)) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000240)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) [ 1127.271910][ T3140] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1127.427923][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1127.465322][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:39:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x16000) [ 1127.522021][ T3140] usb 6-1: Using ep0 maxpacket: 8 [ 1127.641882][ T3140] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1127.650137][ T3140] usb 6-1: config 0 has no interface number 0 [ 1127.691915][ T3140] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1127.721817][ T3140] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1127.730887][ T3140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.778122][ T3140] usb 6-1: config 0 descriptor?? [ 1127.803388][T12599] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1128.027603][T12599] FAULT_INJECTION: forcing a failure. [ 1128.027603][T12599] name failslab, interval 1, probability 0, space 0, times 0 [ 1128.121813][T12599] CPU: 1 PID: 12599 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1128.130523][T12599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1128.140586][T12599] Call Trace: [ 1128.143917][T12599] dump_stack+0x188/0x20d [ 1128.148266][T12599] should_fail.cold+0x5/0xa [ 1128.152803][T12599] ? fault_create_debugfs_attr+0x140/0x140 [ 1128.158631][T12599] should_failslab+0x5/0xf [ 1128.163064][T12599] __kmalloc+0x2d9/0x7a0 [ 1128.167316][T12599] ? tomoyo_encode2.part.0+0xec/0x3b0 [ 1128.172697][T12599] ? d_absolute_path+0x10c/0x160 [ 1128.177646][T12599] ? __d_path+0x140/0x140 [ 1128.181999][T12599] tomoyo_encode2.part.0+0xec/0x3b0 [ 1128.187216][T12599] tomoyo_encode+0x28/0x50 [ 1128.191647][T12599] tomoyo_realpath_from_path+0x184/0x620 [ 1128.197330][T12599] tomoyo_check_open_permission+0x26d/0x370 [ 1128.203239][T12599] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 1128.208874][T12599] ? __lock_acquire+0xcbb/0x4c50 [ 1128.213867][T12599] ? lock_downgrade+0x840/0x840 [ 1128.218745][T12599] ? do_raw_spin_lock+0x129/0x2e0 [ 1128.223785][T12599] tomoyo_file_open+0xa3/0xd0 [ 1128.228475][T12599] security_file_open+0x6e/0x410 [ 1128.233485][T12599] do_dentry_open+0x358/0x1290 [ 1128.238235][T12599] ? devcgroup_check_permission+0x1a8/0x420 [ 1128.246744][T12599] ? security_inode_permission+0xc4/0xf0 [ 1128.252365][T12599] ? chown_common+0x550/0x550 [ 1128.257068][T12599] ? inode_permission+0xab/0x500 [ 1128.262017][T12599] path_openat+0x1e59/0x27d0 [ 1128.266597][T12599] ? path_lookupat.isra.0+0x530/0x530 [ 1128.271962][T12599] ? lock_acquire+0x1f2/0x8f0 [ 1128.276633][T12599] do_filp_open+0x192/0x260 [ 1128.281124][T12599] ? may_open_dev+0xf0/0xf0 [ 1128.285682][T12599] ? do_raw_spin_lock+0x129/0x2e0 [ 1128.290715][T12599] ? _raw_spin_unlock+0x24/0x40 [ 1128.295550][T12599] ? __alloc_fd+0x46d/0x600 [ 1128.300054][T12599] do_sys_openat2+0x585/0x7d0 [ 1128.304714][T12599] ? file_open_root+0x400/0x400 [ 1128.309560][T12599] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1128.315101][T12599] ? wait_for_completion+0x270/0x270 [ 1128.320368][T12599] ? __this_cpu_preempt_check+0x28/0x190 [ 1128.325986][T12599] ? __sb_end_write+0x101/0x1d0 [ 1128.330834][T12599] do_sys_open+0xc3/0x140 [ 1128.335156][T12599] ? filp_open+0x70/0x70 [ 1128.339377][T12599] ? ksys_write+0x1a5/0x250 [ 1128.343863][T12599] ? __ia32_sys_clock_settime+0x260/0x260 [ 1128.349582][T12599] ? trace_hardirqs_off_caller+0x55/0x230 [ 1128.355287][T12599] do_syscall_64+0xf6/0x7d0 [ 1128.359789][T12599] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1128.365749][T12599] RIP: 0033:0x45ca69 [ 1128.369622][T12599] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1128.389221][T12599] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1128.397789][T12599] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1128.405769][T12599] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1128.413735][T12599] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1128.421689][T12599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1128.429652][T12599] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1128.464764][T12599] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1128.522437][ T3140] usb 6-1: USB disconnect, device number 60 03:39:51 executing program 5 (fault-call:1 fault-nth:6): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:39:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0xffffffffffffff9b, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 03:39:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x16000) 03:39:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x11, 0x0, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, 0x0, &(0x7f0000000000)) r3 = fcntl$dupfd(r2, 0x406, r1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xd811) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x6, @multicast2, 0x2e01, 0x0, 'dh\x00'}, 0x2c) 03:39:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x3}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x2c]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r1, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r1, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') readv(r2, &(0x7f0000000080)=[{&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000000480)=""/167, 0xa7}, {&(0x7f0000000540)=""/191, 0xbf}], 0x3) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r4, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f0000000180)) write$fb(r2, &(0x7f0000000000)="bd209467ac06c2bcbcfb2496226a94d875acb7efc5cab37b83acc1e25789d8e3079d66c740f6a6e05cca8e58d2e210a5b9a49817fd2836d9e72c2a1cd6404bed2e289620362be080e6064f", 0x4b) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000806010300000000000000000000000005000100070000008a1f95aa6747e81b55181ac98ba5fe102a3f662b57baced93cc4a865195fa8fb86e7fb3f968cc0021a0b0e0940ddcf09ec6cfa034c1b63f6fb373c9831dd8c74de3be39f4fe2ae779523fa019034026f29a05d3dc2dd66886ff97289ab5de207e2b1d4e9b27abba397f5454a2867de8a681e814c7f5cf8b39644058aaa47d8478c07ac05813da6fe"], 0x1c}}, 0x0) 03:39:51 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r2, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) read$snddsp(r3, &(0x7f0000000140)=""/188, 0xbc) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) signalfd4(r1, &(0x7f0000000000)={[0x40]}, 0x8, 0x1800) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1, 0x13}}, 0x1c}}, 0x1014) 03:39:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) fcntl$getown(r4, 0x9) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:39:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000040)) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 1129.431750][ T3140] usb 6-1: new high-speed USB device number 61 using dummy_hcd 03:39:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000024c0)=[{&(0x7f00000003c0)=""/22, 0x16}, {&(0x7f0000000400)=""/146, 0x92}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x4, &(0x7f0000002500)=""/181, 0xb5}, 0x20) accept4$inet6(r1, &(0x7f0000002600)={0xa, 0x0, 0x0, @ipv4={[], [], @private}}, &(0x7f0000002640)=0x1c, 0x800) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 1129.681823][ T3140] usb 6-1: Using ep0 maxpacket: 8 03:39:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x80) [ 1129.802278][ T3140] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1129.810400][ T3140] usb 6-1: config 0 has no interface number 0 [ 1129.818995][ T3140] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1129.849792][ T3140] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1129.884150][ T3140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.907111][ T3140] usb 6-1: config 0 descriptor?? [ 1129.943176][T12680] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1130.191810][T12680] FAULT_INJECTION: forcing a failure. [ 1130.191810][T12680] name failslab, interval 1, probability 0, space 0, times 0 [ 1130.301573][T12680] CPU: 1 PID: 12680 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1130.310277][T12680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1130.320338][T12680] Call Trace: [ 1130.323640][T12680] dump_stack+0x188/0x20d [ 1130.327977][T12680] should_fail.cold+0x5/0xa [ 1130.332494][T12680] ? fault_create_debugfs_attr+0x140/0x140 [ 1130.338305][T12680] should_failslab+0x5/0xf [ 1130.342717][T12680] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1130.348186][T12680] ? pointer+0x7c0/0x7c0 [ 1130.356174][T12680] snd_seq_create_port+0xb5/0x590 [ 1130.361200][T12680] ? sprintf+0xc0/0x100 [ 1130.365352][T12680] ? scnprintf+0x140/0x140 [ 1130.369770][T12680] ? do_sys_openat2+0x585/0x7d0 [ 1130.374638][T12680] snd_seq_ioctl_create_port+0x101/0x6d0 [ 1130.380315][T12680] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1130.385866][T12680] create_port+0x17d/0x240 [ 1130.390283][T12680] ? async_call_lookup_ports+0x10/0x10 [ 1130.395740][T12680] ? mark_lock+0x12b/0xf10 [ 1130.400224][T12680] ? snd_seq_oss_process_event+0x2590/0x2590 [ 1130.406198][T12680] ? create_port+0x240/0x240 [ 1130.410798][T12680] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 1130.416329][T12680] ? find_held_lock+0x2d/0x110 [ 1130.421080][T12680] snd_seq_oss_open+0x2dc/0x980 [ 1130.425932][T12680] odev_open+0x6c/0x90 [ 1130.429993][T12680] ? odev_release+0x70/0x70 [ 1130.435525][T12680] soundcore_open+0x446/0x600 [ 1130.440190][T12680] ? sound_devnode+0xf0/0xf0 [ 1130.444762][T12680] chrdev_open+0x219/0x5c0 [ 1130.449171][T12680] ? cdev_put.part.0+0x50/0x50 [ 1130.453934][T12680] ? security_file_open+0x84/0x410 [ 1130.459040][T12680] do_dentry_open+0x4ba/0x1290 [ 1130.463798][T12680] ? cdev_put.part.0+0x50/0x50 [ 1130.468567][T12680] ? security_inode_permission+0xc4/0xf0 [ 1130.474177][T12680] ? chown_common+0x550/0x550 [ 1130.478862][T12680] ? inode_permission+0xab/0x500 [ 1130.483787][T12680] path_openat+0x1e59/0x27d0 [ 1130.488364][T12680] ? path_lookupat.isra.0+0x530/0x530 [ 1130.493718][T12680] ? _kstrtoull+0x13f/0x1f0 [ 1130.498659][T12680] do_filp_open+0x192/0x260 [ 1130.503166][T12680] ? may_open_dev+0xf0/0xf0 [ 1130.507667][T12680] ? do_raw_spin_lock+0x129/0x2e0 [ 1130.512677][T12680] ? _raw_spin_unlock+0x24/0x40 [ 1130.517508][T12680] ? __alloc_fd+0x46d/0x600 [ 1130.522010][T12680] do_sys_openat2+0x585/0x7d0 [ 1130.526671][T12680] ? file_open_root+0x400/0x400 [ 1130.531505][T12680] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1130.537042][T12680] ? wait_for_completion+0x270/0x270 [ 1130.542304][T12680] ? __this_cpu_preempt_check+0x28/0x190 [ 1130.547914][T12680] ? __sb_end_write+0x101/0x1d0 [ 1130.552764][T12680] do_sys_open+0xc3/0x140 [ 1130.557084][T12680] ? filp_open+0x70/0x70 [ 1130.561305][T12680] ? ksys_write+0x1a5/0x250 [ 1130.565796][T12680] ? __ia32_sys_clock_settime+0x260/0x260 [ 1130.571495][T12680] ? trace_hardirqs_off_caller+0x55/0x230 [ 1130.577215][T12680] do_syscall_64+0xf6/0x7d0 [ 1130.581721][T12680] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1130.587595][T12680] RIP: 0033:0x45ca69 [ 1130.591507][T12680] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1130.611124][T12680] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1130.619528][T12680] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1130.627668][T12680] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1130.635621][T12680] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1130.643578][T12680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1130.651533][T12680] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1131.130103][T12680] ALSA: seq_oss: can't create port [ 1131.142145][T28445] usb 6-1: USB disconnect, device number 61 03:39:54 executing program 5 (fault-call:1 fault-nth:7): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:39:54 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) accept4$packet(r1, &(0x7f00000030c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003100)=0x14, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r3, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) bpf$MAP_CREATE(0x0, &(0x7f0000003140)={0xc, 0x4, 0x18cf, 0x0, 0xf, 0xffffffffffffffff, 0x9, [], r2, r4, 0x5, 0x0, 0x3}, 0x40) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r6}) fcntl$dupfd(r6, 0x0, 0xffffffffffffffff) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x1c}}, 0x4000000) 03:39:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300030e000000000200000000000004000900a0005b2e6c332be9048cd89e555292001ff94aa36140afcc00000000030006000000000002000000e0000021000000000000001602000100000000000000000d00000000030005000000000002"], 0x70}}, 0x0) 03:39:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x0, 0xd5d4, 0xe20) 03:39:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x2e]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x4}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:54 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='xfs\x00', 0x0, &(0x7f0000000200)='(\x00') syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) [ 1131.870373][T12815] xfs: Unknown parameter '(' 03:39:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000080601030008738e10000000000000000000000005000100"], 0x1c}}, 0x0) [ 1131.910373][T12820] xfs: Unknown parameter '(' 03:39:54 executing program 3: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010044) [ 1131.996294][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1132.051333][ T3127] usb 6-1: new high-speed USB device number 62 using dummy_hcd 03:39:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 1132.085399][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 03:39:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300030e000000000200000000000004000900a0005b2e6c332be9048cd89e555292001ff94aa36140afcc00000000030006000000000002000000e0000021000000000000001602000100000000000000000d00000000030005000000000002"], 0x70}}, 0x0) [ 1132.311418][ T3127] usb 6-1: Using ep0 maxpacket: 8 03:39:54 executing program 3: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010044) [ 1132.456060][ T3127] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1132.469941][ T3127] usb 6-1: config 0 has no interface number 0 [ 1132.488092][ T3127] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1132.512091][ T3127] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1132.532673][ T3127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.551847][ T3127] usb 6-1: config 0 descriptor?? [ 1132.582912][T12805] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1132.821589][T12805] FAULT_INJECTION: forcing a failure. [ 1132.821589][T12805] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.846802][T12805] CPU: 1 PID: 12805 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1132.855526][T12805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1132.865590][T12805] Call Trace: [ 1132.868895][T12805] dump_stack+0x188/0x20d [ 1132.873246][T12805] should_fail.cold+0x5/0xa [ 1132.877771][T12805] ? fault_create_debugfs_attr+0x140/0x140 [ 1132.883600][T12805] should_failslab+0x5/0xf [ 1132.888025][T12805] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1132.893408][T12805] ? find_held_lock+0x2d/0x110 [ 1132.898192][T12805] ? lock_downgrade+0x840/0x840 [ 1132.903058][T12805] snd_seq_oss_open+0x50/0x980 [ 1132.907836][T12805] odev_open+0x6c/0x90 [ 1132.911909][T12805] ? odev_release+0x70/0x70 [ 1132.916420][T12805] soundcore_open+0x446/0x600 [ 1132.921109][T12805] ? sound_devnode+0xf0/0xf0 [ 1132.925699][T12805] chrdev_open+0x219/0x5c0 [ 1132.930213][T12805] ? cdev_put.part.0+0x50/0x50 [ 1132.934997][T12805] ? security_file_open+0x84/0x410 [ 1132.940126][T12805] do_dentry_open+0x4ba/0x1290 [ 1132.944902][T12805] ? cdev_put.part.0+0x50/0x50 [ 1132.949679][T12805] ? security_inode_permission+0xc4/0xf0 [ 1132.955322][T12805] ? chown_common+0x550/0x550 [ 1132.960019][T12805] ? inode_permission+0xab/0x500 [ 1132.964975][T12805] path_openat+0x1e59/0x27d0 [ 1132.969586][T12805] ? path_lookupat.isra.0+0x530/0x530 [ 1132.974971][T12805] ? lock_acquire+0x1f2/0x8f0 [ 1132.979662][T12805] do_filp_open+0x192/0x260 [ 1132.984173][T12805] ? may_open_dev+0xf0/0xf0 [ 1132.988691][T12805] ? do_raw_spin_lock+0x129/0x2e0 [ 1132.993732][T12805] ? _raw_spin_unlock+0x24/0x40 [ 1132.998589][T12805] ? __alloc_fd+0x46d/0x600 [ 1133.003117][T12805] do_sys_openat2+0x585/0x7d0 [ 1133.007838][T12805] ? file_open_root+0x400/0x400 [ 1133.012800][T12805] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1133.018376][T12805] ? wait_for_completion+0x270/0x270 [ 1133.023667][T12805] ? __this_cpu_preempt_check+0x28/0x190 [ 1133.029311][T12805] ? __sb_end_write+0x101/0x1d0 [ 1133.034174][T12805] do_sys_open+0xc3/0x140 [ 1133.038517][T12805] ? filp_open+0x70/0x70 [ 1133.042763][T12805] ? ksys_write+0x1a5/0x250 [ 1133.047269][T12805] ? __ia32_sys_clock_settime+0x260/0x260 [ 1133.052988][T12805] ? trace_hardirqs_off_caller+0x55/0x230 [ 1133.058719][T12805] do_syscall_64+0xf6/0x7d0 [ 1133.063242][T12805] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1133.069136][T12805] RIP: 0033:0x45ca69 [ 1133.073042][T12805] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1133.092680][T12805] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1133.101125][T12805] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1133.109104][T12805] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1133.117076][T12805] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1133.125032][T12805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1133.132996][T12805] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1133.168727][ T4250] usb 6-1: USB disconnect, device number 62 03:39:56 executing program 5 (fault-call:1 fault-nth:8): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:39:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x200005, 0x1d}) 03:39:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000002c0)={0x0, @bt={0x9, 0x1, 0x0, 0x1, 0xffff, 0x7, 0x6, 0x100, 0x6, 0xbc, 0xffff0001, 0x1, 0x1ff, 0x80000001, 0x2, 0x21, {0x2, 0x1}, 0x1f, 0x2}}) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r1, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000001c0)={[{0x3, 0x2, 0x4, 0x8, 0x8, 0x7f, 0x7, 0x1f, 0x6, 0x9, 0x2, 0x59, 0x1}, {0x0, 0x2, 0x9, 0x5, 0xd3, 0x6, 0x8, 0x0, 0x7, 0x3, 0x6, 0x2, 0x4}, {0x4, 0x7f, 0x0, 0x1e, 0x61, 0x0, 0x7, 0x8, 0x7, 0x40, 0x8, 0x3}], 0x9}) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, 0xf, 0x6, 0x800, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="0900000008060103000000000000000001000013050001a9228c5eb5"], 0x1c}}, 0x0) 03:39:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = msgget$private(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f00000001c0)={0x4, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}]}) msgctl$IPC_SET(r1, 0x1, &(0x7f0000f00f88)) msgsnd(r1, 0x0, 0x8, 0x0) msgctl$IPC_RMID(r1, 0x0) gettid() preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0xcfe) msgsnd(r1, &(0x7f0000000000)={0x0, 'I'}, 0x9, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300030e000000000200000000000004000900a0005b2e6c332be9048cd89e555292001ff94aa36140afcc00000000030006000000000002000000e0000021000000000000001602000100000000000000000d00000000030005000000000002"], 0x70}}, 0x60000040) 03:39:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x44]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x5}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:56 executing program 1: sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000080601030000000000000000000000800500010007000000"], 0x1c}}, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r0, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) gettid() ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x3d) 03:39:56 executing program 0: socket$inet(0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) accept$inet6(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, r3}) 03:39:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x9, 0xa6, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}]}, 0x3c}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@private0={0xfc, 0x0, [], 0x1}, r2}, 0x14) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, 0x0, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) kexec_load(0x8, 0x0, &(0x7f0000000040), 0x2) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f2, 0x20, 0x70bd2a, 0x0, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x44004840}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff) syz_mount_image$ext4(0x0, 0x0, 0x7, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000680)="62f23e748cdfecc0d3bcb88248f9f8f8e8ba030000000000001dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a30142ee9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb5874427", 0x90, 0xb6}], 0x80000, 0x0) 03:39:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000050001000700"/28], 0x1c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x12900, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3f, 0x400) [ 1134.081449][ T4250] usb 6-1: new high-speed USB device number 63 using dummy_hcd 03:39:56 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x322, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d", 0x5) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) r2 = socket(0x11, 0x3, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, 0x0, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) r3 = accept$alg(r2, 0x0, 0x0) accept(r3, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, &(0x7f0000000100)=0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000806010300ffef000000c5b97900000000c161b8a51f7c603b08000500010007000000"], 0x1c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$hidraw(&(0x7f00000001c0)='/dev/hidraw#\x00', 0x408, 0x1) 03:39:56 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000600)=0x14) write$9p(0xffffffffffffffff, &(0x7f0000000180)="ce4c6e136dbb6c70f96499474d", 0xd) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x68000000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000600)) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000100)) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x68000000) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) [ 1134.341268][ T4250] usb 6-1: Using ep0 maxpacket: 8 [ 1134.442165][T12958] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1134.461941][ T4250] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1134.470045][ T4250] usb 6-1: config 0 has no interface number 0 [ 1134.501184][ T4250] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1134.515594][T12930] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1134.535424][ T4250] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1134.546688][ T4250] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.569307][ T4250] usb 6-1: config 0 descriptor?? [ 1134.594227][T12908] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1134.861964][T12908] FAULT_INJECTION: forcing a failure. [ 1134.861964][T12908] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.924011][T12908] CPU: 1 PID: 12908 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1134.932822][T12908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1134.942880][T12908] Call Trace: [ 1134.946183][T12908] dump_stack+0x188/0x20d [ 1134.950533][T12908] should_fail.cold+0x5/0xa [ 1134.955050][T12908] ? fault_create_debugfs_attr+0x140/0x140 [ 1134.960859][T12908] should_failslab+0x5/0xf [ 1134.965283][T12908] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1134.970729][T12908] ? snd_seq_ioctl_create_port+0x4e4/0x6d0 [ 1134.976537][T12908] snd_seq_queue_alloc+0x51/0x4d0 [ 1134.981579][T12908] snd_seq_ioctl_create_queue+0xab/0x320 [ 1134.987215][T12908] ? async_call_lookup_ports+0x10/0x10 [ 1134.992686][T12908] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1134.998244][T12908] alloc_seq_queue.isra.0+0xc6/0x160 [ 1135.003543][T12908] ? delete_port+0xc0/0xc0 [ 1135.007990][T12908] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 1135.013543][T12908] ? find_held_lock+0x2d/0x110 [ 1135.018328][T12908] snd_seq_oss_open+0x2fe/0x980 [ 1135.023192][T12908] odev_open+0x6c/0x90 [ 1135.027264][T12908] ? odev_release+0x70/0x70 [ 1135.031772][T12908] soundcore_open+0x446/0x600 [ 1135.036465][T12908] ? sound_devnode+0xf0/0xf0 [ 1135.041059][T12908] chrdev_open+0x219/0x5c0 [ 1135.045479][T12908] ? cdev_put.part.0+0x50/0x50 [ 1135.050256][T12908] ? security_file_open+0x84/0x410 [ 1135.055374][T12908] do_dentry_open+0x4ba/0x1290 [ 1135.060135][T12908] ? cdev_put.part.0+0x50/0x50 [ 1135.064886][T12908] ? security_inode_permission+0xc4/0xf0 [ 1135.070503][T12908] ? chown_common+0x550/0x550 [ 1135.075172][T12908] ? inode_permission+0xab/0x500 [ 1135.080104][T12908] path_openat+0x1e59/0x27d0 [ 1135.084703][T12908] ? path_lookupat.isra.0+0x530/0x530 [ 1135.090083][T12908] ? _kstrtoull+0x13f/0x1f0 [ 1135.094638][T12908] do_filp_open+0x192/0x260 [ 1135.099146][T12908] ? may_open_dev+0xf0/0xf0 [ 1135.103665][T12908] ? do_raw_spin_lock+0x129/0x2e0 [ 1135.108706][T12908] ? _raw_spin_unlock+0x24/0x40 [ 1135.113551][T12908] ? __alloc_fd+0x46d/0x600 [ 1135.118077][T12908] do_sys_openat2+0x585/0x7d0 [ 1135.122766][T12908] ? file_open_root+0x400/0x400 [ 1135.127616][T12908] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1135.133172][T12908] ? wait_for_completion+0x270/0x270 [ 1135.138461][T12908] ? __this_cpu_preempt_check+0x28/0x190 [ 1135.144117][T12908] ? __sb_end_write+0x101/0x1d0 [ 1135.148977][T12908] do_sys_open+0xc3/0x140 [ 1135.153309][T12908] ? filp_open+0x70/0x70 [ 1135.157547][T12908] ? ksys_write+0x1a5/0x250 [ 1135.162054][T12908] ? __ia32_sys_clock_settime+0x260/0x260 [ 1135.167762][T12908] ? trace_hardirqs_off_caller+0x55/0x230 [ 1135.173482][T12908] do_syscall_64+0xf6/0x7d0 [ 1135.178001][T12908] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1135.183893][T12908] RIP: 0033:0x45ca69 [ 1135.187781][T12908] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1135.207381][T12908] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1135.215798][T12908] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1135.223776][T12908] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1135.231752][T12908] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1135.239781][T12908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1135.247752][T12908] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1135.291593][ T4251] usb 6-1: USB disconnect, device number 63 [ 1135.435545][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1135.467714][T12967] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 03:39:58 executing program 5 (fault-call:1 fault-nth:9): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:39:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f0000000200)=0x401, 0x4) getsockname$packet(r1, 0x0, &(0x7f0000000000)) getsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x11) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x6000) 03:39:58 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x800000b, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000000)={0x3, 0x0}, 0xffdd) 03:39:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x200000000000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) fsync(r2) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x69, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x67b, 0x1, 0x2}, 0x0, 0xffffffffffffffff, r3, 0xb) clone(0x200000008a105d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x3c) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0xfffffffd, 0x3, 0x0, 0x0, 0x7}, 0x0) syz_read_part_table(0x7, 0x4, &(0x7f00000002c0)=[{&(0x7f0000001380)="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", 0x1000, 0xffffffff7bffffff}, {&(0x7f00000000c0)="19b893d503dc6efddc58ad9ee50e03937c4e9f3f4fa50e95769f4925f17ba034c7fd1a897b2620eea15b2c72d07a4c4a0999277a7feaaefc4d2b39224e527b", 0x3f, 0x3}, {&(0x7f0000000180)="c6c9be45eee95269f454c8bf94f3d7b5dee8c5ca092538a133599ac965d2b95d8c31aca520d4df88acf55cfae4d8be8b1a322a8eed51a101be4632e2cf408a678d0e7dc6e6f7c3dcbfea86278bc58103f0555ca2a8cae75a535cb2e2f7008e22d0b6476583c5654d4e4945117354b47d3372ea6eaab960d90d93d91efaed1868555ad971f11429c04f7ff1c4d7de632044b8c374ec218ee7ef70699a73b79850a11c6d2cc2e07182883f", 0xaa, 0x7}, {&(0x7f0000000380)="9edd90c5a2f0c28a0941ba2a0da8eaaf3155c07ba47932f2b672b343d81667ab750628ad3ec2ae7dba61466bb8fd1ece5d2b06f97a403088f7fa18828c0945aac5d4625d0d431ff0e5d8fea2a2eedd048c20dd3132da25b9622205682ff81d70eb29ae32bf7f510cea058b82ddf8d07e9e2b93376e66b0187754cb37318732c1cf", 0x81, 0x3}]) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xcb, 0x6, 0x0, 0x0, 0x0, 0x3, 0x98244, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfffffffffffff8a3}, 0x0, 0x800007b, 0x7fff, 0x8, 0x101, 0xff7ffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="3bbf5140972d336cf3400d0000000000001c9ab1bcf3b7c6949c2a394769b2d977837c7f9488000029b5192c2801380634a68ac91205f615eb65b6c9c72b5ca90b96f2b4ab8a000057d9770e351fdcd5b6ddd5cf06fc8cda4aa4d86ab94db9060000000000000004100d613f9c73ee36e214ede9aa40c19fe2f862780500014d7049c49c27e0c8695a65fdd08421e40a6c1c18e176006776370fdf46ff9b466f6c09cd89c6aa073c15fa1a8880f65a31ad8870fbb7afc2733868443a4acf394dfeba5a133d00b9160421e2acff210800bc4b3708ba96f8958b0757e4d3c319952eaca9fa5249ac71da94a922555f3e56967202200000000030c58a8b898eb1fac4a278947126830af701a43ea31fbee4ccf9ec932e7d498060116ccb222df53a39b20613d07fc5e841d0f4f134c08e89bfe9e3b2a1aa4649423a67e5d7fe1fae17373bde7e28bdb5dde817895ad4e0ce066285c4974fe955e906ce78d567d7561830253f11646afd479d5bdd24568fc80589f73ff52f7231e44b1b0c7868cb36b9da4e9ad9071cebe71bf61ee8dce4a86cfe991d04a08b5c540594c908e65f5dcd7f8e26d07a0857e0dbf763e93e55c9574d5d729c85f31b55c2101c04acdca877b1d58d3e84c243818536e0790b0017e3cca6219820af68d09d427f91eb2608e2d1fd0cb67e6e78b1f0cec6f524d0b0589fa6bacb627f47f1f76d079866b5e714ea57e46caeac7014af1c00000000000000000000c92b12ba70eda0f0fd0628d88937"], 0xa2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 03:39:58 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4c]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:58 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) 03:39:58 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010044) 03:39:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 03:39:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x6}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:39:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3, 0xff, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8148, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r1, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000280)={0xffffffffffffffff, r2}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket(0x11, 0x0, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, 0x0, &(0x7f0000000000)) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="30004000130a0300000000000000000007910006090f010073797a3000000000ad6c034000000009bec00000000000003a2e073e278d3ca2af148fdf657af100"/76], 0x30}, 0x1, 0x0, 0x0, 0x24008011}, 0x40) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r7, r6, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r4, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$DRM_IOCTL_FREE_BUFS(r6, 0x4010641a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[0x3, 0x6, 0x9f539ed, 0x3]}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000008060103000000000000000500010007000080b8c720a7457b086d51fae399ceea0ae46ab95f5a785f36f6769d85e6a673ee18ef2b1df4"], 0x1c}}, 0x0) 03:39:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 1136.260988][ T4251] usb 6-1: new high-speed USB device number 64 using dummy_hcd 03:39:58 executing program 3: socket$inet6(0xa, 0x2, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) [ 1136.376621][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1136.531098][ T4251] usb 6-1: Using ep0 maxpacket: 8 [ 1136.671588][ T4251] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1136.683204][ T4251] usb 6-1: config 0 has no interface number 0 [ 1136.696212][ T4251] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1136.717831][ T4251] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1136.737230][ T4251] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.757609][ T4251] usb 6-1: config 0 descriptor?? [ 1136.783868][T13035] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1137.031059][T13035] FAULT_INJECTION: forcing a failure. [ 1137.031059][T13035] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.068144][T13035] CPU: 1 PID: 13035 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1137.076850][T13035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1137.086905][T13035] Call Trace: [ 1137.090210][T13035] dump_stack+0x188/0x20d [ 1137.094559][T13035] should_fail.cold+0x5/0xa [ 1137.099076][T13035] ? fault_create_debugfs_attr+0x140/0x140 [ 1137.104896][T13035] should_failslab+0x5/0xf [ 1137.109322][T13035] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1137.114706][T13035] ? lockdep_init_map_waits+0x26a/0x890 [ 1137.120276][T13035] snd_seq_prioq_new+0x3c/0x120 [ 1137.125149][T13035] snd_seq_queue_alloc+0x159/0x4d0 [ 1137.130273][T13035] snd_seq_ioctl_create_queue+0xab/0x320 [ 1137.135913][T13035] ? async_call_lookup_ports+0x10/0x10 [ 1137.141389][T13035] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1137.146950][T13035] alloc_seq_queue.isra.0+0xc6/0x160 [ 1137.152242][T13035] ? delete_port+0xc0/0xc0 [ 1137.156684][T13035] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 1137.162242][T13035] ? find_held_lock+0x2d/0x110 [ 1137.167021][T13035] snd_seq_oss_open+0x2fe/0x980 [ 1137.171884][T13035] odev_open+0x6c/0x90 [ 1137.175957][T13035] ? odev_release+0x70/0x70 [ 1137.180462][T13035] soundcore_open+0x446/0x600 [ 1137.185147][T13035] ? sound_devnode+0xf0/0xf0 [ 1137.189737][T13035] chrdev_open+0x219/0x5c0 [ 1137.194160][T13035] ? cdev_put.part.0+0x50/0x50 [ 1137.199196][T13035] ? security_file_open+0x84/0x410 [ 1137.204480][T13035] do_dentry_open+0x4ba/0x1290 [ 1137.209269][T13035] ? cdev_put.part.0+0x50/0x50 [ 1137.214043][T13035] ? security_inode_permission+0xc4/0xf0 [ 1137.219688][T13035] ? chown_common+0x550/0x550 [ 1137.224372][T13035] ? inode_permission+0xab/0x500 [ 1137.229332][T13035] path_openat+0x1e59/0x27d0 [ 1137.233962][T13035] ? path_lookupat.isra.0+0x530/0x530 [ 1137.239342][T13035] ? _kstrtoull+0x13f/0x1f0 [ 1137.243862][T13035] do_filp_open+0x192/0x260 [ 1137.248372][T13035] ? may_open_dev+0xf0/0xf0 [ 1137.252891][T13035] ? do_raw_spin_lock+0x129/0x2e0 [ 1137.257935][T13035] ? _raw_spin_unlock+0x24/0x40 [ 1137.262788][T13035] ? __alloc_fd+0x46d/0x600 [ 1137.267309][T13035] do_sys_openat2+0x585/0x7d0 [ 1137.271992][T13035] ? file_open_root+0x400/0x400 [ 1137.276846][T13035] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1137.282401][T13035] ? wait_for_completion+0x270/0x270 [ 1137.287686][T13035] ? __this_cpu_preempt_check+0x28/0x190 [ 1137.293324][T13035] ? __sb_end_write+0x101/0x1d0 [ 1137.298182][T13035] do_sys_open+0xc3/0x140 [ 1137.302518][T13035] ? filp_open+0x70/0x70 [ 1137.306845][T13035] ? ksys_write+0x1a5/0x250 [ 1137.311354][T13035] ? __ia32_sys_clock_settime+0x260/0x260 [ 1137.317077][T13035] ? trace_hardirqs_off_caller+0x55/0x230 [ 1137.322809][T13035] do_syscall_64+0xf6/0x7d0 [ 1137.327321][T13035] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1137.333220][T13035] RIP: 0033:0x45ca69 [ 1137.337117][T13035] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1137.356721][T13035] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1137.365138][T13035] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1137.373141][T13035] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1137.381139][T13035] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1137.389118][T13035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1137.397117][T13035] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1137.559734][T28445] usb 6-1: USB disconnect, device number 64 03:40:00 executing program 5 (fault-call:1 fault-nth:10): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:40:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}]}, 0x3c}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff) 03:40:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000008060103000000000000000000000000050001000700000037bcfcc784a04b105d9f2b350640380d36af5d40ef2ab43d6c5a996d2479ffd72790"], 0x1c}}, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20103, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000040)) 03:40:00 executing program 3: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x1918ffd, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x3, &(0x7f0000000180)=[@transaction={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:40:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x7}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x60]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) [ 1138.269438][T13161] binder: 13142:13161 unknown command 64 [ 1138.296951][T13161] binder: 13142:13161 ioctl c0306201 20000240 returned -22 03:40:00 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000200)={0x2}, 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0xeacf06765f5b5991) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/145) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket(0x11, 0x0, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r4, @ANYRESDEC=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40061}, 0x0) [ 1138.480648][ T4251] usb 6-1: new high-speed USB device number 65 using dummy_hcd 03:40:01 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000240)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3}, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000006c0)={0x0, 0xed1, 0x5, 0x4, 0x2, [{0x2bda, 0x0, 0x0, [], 0x903}, {0x996, 0x0, 0x0, [], 0x2000}]}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000001c0)={0x0, 0xc9, 0xfff, 0x7}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 1138.721300][ T4251] usb 6-1: Using ep0 maxpacket: 8 03:40:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40) 03:40:01 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200000d000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000056ce36b68b0f334d6c37d03057c9ecee866f55e3376e4a82071d7827afd2d144b81e55b3f31672797fc00300533324f871d94768e25851d3162c1bde856ed69b673e5b8d861ff207c0eb4b60a82fc3c0e2085d6add5893b223f703b454af0805f231eb8474953f640e3d490cdc0448ecf21b205768e34ab95b6ef820398c1ba4b81cee61a98d7df3768db9bd07793eecd40ef23b16084623ca56c82b205eca4d90628aeacb85e559feb81966348bb8fc0fb89f8abf8e94d4429449cd85af76d9929b318c989bead2f9921120246508b2ab814b38f9cac8fea1a8c4712b53306c00a649a62720cd661d21ab5d7a8b9f974b4f5da4862c01b4cbe5f279fe779d5f9f366ec0aee3344d712d35edc17c209296c3db7ff279c9bc5ab356c3471399f860fef75f37888d0b0968f5a801df57cc"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002e0, 0xe, 0x0, &(0x7f0000000540)="b95b03b700030000009e40f086dd", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 1138.851324][ T4251] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1138.868695][ T4251] usb 6-1: config 0 has no interface number 0 03:40:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000000)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x63, 0x0, 0x2, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) [ 1138.892259][ T4251] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1138.918493][ T4251] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a 03:40:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) r0 = getpid() sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}]}, 0x3c}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff) [ 1138.935555][ T4251] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.957277][ T4251] usb 6-1: config 0 descriptor?? [ 1138.981929][T13157] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1139.210844][T13157] FAULT_INJECTION: forcing a failure. [ 1139.210844][T13157] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.264120][T13157] CPU: 0 PID: 13157 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1139.272827][T13157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1139.282889][T13157] Call Trace: [ 1139.286169][T13157] dump_stack+0x188/0x20d [ 1139.290486][T13157] should_fail.cold+0x5/0xa [ 1139.294991][T13157] ? fault_create_debugfs_attr+0x140/0x140 [ 1139.300784][T13157] should_failslab+0x5/0xf [ 1139.305180][T13157] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1139.310533][T13157] ? lockdep_init_map_waits+0x26a/0x890 [ 1139.316059][T13157] ? lockdep_init_map_waits+0x26a/0x890 [ 1139.321588][T13157] snd_seq_prioq_new+0x3c/0x120 [ 1139.326417][T13157] snd_seq_queue_alloc+0x12f/0x4d0 [ 1139.331515][T13157] snd_seq_ioctl_create_queue+0xab/0x320 [ 1139.337125][T13157] ? async_call_lookup_ports+0x10/0x10 [ 1139.342565][T13157] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1139.348236][T13157] alloc_seq_queue.isra.0+0xc6/0x160 [ 1139.353504][T13157] ? delete_port+0xc0/0xc0 [ 1139.357911][T13157] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 1139.363436][T13157] ? find_held_lock+0x2d/0x110 [ 1139.368185][T13157] snd_seq_oss_open+0x2fe/0x980 [ 1139.373017][T13157] odev_open+0x6c/0x90 [ 1139.377061][T13157] ? odev_release+0x70/0x70 [ 1139.381547][T13157] soundcore_open+0x446/0x600 [ 1139.386919][T13157] ? sound_devnode+0xf0/0xf0 [ 1139.391491][T13157] chrdev_open+0x219/0x5c0 [ 1139.395887][T13157] ? cdev_put.part.0+0x50/0x50 [ 1139.400634][T13157] ? security_file_open+0x84/0x410 [ 1139.405727][T13157] do_dentry_open+0x4ba/0x1290 [ 1139.410470][T13157] ? cdev_put.part.0+0x50/0x50 [ 1139.415217][T13157] ? security_inode_permission+0xc4/0xf0 [ 1139.420828][T13157] ? chown_common+0x550/0x550 [ 1139.426007][T13157] ? inode_permission+0xab/0x500 [ 1139.430929][T13157] path_openat+0x1e59/0x27d0 [ 1139.435510][T13157] ? path_lookupat.isra.0+0x530/0x530 [ 1139.440863][T13157] ? lock_acquire+0x1f2/0x8f0 [ 1139.445537][T13157] do_filp_open+0x192/0x260 [ 1139.450034][T13157] ? may_open_dev+0xf0/0xf0 [ 1139.454538][T13157] ? do_raw_spin_lock+0x129/0x2e0 [ 1139.459550][T13157] ? _raw_spin_unlock+0x24/0x40 [ 1139.464380][T13157] ? __alloc_fd+0x46d/0x600 [ 1139.468868][T13157] do_sys_openat2+0x585/0x7d0 [ 1139.473526][T13157] ? file_open_root+0x400/0x400 [ 1139.478358][T13157] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1139.483885][T13157] ? wait_for_completion+0x270/0x270 [ 1139.489145][T13157] ? __this_cpu_preempt_check+0x28/0x190 [ 1139.494756][T13157] ? __sb_end_write+0x101/0x1d0 [ 1139.499586][T13157] do_sys_open+0xc3/0x140 [ 1139.503893][T13157] ? filp_open+0x70/0x70 [ 1139.508114][T13157] ? ksys_write+0x1a5/0x250 [ 1139.512599][T13157] ? __ia32_sys_clock_settime+0x260/0x260 [ 1139.518314][T13157] ? trace_hardirqs_off_caller+0x55/0x230 [ 1139.524041][T13157] do_syscall_64+0xf6/0x7d0 [ 1139.528526][T13157] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1139.534396][T13157] RIP: 0033:0x45ca69 [ 1139.538270][T13157] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1139.557862][T13157] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1139.566266][T13157] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1139.574251][T13157] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1139.582220][T13157] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1139.590184][T13157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1139.598155][T13157] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1140.019059][ T3219] usb 6-1: USB disconnect, device number 65 03:40:02 executing program 5 (fault-call:1 fault-nth:11): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:40:02 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1e, 0xa, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket(0x11, 0x4, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000040a014371add5000000000002000004030073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0xc800) getsockname$packet(r0, 0x0, &(0x7f0000000000)) 03:40:02 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c5"], 0xfd30) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:40:02 executing program 0: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) dup2(r1, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f00000002c0)) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x5, 0xc050787274, 0x0, 0x0, 0x0) 03:40:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x8}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x73]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000080601030000000000000000000000000500010007000000cc14178bb4fe75fb34d36e0db193f7678526e48b0691f398708d1da07d31f6836f08195223a4604a8be031a0a8ad6d825b373dd661091ae166a8b364cae425774f0f902c6ed46c2d769976366895f38cc98aff63e3d50db79d310b3bdedceb86b0ec3c836a524718da2fec2a61753a0dc3d91a8544ac9a41e0c689e07226c0ebff5ff3d776c785819881a8"], 0x1c}}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r1, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r4, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000100)={0x3, 0x3, 0x0, &(0x7f0000000340)=""/227, 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000f1dff8)={0x0, r8}) fcntl$dupfd(r8, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000000)={0x9, 0x3, 0x4, 0x2, 0x9, {}, {0x5, 0x2, 0xf9, 0x2, 0xed, 0x88, "1da00c35"}, 0x50000000, 0x4, @fd=r5, 0x80, 0x0, r8}) [ 1140.751625][ T28] audit: type=1804 audit(1590982803.116:58): pid=13271 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir206584202/syzkaller.TiW8uT/1215/bus" dev="sda1" ino=16097 res=1 03:40:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x0, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x5c}}, 0x0) 03:40:03 executing program 0: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) dup2(r1, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f00000002c0)) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x5, 0xc050787274, 0x0, 0x0, 0x0) [ 1140.849773][ T28] audit: type=1804 audit(1590982803.116:59): pid=13271 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir206584202/syzkaller.TiW8uT/1215/bus" dev="sda1" ino=16097 res=1 [ 1140.970653][ T8040] usb 6-1: new high-speed USB device number 66 using dummy_hcd 03:40:03 executing program 3: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000fe00ff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe000000008500000003000000b70000000000000095000000000000006623848adf1dd9a764ab51a064e0ff0ca327ab62931d861531fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8205b01ddaa54d8756ad0f50f2568836077b8471b6b69819782748b376358ca58949a54d5827df14feecea46a5c53e9c37251709f1061b973ef07bf7f53ce129a9ecd3b4dd15100f2b452f98526a0d8cacfb6379b4c5008652a7b4c0974486a8d203bddc62bb2d555a363adbc33b49e13fbd1757b2701acad0e2684120b99b8cff3f48c94116f0c34faf7851b290feb3045aef0d6c169e331b622f20c41d8418bc4159c14025422835e81c3573af77dbaeb07913476244ffd5b5a924275cb1749289b44e97e7a73f148ae8206afe120c143749b5992e89f4337db4440f39c7a7d531f9663f4e82862ac52903971b323f60332cb7c9e89aafc50e79e1f62dcbb17f342aab5104d18e4eb69122b42f2173184c1d0fb3287c99b645f6e80e14e5d7c95a06cc0d94c5ca63c724fe222d659e083065c0bf5a197e845aa0c58123532083929883a1d9931374f02f13bca8b6ace8a91e4e2984ee38d8048417aea282aa70faea45f3305029d6e11f4e2157b339de66fda0a6712ebf149fa5967054c29e167ac158541013f6ba81867b500f773594cda31e309e5179a7cb9bc54c85e73721f407c80adeaac0d7502a0e126478fae6c8"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) dup2(r1, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f00000002c0)) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x5, 0xc050787274, 0x0, 0x0, 0x0) 03:40:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000008060103000000000000a700000000000000000000000000f1cb8f2dfae59a856fa399f2b068b2aa2d19eae0a5eebf73a72043108381bd66aeaf4bf4ab97612e19577e09ac095e72f14cb220c4962c5937aa9dccfefc957de3f5751073d38ccc9468b7be16921e2a73d83cefcf8a4be76640c9b54261175a0b375809219ed7f2bad4946f4874245823a2923d6ba3fe55db042c072ae8c9f4696ec8a81f0dead00fac4a5dd809469eb972244a0d66029083260507a8854aa02d9753e00570e2be9d1261ce528a7a17d2877c48a9b72427b0e891b6fd19a93e94facb3c5c"], 0x1c}}, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) ioctl$SIOCNRDECOBS(r1, 0x89e2) [ 1141.210492][ T8040] usb 6-1: Using ep0 maxpacket: 8 [ 1141.331028][ T8040] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1141.341676][ T8040] usb 6-1: config 0 has no interface number 0 03:40:03 executing program 3: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) dup2(r1, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f00000002c0)) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x5, 0xc050787274, 0x0, 0x0, 0x0) [ 1141.386711][ T8040] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1141.400480][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1141.441557][ T8040] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1141.455872][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1141.488250][ T8040] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.545799][ T8040] usb 6-1: config 0 descriptor?? [ 1141.602063][T13281] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1141.856894][T13281] FAULT_INJECTION: forcing a failure. [ 1141.856894][T13281] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.890276][T13281] CPU: 0 PID: 13281 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1141.898989][T13281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1141.909049][T13281] Call Trace: [ 1141.912356][T13281] dump_stack+0x188/0x20d [ 1141.916707][T13281] should_fail.cold+0x5/0xa [ 1141.921223][T13281] ? fault_create_debugfs_attr+0x140/0x140 [ 1141.927073][T13281] should_failslab+0x5/0xf [ 1141.931501][T13281] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1141.936883][T13281] ? lockdep_init_map_waits+0x26a/0x890 [ 1141.942444][T13281] snd_seq_prioq_new+0x3c/0x120 [ 1141.947301][T13281] snd_seq_queue_alloc+0x159/0x4d0 [ 1141.952441][T13281] snd_seq_ioctl_create_queue+0xab/0x320 [ 1141.958078][T13281] ? async_call_lookup_ports+0x10/0x10 [ 1141.963549][T13281] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1141.969109][T13281] alloc_seq_queue.isra.0+0xc6/0x160 [ 1141.974403][T13281] ? delete_port+0xc0/0xc0 [ 1141.978932][T13281] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 1141.984502][T13281] ? find_held_lock+0x2d/0x110 [ 1141.989285][T13281] snd_seq_oss_open+0x2fe/0x980 [ 1141.994158][T13281] odev_open+0x6c/0x90 [ 1141.998235][T13281] ? odev_release+0x70/0x70 [ 1142.002747][T13281] soundcore_open+0x446/0x600 [ 1142.007466][T13281] ? sound_devnode+0xf0/0xf0 [ 1142.012058][T13281] chrdev_open+0x219/0x5c0 [ 1142.016481][T13281] ? cdev_put.part.0+0x50/0x50 [ 1142.021251][T13281] ? security_file_open+0x84/0x410 [ 1142.026631][T13281] do_dentry_open+0x4ba/0x1290 [ 1142.031427][T13281] ? cdev_put.part.0+0x50/0x50 [ 1142.036231][T13281] ? security_inode_permission+0xc4/0xf0 [ 1142.041872][T13281] ? chown_common+0x550/0x550 [ 1142.046557][T13281] ? inode_permission+0xab/0x500 [ 1142.051507][T13281] path_openat+0x1e59/0x27d0 [ 1142.056551][T13281] ? path_lookupat.isra.0+0x530/0x530 [ 1142.061933][T13281] ? lock_acquire+0x1f2/0x8f0 [ 1142.066636][T13281] do_filp_open+0x192/0x260 [ 1142.071148][T13281] ? may_open_dev+0xf0/0xf0 [ 1142.075669][T13281] ? do_raw_spin_lock+0x129/0x2e0 [ 1142.080714][T13281] ? _raw_spin_unlock+0x24/0x40 [ 1142.085571][T13281] ? __alloc_fd+0x46d/0x600 [ 1142.090092][T13281] do_sys_openat2+0x585/0x7d0 [ 1142.094781][T13281] ? file_open_root+0x400/0x400 [ 1142.099639][T13281] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1142.105196][T13281] ? wait_for_completion+0x270/0x270 [ 1142.110487][T13281] ? __this_cpu_preempt_check+0x28/0x190 [ 1142.116128][T13281] ? __sb_end_write+0x101/0x1d0 [ 1142.121076][T13281] do_sys_open+0xc3/0x140 [ 1142.125421][T13281] ? filp_open+0x70/0x70 [ 1142.129665][T13281] ? ksys_write+0x1a5/0x250 [ 1142.134175][T13281] ? __ia32_sys_clock_settime+0x260/0x260 [ 1142.139901][T13281] ? trace_hardirqs_off_caller+0x55/0x230 [ 1142.145643][T13281] do_syscall_64+0xf6/0x7d0 [ 1142.150160][T13281] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1142.156054][T13281] RIP: 0033:0x45ca69 [ 1142.159955][T13281] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1142.179680][T13281] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1142.188100][T13281] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1142.196079][T13281] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1142.205014][T13281] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1142.212996][T13281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1142.220979][T13281] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1142.365374][ T4251] usb 6-1: USB disconnect, device number 66 03:40:05 executing program 5 (fault-call:1 fault-nth:12): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:40:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x8, 0x6, 0x301}, 0x14}}, 0x8800) 03:40:05 executing program 3: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) dup2(r1, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f00000002c0)) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x5, 0xc050787274, 0x0, 0x0, 0x0) 03:40:05 executing program 0: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000fe00ff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe000000008500000003000000b70000000000000095000000000000006623848adf1dd9a764ab51a064e0ff0ca327ab62931d861531fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8205b01ddaa54d8756ad0f50f2568836077b8471b6b69819782748b376358ca58949a54d5827df14feecea46a5c53e9c37251709f1061b973ef07bf7f53ce129a9ecd3b4dd15100f2b452f98526a0d8cacfb6379b4c5008652a7b4c0974486a8d203bddc62bb2d555a363adbc33b49e13fbd1757b2701acad0e2684120b99b8cff3f48c94116f0c34faf7851b290feb3045aef0d6c169e331b622f20c41d8418bc4159c14025422835e81c3573af77dbaeb07913476244ffd5b5a924275cb1749289b44e97e7a73f148ae8206afe120c143749b5992e89f4337db4440f39c7a7d531f9663f4e82862ac52903971b323f60332cb7c9e89aafc50e79e1f62dcbb17f342aab5104d18e4eb69122b42f2173184c1d0fb3287c99b645f6e80e14e5d7c95a06cc0d94c5ca63c724fe222d659e083065c0bf5a197e845aa0c58123532083929883a1d9931374f02f13bca8b6ace8a91e4e2984ee38d8048417aea282aa70faea45f3305029d6e11f4e2157b339de66fda0a6712ebf149fa5967054c29e167ac158541013f6ba81867b500f773594cda31e309e5179a7cb9bc54c85e73721f407c80adeaac0d7502a0e126478fae6c8"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) dup2(r1, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f00000002c0)) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x5, 0xc050787274, 0x0, 0x0, 0x0) 03:40:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x48}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xff]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:05 executing program 0: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000fe00ff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe000000008500000003000000b70000000000000095000000000000006623848adf1dd9a764ab51a064e0ff0ca327ab62931d861531fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8205b01ddaa54d8756ad0f50f2568836077b8471b6b69819782748b376358ca58949a54d5827df14feecea46a5c53e9c37251709f1061b973ef07bf7f53ce129a9ecd3b4dd15100f2b452f98526a0d8cacfb6379b4c5008652a7b4c0974486a8d203bddc62bb2d555a363adbc33b49e13fbd1757b2701acad0e2684120b99b8cff3f48c94116f0c34faf7851b290feb3045aef0d6c169e331b622f20c41d8418bc4159c14025422835e81c3573af77dbaeb07913476244ffd5b5a924275cb1749289b44e97e7a73f148ae8206afe120c143749b5992e89f4337db4440f39c7a7d531f9663f4e82862ac52903971b323f60332cb7c9e89aafc50e79e1f62dcbb17f342aab5104d18e4eb69122b42f2173184c1d0fb3287c99b645f6e80e14e5d7c95a06cc0d94c5ca63c724fe222d659e083065c0bf5a197e845aa0c58123532083929883a1d9931374f02f13bca8b6ace8a91e4e2984ee38d8048417aea282aa70faea45f3305029d6e11f4e2157b339de66fda0a6712ebf149fa5967054c29e167ac158541013f6ba81867b500f773594cda31e309e5179a7cb9bc54c85e73721f407c80adeaac0d7502a0e126478fae6c8"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) dup2(r1, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f00000002c0)) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x5, 0xc050787274, 0x0, 0x0, 0x0) 03:40:05 executing program 3: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) dup2(r1, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f00000002c0)) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x5, 0xc050787274, 0x0, 0x0, 0x0) 03:40:05 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4008804) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r2 = creat(&(0x7f0000001580)='./file0\x00', 0x22) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10100100}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x20, 0x140f, 0x204, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x5) 03:40:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000080601050000000000000000000000000500010007000000"], 0x1c}}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x9b0000, 0x4, 0x4, r1, 0x0, &(0x7f0000000000)={0x990905, 0x2, [], @value64=0x4}}) ioctl$TIOCEXCL(r2, 0x540c) [ 1143.310090][ T4250] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1143.570194][ T4250] usb 6-1: Using ep0 maxpacket: 8 03:40:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffeca, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000000214006ad700"], 0x14}, 0x1, 0x0, 0x0, 0x9e5539748a071778}, 0x800) [ 1143.690742][ T4250] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1143.714509][ T4250] usb 6-1: config 0 has no interface number 0 [ 1143.756548][ T4250] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1143.822811][ T4250] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1143.889734][ T4250] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:40:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, @local}]}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101800, 0x0) write$apparmor_exec(r2, &(0x7f00000001c0)={'exec ', '/proc/sys/net/ipv4/vs/sync_version\x00'}, 0x28) [ 1143.980592][ T4250] usb 6-1: config 0 descriptor?? [ 1144.041595][T13381] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1144.270795][T13381] FAULT_INJECTION: forcing a failure. [ 1144.270795][T13381] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.299782][T13381] CPU: 0 PID: 13381 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1144.308498][T13381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1144.318563][T13381] Call Trace: [ 1144.321874][T13381] dump_stack+0x188/0x20d [ 1144.326469][T13381] should_fail.cold+0x5/0xa [ 1144.330995][T13381] ? fault_create_debugfs_attr+0x140/0x140 [ 1144.336916][T13381] should_failslab+0x5/0xf [ 1144.341355][T13381] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1144.346821][T13381] snd_timer_instance_new+0x44/0x2f0 [ 1144.352130][T13381] snd_seq_timer_open+0x1a5/0x530 [ 1144.357263][T13381] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 1144.362665][T13381] ? lock_downgrade+0x840/0x840 [ 1144.367534][T13381] ? mark_held_locks+0x9f/0xe0 [ 1144.372328][T13381] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1144.378272][T13381] queue_use+0xe6/0x250 [ 1144.382450][T13381] snd_seq_queue_alloc+0x2c6/0x4d0 [ 1144.387601][T13381] snd_seq_ioctl_create_queue+0xab/0x320 [ 1144.393257][T13381] ? async_call_lookup_ports+0x10/0x10 [ 1144.398740][T13381] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1144.404309][T13381] alloc_seq_queue.isra.0+0xc6/0x160 [ 1144.409615][T13381] ? delete_port+0xc0/0xc0 [ 1144.414072][T13381] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 1144.419634][T13381] ? find_held_lock+0x2d/0x110 [ 1144.424424][T13381] snd_seq_oss_open+0x2fe/0x980 [ 1144.429445][T13381] odev_open+0x6c/0x90 [ 1144.433632][T13381] ? odev_release+0x70/0x70 [ 1144.438148][T13381] soundcore_open+0x446/0x600 [ 1144.442846][T13381] ? sound_devnode+0xf0/0xf0 [ 1144.447446][T13381] chrdev_open+0x219/0x5c0 [ 1144.451966][T13381] ? cdev_put.part.0+0x50/0x50 [ 1144.456832][T13381] ? security_file_open+0x84/0x410 [ 1144.461960][T13381] do_dentry_open+0x4ba/0x1290 [ 1144.466735][T13381] ? cdev_put.part.0+0x50/0x50 [ 1144.471516][T13381] ? security_inode_permission+0xc4/0xf0 [ 1144.477288][T13381] ? chown_common+0x550/0x550 [ 1144.481987][T13381] ? inode_permission+0xab/0x500 [ 1144.487048][T13381] path_openat+0x1e59/0x27d0 [ 1144.491811][T13381] ? path_lookupat.isra.0+0x530/0x530 [ 1144.497206][T13381] ? _kstrtoull+0x13f/0x1f0 [ 1144.501736][T13381] do_filp_open+0x192/0x260 [ 1144.506369][T13381] ? may_open_dev+0xf0/0xf0 [ 1144.510896][T13381] ? do_raw_spin_lock+0x129/0x2e0 [ 1144.515950][T13381] ? _raw_spin_unlock+0x24/0x40 [ 1144.520817][T13381] ? __alloc_fd+0x46d/0x600 [ 1144.525348][T13381] do_sys_openat2+0x585/0x7d0 [ 1144.530047][T13381] ? file_open_root+0x400/0x400 [ 1144.534919][T13381] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1144.540484][T13381] ? wait_for_completion+0x270/0x270 [ 1144.545784][T13381] ? __this_cpu_preempt_check+0x28/0x190 [ 1144.552652][T13381] ? __sb_end_write+0x101/0x1d0 [ 1144.557531][T13381] do_sys_open+0xc3/0x140 [ 1144.561878][T13381] ? filp_open+0x70/0x70 [ 1144.566284][T13381] ? ksys_write+0x1a5/0x250 [ 1144.570806][T13381] ? __ia32_sys_clock_settime+0x260/0x260 [ 1144.576544][T13381] ? trace_hardirqs_off_caller+0x55/0x230 [ 1144.582393][T13381] do_syscall_64+0xf6/0x7d0 [ 1144.586925][T13381] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1144.592833][T13381] RIP: 0033:0x45ca69 [ 1144.596749][T13381] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1144.616667][T13381] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1144.625268][T13381] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1144.633280][T13381] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1144.641273][T13381] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1144.649261][T13381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1144.657253][T13381] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1144.884365][ T4250] usb 6-1: USB disconnect, device number 67 03:40:07 executing program 5 (fault-call:1 fault-nth:13): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:40:07 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000fe00ff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe000000008500000003000000b70000000000000095000000000000006623848adf1dd9a764ab51a064e0ff0ca327ab62931d861531fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8205b01ddaa54d8756ad0f50f2568836077b8471b6b69819782748b376358ca58949a54d5827df14feecea46a5c53e9c37251709f1061b973ef07bf7f53ce129a9ecd3b4dd15100f2b452f98526a0d8cacfb6379b4c5008652a7b4c0974486a8d203bddc62bb2d555a363adbc33b49e13fbd1757b2701acad0e2684120b99b8cff3f48c94116f0c34faf7851b290feb3045aef0d6c169e331b622f20c41d8418bc4159c14025422835e81c3573af77dbaeb07913476244ffd5b5a924275cb1749289b44e97e7a73f148ae8206afe120c143749b5992e89f4337db4440f39c7a7d531f9663f4e82862ac52903971b323f60332cb7c9e89aafc50e79e1f62dcbb17f342aab5104d18e4eb69122b42f2173184c1d0fb3287c99b645f6e80e14e5d7c95a06cc0d94c5ca63c724fe222d659e083065c0bf5a197e845aa0c58123532083929883a1d9931374f02f13bca8b6ace8a91e4e2984ee38d8048417aea282aa70faea45f3305029d6e11f4e2157b339de66fda0a6712ebf149fa5967054c29e167ac158541013f6ba81867b500f773594cda31e309e5179a7cb9bc54c85e73721f407c80adeaac0d7502a0e126478fae6c8"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f00000002c0)) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) 03:40:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x23, 0x2, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={0x0}}, 0x0) r1 = socket(0x0, 0x2, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={0x0}}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 03:40:07 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x20) 03:40:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x300}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:07 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:07 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:40:07 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x20) 03:40:07 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:40:08 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x20) 03:40:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007948008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000003) 03:40:08 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 1145.779820][ T3219] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1145.925532][ T28] audit: type=1804 audit(1590982808.287:60): pid=13502 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir312650048/syzkaller.pirc2g/26/cgroup.controllers" dev="sda1" ino=16142 res=1 [ 1145.962534][T13502] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1146.029859][ T3219] usb 6-1: Using ep0 maxpacket: 8 [ 1146.160480][ T3219] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1146.168723][ T3219] usb 6-1: config 0 has no interface number 0 [ 1146.204960][ T3219] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1146.266263][ T3219] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1146.276193][ T3219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.310959][ T3219] usb 6-1: config 0 descriptor?? [ 1146.331206][T13479] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1146.568618][T13479] FAULT_INJECTION: forcing a failure. [ 1146.568618][T13479] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.588742][T13479] CPU: 0 PID: 13479 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1146.597449][T13479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1146.607521][T13479] Call Trace: [ 1146.610838][T13479] dump_stack+0x188/0x20d [ 1146.615204][T13479] should_fail.cold+0x5/0xa [ 1146.619751][T13479] ? fault_create_debugfs_attr+0x140/0x140 [ 1146.625687][T13479] should_failslab+0x5/0xf [ 1146.630220][T13479] __kmalloc_track_caller+0x2d1/0x7a0 [ 1146.635613][T13479] ? snd_timer_instance_new+0x62/0x2f0 [ 1146.641099][T13479] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 1146.646754][T13479] kstrdup+0x36/0x70 [ 1146.650668][T13479] snd_timer_instance_new+0x62/0x2f0 [ 1146.655973][T13479] snd_seq_timer_open+0x1a5/0x530 [ 1146.661020][T13479] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 1146.666534][T13479] ? lock_downgrade+0x840/0x840 [ 1146.671410][T13479] ? mark_held_locks+0x9f/0xe0 [ 1146.676192][T13479] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1146.682147][T13479] queue_use+0xe6/0x250 [ 1146.686413][T13479] snd_seq_queue_alloc+0x2c6/0x4d0 [ 1146.691547][T13479] snd_seq_ioctl_create_queue+0xab/0x320 [ 1146.697349][T13479] ? async_call_lookup_ports+0x10/0x10 [ 1146.702829][T13479] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1146.708430][T13479] alloc_seq_queue.isra.0+0xc6/0x160 [ 1146.713869][T13479] ? delete_port+0xc0/0xc0 [ 1146.718331][T13479] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 1146.723898][T13479] ? find_held_lock+0x2d/0x110 [ 1146.728839][T13479] snd_seq_oss_open+0x2fe/0x980 [ 1146.733723][T13479] odev_open+0x6c/0x90 [ 1146.738089][T13479] ? odev_release+0x70/0x70 [ 1146.742614][T13479] soundcore_open+0x446/0x600 [ 1146.747403][T13479] ? sound_devnode+0xf0/0xf0 [ 1146.752014][T13479] chrdev_open+0x219/0x5c0 [ 1146.756452][T13479] ? cdev_put.part.0+0x50/0x50 [ 1146.761332][T13479] ? security_file_open+0x84/0x410 [ 1146.766600][T13479] do_dentry_open+0x4ba/0x1290 [ 1146.771389][T13479] ? cdev_put.part.0+0x50/0x50 [ 1146.776289][T13479] ? security_inode_permission+0xc4/0xf0 [ 1146.781947][T13479] ? chown_common+0x550/0x550 [ 1146.786653][T13479] ? inode_permission+0xab/0x500 [ 1146.791713][T13479] path_openat+0x1e59/0x27d0 [ 1146.796349][T13479] ? path_lookupat.isra.0+0x530/0x530 [ 1146.801748][T13479] ? _kstrtoull+0x13f/0x1f0 [ 1146.806280][T13479] do_filp_open+0x192/0x260 [ 1146.810810][T13479] ? may_open_dev+0xf0/0xf0 [ 1146.815341][T13479] ? do_raw_spin_lock+0x129/0x2e0 [ 1146.820399][T13479] ? _raw_spin_unlock+0x24/0x40 [ 1146.825483][T13479] ? __alloc_fd+0x46d/0x600 [ 1146.830014][T13479] do_sys_openat2+0x585/0x7d0 [ 1146.834719][T13479] ? file_open_root+0x400/0x400 [ 1146.839682][T13479] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1146.845251][T13479] ? wait_for_completion+0x270/0x270 [ 1146.850546][T13479] ? __this_cpu_preempt_check+0x28/0x190 [ 1146.856198][T13479] ? __sb_end_write+0x101/0x1d0 [ 1146.861156][T13479] do_sys_open+0xc3/0x140 [ 1146.865514][T13479] ? filp_open+0x70/0x70 [ 1146.869773][T13479] ? ksys_write+0x1a5/0x250 [ 1146.874298][T13479] ? __ia32_sys_clock_settime+0x260/0x260 [ 1146.880130][T13479] ? trace_hardirqs_off_caller+0x55/0x230 [ 1146.885881][T13479] do_syscall_64+0xf6/0x7d0 [ 1146.890410][T13479] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1146.896318][T13479] RIP: 0033:0x45ca69 [ 1146.900228][T13479] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1146.920002][T13479] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1146.928668][T13479] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1146.936674][T13479] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1146.944969][T13479] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1146.953108][T13479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1146.961095][T13479] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1147.055027][ T8040] usb 6-1: USB disconnect, device number 68 03:40:09 executing program 5 (fault-call:1 fault-nth:14): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:40:09 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:40:09 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0xa86) 03:40:09 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) 03:40:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x500}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:10 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, 0x0, 0x0) 03:40:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) vmsplice(0xffffffffffffffff, 0x0, 0x3a, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x16, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 03:40:10 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:40:10 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:40:10 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:40:10 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = socket$inet(0xa, 0x801, 0x9) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xffffac61) r4 = accept4(r3, 0x0, 0x0, 0x0) shutdown(r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0xfffffffffffffddc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}], 0x30}, 0x40040) splice(r5, 0x0, r1, 0x0, 0xd86dac9, 0x0) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) [ 1148.019645][ T8040] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1148.220629][T13589] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1148.269802][ T8040] usb 6-1: Using ep0 maxpacket: 8 [ 1148.348073][T13594] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1148.366908][T13594] bond0: (slave bond2): Enslaving as an active interface with an up link [ 1148.379590][T13599] bond0: (slave bond2): Releasing backup interface [ 1148.390325][ T8040] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1148.398524][ T8040] usb 6-1: config 0 has no interface number 0 [ 1148.405661][ T8040] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1148.416378][ T8040] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1148.427945][ T8040] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.450175][ T8040] usb 6-1: config 0 descriptor?? [ 1148.481123][T13584] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1148.714121][T13584] FAULT_INJECTION: forcing a failure. [ 1148.714121][T13584] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.745967][T13584] CPU: 1 PID: 13584 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1148.754677][T13584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1148.764751][T13584] Call Trace: [ 1148.768053][T13584] dump_stack+0x188/0x20d [ 1148.772401][T13584] should_fail.cold+0x5/0xa [ 1148.777040][T13584] ? fault_create_debugfs_attr+0x140/0x140 [ 1148.782907][T13584] should_failslab+0x5/0xf [ 1148.787333][T13584] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1148.792718][T13584] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 1148.798283][T13584] snd_seq_oss_readq_new+0x46/0x2d0 [ 1148.803841][T13584] snd_seq_oss_open+0x4ce/0x980 [ 1148.808702][T13584] odev_open+0x6c/0x90 [ 1148.812778][T13584] ? odev_release+0x70/0x70 [ 1148.817285][T13584] soundcore_open+0x446/0x600 [ 1148.821972][T13584] ? sound_devnode+0xf0/0xf0 [ 1148.826567][T13584] chrdev_open+0x219/0x5c0 [ 1148.830988][T13584] ? cdev_put.part.0+0x50/0x50 [ 1148.835761][T13584] ? security_file_open+0x84/0x410 [ 1148.840882][T13584] do_dentry_open+0x4ba/0x1290 [ 1148.845648][T13584] ? cdev_put.part.0+0x50/0x50 [ 1148.850418][T13584] ? security_inode_permission+0xc4/0xf0 [ 1148.856060][T13584] ? chown_common+0x550/0x550 [ 1148.860748][T13584] ? inode_permission+0xab/0x500 [ 1148.865734][T13584] path_openat+0x1e59/0x27d0 [ 1148.870341][T13584] ? path_lookupat.isra.0+0x530/0x530 [ 1148.875724][T13584] ? _kstrtoull+0x13f/0x1f0 [ 1148.880243][T13584] do_filp_open+0x192/0x260 [ 1148.885095][T13584] ? may_open_dev+0xf0/0xf0 [ 1148.889612][T13584] ? do_raw_spin_lock+0x129/0x2e0 [ 1148.894654][T13584] ? _raw_spin_unlock+0x24/0x40 [ 1148.899509][T13584] ? __alloc_fd+0x46d/0x600 [ 1148.904023][T13584] do_sys_openat2+0x585/0x7d0 [ 1148.908710][T13584] ? file_open_root+0x400/0x400 [ 1148.913563][T13584] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1148.919121][T13584] ? wait_for_completion+0x270/0x270 [ 1148.924405][T13584] ? __this_cpu_preempt_check+0x28/0x190 [ 1148.930041][T13584] ? __sb_end_write+0x101/0x1d0 [ 1148.934897][T13584] do_sys_open+0xc3/0x140 [ 1148.939229][T13584] ? filp_open+0x70/0x70 [ 1148.943469][T13584] ? ksys_write+0x1a5/0x250 [ 1148.947977][T13584] ? __ia32_sys_clock_settime+0x260/0x260 [ 1148.953706][T13584] ? trace_hardirqs_off_caller+0x55/0x230 [ 1148.959437][T13584] do_syscall_64+0xf6/0x7d0 [ 1148.963949][T13584] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1148.969841][T13584] RIP: 0033:0x45ca69 [ 1148.973735][T13584] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1148.993348][T13584] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1149.002044][T13584] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1149.010020][T13584] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1149.017994][T13584] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1149.025973][T13584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1149.033951][T13584] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1149.081204][ T3140] usb 6-1: USB disconnect, device number 69 [ 1149.231987][T13589] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1149.257491][T13594] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1149.266866][T13594] bond0: (slave bond2): Enslaving as an active interface with an up link [ 1149.290478][T13661] bond0: (slave bond2): Releasing backup interface 03:40:11 executing program 5 (fault-call:1 fault-nth:15): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:40:11 executing program 3: connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 03:40:11 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000007000000350000000000000085000000070000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 03:40:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0xfffffffffffff000}, 0x0) [ 1149.996378][T28445] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1150.249349][T28445] usb 6-1: Using ep0 maxpacket: 8 03:40:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x600}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:12 executing program 3: connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 03:40:12 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 03:40:12 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @broadcast, @loopback}, 0xc) 03:40:12 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) [ 1150.384027][T28445] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1150.406600][T28445] usb 6-1: config 0 has no interface number 0 03:40:12 executing program 3: connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) [ 1150.436366][T28445] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1150.473695][T28445] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a 03:40:12 executing program 1: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005d8000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000003017fff"], 0x12f}}, 0x0) recvmmsg(r0, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) [ 1150.522132][T28445] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.571465][T28445] usb 6-1: config 0 descriptor?? 03:40:13 executing program 3: r0 = socket$inet(0x2b, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 1150.620926][T13695] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1150.870586][T13695] FAULT_INJECTION: forcing a failure. [ 1150.870586][T13695] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.921974][T13695] CPU: 0 PID: 13695 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1150.930709][T13695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1150.940766][T13695] Call Trace: [ 1150.944068][T13695] dump_stack+0x188/0x20d [ 1150.948416][T13695] should_fail.cold+0x5/0xa [ 1150.952935][T13695] ? fault_create_debugfs_attr+0x140/0x140 [ 1150.958764][T13695] should_failslab+0x5/0xf [ 1150.963190][T13695] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1150.968574][T13695] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1150.974128][T13695] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1150.980117][T13695] ? snd_hrtimer_callback+0x3d0/0x3d0 [ 1150.985495][T13695] snd_hrtimer_open+0x41/0x110 [ 1150.990281][T13695] ? snd_hrtimer_callback+0x3d0/0x3d0 [ 1150.995653][T13695] snd_timer_open+0xb20/0x1030 [ 1151.000425][T13695] ? snd_timer_close_locked+0xba0/0xba0 [ 1151.005972][T13695] ? memcpy+0x39/0x60 [ 1151.009961][T13695] ? kstrdup+0x56/0x70 [ 1151.014040][T13695] snd_seq_timer_open+0x259/0x530 [ 1151.019092][T13695] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 1151.024469][T13695] ? lock_downgrade+0x840/0x840 [ 1151.029333][T13695] ? mark_held_locks+0x9f/0xe0 [ 1151.034114][T13695] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1151.039933][T13695] queue_use+0xe6/0x250 [ 1151.044096][T13695] snd_seq_queue_alloc+0x2c6/0x4d0 [ 1151.049222][T13695] snd_seq_ioctl_create_queue+0xab/0x320 [ 1151.054859][T13695] ? async_call_lookup_ports+0x10/0x10 [ 1151.060336][T13695] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1151.065893][T13695] alloc_seq_queue.isra.0+0xc6/0x160 [ 1151.071201][T13695] ? delete_port+0xc0/0xc0 [ 1151.075649][T13695] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 1151.081199][T13695] ? find_held_lock+0x2d/0x110 [ 1151.085986][T13695] snd_seq_oss_open+0x2fe/0x980 [ 1151.090848][T13695] odev_open+0x6c/0x90 [ 1151.094921][T13695] ? odev_release+0x70/0x70 [ 1151.099430][T13695] soundcore_open+0x446/0x600 [ 1151.104128][T13695] ? sound_devnode+0xf0/0xf0 [ 1151.108747][T13695] chrdev_open+0x219/0x5c0 [ 1151.113173][T13695] ? cdev_put.part.0+0x50/0x50 [ 1151.117956][T13695] ? security_file_open+0x84/0x410 [ 1151.123077][T13695] do_dentry_open+0x4ba/0x1290 [ 1151.127850][T13695] ? cdev_put.part.0+0x50/0x50 [ 1151.132626][T13695] ? security_inode_permission+0xc4/0xf0 [ 1151.138382][T13695] ? chown_common+0x550/0x550 [ 1151.143071][T13695] ? inode_permission+0xab/0x500 [ 1151.148023][T13695] path_openat+0x1e59/0x27d0 [ 1151.152636][T13695] ? path_lookupat.isra.0+0x530/0x530 [ 1151.158021][T13695] ? lock_acquire+0x1f2/0x8f0 [ 1151.162750][T13695] do_filp_open+0x192/0x260 [ 1151.167272][T13695] ? may_open_dev+0xf0/0xf0 [ 1151.173971][T13695] ? do_raw_spin_lock+0x129/0x2e0 [ 1151.179017][T13695] ? _raw_spin_unlock+0x24/0x40 [ 1151.183873][T13695] ? __alloc_fd+0x46d/0x600 [ 1151.188392][T13695] do_sys_openat2+0x585/0x7d0 [ 1151.193080][T13695] ? file_open_root+0x400/0x400 [ 1151.199240][T13695] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1151.204795][T13695] ? wait_for_completion+0x270/0x270 [ 1151.210084][T13695] ? __this_cpu_preempt_check+0x28/0x190 [ 1151.215814][T13695] ? __sb_end_write+0x101/0x1d0 [ 1151.220675][T13695] do_sys_open+0xc3/0x140 [ 1151.225009][T13695] ? filp_open+0x70/0x70 [ 1151.229254][T13695] ? ksys_write+0x1a5/0x250 [ 1151.233765][T13695] ? __ia32_sys_clock_settime+0x260/0x260 [ 1151.239509][T13695] ? trace_hardirqs_off_caller+0x55/0x230 [ 1151.245245][T13695] do_syscall_64+0xf6/0x7d0 [ 1151.249760][T13695] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1151.256180][T13695] RIP: 0033:0x45ca69 [ 1151.260079][T13695] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1151.279685][T13695] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1151.288104][T13695] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1151.296079][T13695] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1151.304058][T13695] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1151.312034][T13695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1151.320009][T13695] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1151.389759][T28445] usb 6-1: USB disconnect, device number 70 03:40:14 executing program 5 (fault-call:1 fault-nth:16): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:40:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet(0x2, 0x803, 0x1) getsockopt(r3, 0x2000000000ff, 0x40000000001, 0x0, 0xffffffffffffffff) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000140)=""/26, &(0x7f00000002c0)=0x1a) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$l2tp6(r5, &(0x7f0000000080)={0xa, 0x0, 0xe40, @loopback, 0x7, 0x4}, 0x20) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010008506000000000000000024b07067", @ANYRES32=r7, @ANYBLOB="17010000000000001c0012000c000100626f6e64000000000c000200080001f5030000008626ed91be4e14e30f8eb30686d38760ca9003461d65ffecf7b8e666376cbd8a8c7524f30194f458b03837c412eba5d1e889db1e111238bed62b2b3d2b0b7692d2281c"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newlink={0x90, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x50, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x24}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x36}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x4}]}, 0x90}}, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 03:40:14 executing program 3: r0 = socket$inet(0x2b, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:40:14 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/1663], &(0x7f0000000100)='GPL\x00'}, 0x48) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@can_newroute={0x1c, 0x18, 0x0, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x100057e, 0xe, 0x0, &(0x7f0000000140)="e3d0e9d6d9d18e5f39868de36300", 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 1152.028233][T13811] [ 1152.042417][T13811] ********************************************************** [ 1152.071233][T13811] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 1152.107161][T13811] ** ** [ 1152.135683][T13811] ** trace_printk() being used. Allocating extra memory. ** [ 1152.164112][T13811] ** ** [ 1152.188554][T13811] ** This means that this is a DEBUG kernel and it is ** [ 1152.223871][T13811] ** unsafe for production use. ** [ 1152.252619][T13811] ** ** [ 1152.277391][T13811] ** If you see this message and you are not debugging ** [ 1152.302014][T13811] ** the kernel, report this immediately to your vendor! ** [ 1152.325555][T13811] ** ** [ 1152.351487][T13811] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 1152.369110][ T3130] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1152.375783][T13811] ********************************************************** [ 1152.609507][ T3130] usb 6-1: Using ep0 maxpacket: 8 [ 1152.639229][T13812] device bond3 entered promiscuous mode [ 1152.671778][T13812] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1152.701846][T13816] bond3: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 1152.746707][T13816] bond3: (slave ip6tnl1): Error -95 calling set_mac_address [ 1152.755091][ T3130] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1152.769008][ T3130] usb 6-1: config 0 has no interface number 0 [ 1152.775186][ T3130] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1152.834820][ T3130] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1152.879212][ T3130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.911952][ T3130] usb 6-1: config 0 descriptor?? [ 1152.960552][T13813] raw-gadget gadget: fail, usb_ep_enable returned -22 03:40:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x700}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:15 executing program 3: r0 = socket$inet(0x2b, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:40:15 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/1663], &(0x7f0000000100)='GPL\x00'}, 0x48) bind(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) socket(0x11, 0x0, 0x0) bind$packet(r1, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast2, @in=@local}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x100057e, 0xe, 0x0, &(0x7f0000000140)="e3d0e9d6d9d18e5f39868de36300", 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 03:40:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x4]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) [ 1153.213935][T13813] FAULT_INJECTION: forcing a failure. [ 1153.213935][T13813] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.266438][T13813] CPU: 1 PID: 13813 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1153.275148][T13813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1153.285213][T13813] Call Trace: [ 1153.288531][T13813] dump_stack+0x188/0x20d [ 1153.292881][T13813] should_fail.cold+0x5/0xa [ 1153.297408][T13813] ? fault_create_debugfs_attr+0x140/0x140 [ 1153.303233][T13813] should_failslab+0x5/0xf [ 1153.307668][T13813] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1153.313058][T13813] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 1153.318629][T13813] snd_seq_oss_readq_new+0x46/0x2d0 [ 1153.323843][T13813] snd_seq_oss_open+0x4ce/0x980 [ 1153.328710][T13813] odev_open+0x6c/0x90 [ 1153.332791][T13813] ? odev_release+0x70/0x70 [ 1153.337304][T13813] soundcore_open+0x446/0x600 [ 1153.342010][T13813] ? sound_devnode+0xf0/0xf0 [ 1153.346602][T13813] chrdev_open+0x219/0x5c0 [ 1153.351025][T13813] ? cdev_put.part.0+0x50/0x50 [ 1153.355797][T13813] ? security_file_open+0x84/0x410 [ 1153.360918][T13813] do_dentry_open+0x4ba/0x1290 [ 1153.365689][T13813] ? cdev_put.part.0+0x50/0x50 [ 1153.371002][T13813] ? security_inode_permission+0xc4/0xf0 [ 1153.376645][T13813] ? chown_common+0x550/0x550 [ 1153.381332][T13813] ? inode_permission+0xab/0x500 [ 1153.386288][T13813] path_openat+0x1e59/0x27d0 [ 1153.391006][T13813] ? path_lookupat.isra.0+0x530/0x530 [ 1153.396390][T13813] ? lock_acquire+0x1f2/0x8f0 [ 1153.401082][T13813] do_filp_open+0x192/0x260 [ 1153.405590][T13813] ? may_open_dev+0xf0/0xf0 [ 1153.410109][T13813] ? do_raw_spin_lock+0x129/0x2e0 [ 1153.415155][T13813] ? _raw_spin_unlock+0x24/0x40 [ 1153.420012][T13813] ? __alloc_fd+0x46d/0x600 [ 1153.424531][T13813] do_sys_openat2+0x585/0x7d0 [ 1153.429214][T13813] ? file_open_root+0x400/0x400 [ 1153.434073][T13813] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1153.439628][T13813] ? wait_for_completion+0x270/0x270 [ 1153.444937][T13813] ? __this_cpu_preempt_check+0x28/0x190 [ 1153.450575][T13813] ? __sb_end_write+0x101/0x1d0 [ 1153.455522][T13813] do_sys_open+0xc3/0x140 [ 1153.460291][T13813] ? filp_open+0x70/0x70 [ 1153.464535][T13813] ? ksys_write+0x1a5/0x250 [ 1153.469045][T13813] ? __ia32_sys_clock_settime+0x260/0x260 [ 1153.474771][T13813] ? trace_hardirqs_off_caller+0x55/0x230 [ 1153.480590][T13813] do_syscall_64+0xf6/0x7d0 [ 1153.485104][T13813] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1153.491002][T13813] RIP: 0033:0x45ca69 [ 1153.494899][T13813] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:40:15 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:40:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110000000000000000400200000008000300", @ANYRES32=r5, @ANYBLOB="140002"], 0x30}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 1153.514511][T13813] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1153.522930][T13813] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1153.531263][T13813] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1153.539251][T13813] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1153.547237][T13813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1153.555215][T13813] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 03:40:16 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 1153.842996][ T28] audit: type=1804 audit(1590982816.208:61): pid=13909 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir312650048/syzkaller.pirc2g/32/cgroup.controllers" dev="sda1" ino=16199 res=1 03:40:16 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 1153.942303][ T3130] usb 6-1: USB disconnect, device number 71 03:40:16 executing program 5 (fault-call:1 fault-nth:17): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:40:16 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x0, 0xfffffffffffffddc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r3, 0x0, r1, 0x0, 0xd86dac9, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) 03:40:16 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:40:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110000000000000000400200000008000300", @ANYRES32=r5, @ANYBLOB="140002"], 0x30}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 1154.886047][ T28] audit: type=1804 audit(1590982817.248:62): pid=13950 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir312650048/syzkaller.pirc2g/33/cgroup.controllers" dev="sda1" ino=16200 res=1 [ 1155.108957][T28445] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1155.355907][T28445] usb 6-1: Using ep0 maxpacket: 8 [ 1155.489556][T28445] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1155.504951][T28445] usb 6-1: config 0 has no interface number 0 [ 1155.541586][T28445] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1155.591972][T28445] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1155.641187][T28445] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.711142][T28445] usb 6-1: config 0 descriptor?? [ 1155.741052][T13946] raw-gadget gadget: fail, usb_ep_enable returned -22 03:40:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x2000}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:18 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:40:18 executing program 1: 03:40:18 executing program 0: 03:40:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:18 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:40:18 executing program 1: [ 1155.970723][T13946] FAULT_INJECTION: forcing a failure. [ 1155.970723][T13946] name failslab, interval 1, probability 0, space 0, times 0 03:40:18 executing program 0: [ 1156.054169][T13946] CPU: 1 PID: 13946 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1156.062884][T13946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1156.072954][T13946] Call Trace: [ 1156.076261][T13946] dump_stack+0x188/0x20d [ 1156.080619][T13946] should_fail.cold+0x5/0xa [ 1156.085146][T13946] ? fault_create_debugfs_attr+0x140/0x140 [ 1156.090978][T13946] should_failslab+0x5/0xf [ 1156.095408][T13946] __kmalloc+0x2d9/0x7a0 [ 1156.099665][T13946] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 1156.105220][T13946] ? snd_seq_oss_readq_new+0x94/0x2d0 [ 1156.110605][T13946] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 1156.116173][T13946] snd_seq_oss_readq_new+0x94/0x2d0 [ 1156.121389][T13946] snd_seq_oss_open+0x4ce/0x980 [ 1156.126257][T13946] odev_open+0x6c/0x90 [ 1156.130334][T13946] ? odev_release+0x70/0x70 [ 1156.134849][T13946] soundcore_open+0x446/0x600 [ 1156.139544][T13946] ? sound_devnode+0xf0/0xf0 [ 1156.144136][T13946] chrdev_open+0x219/0x5c0 [ 1156.148558][T13946] ? cdev_put.part.0+0x50/0x50 [ 1156.153332][T13946] ? security_file_open+0x84/0x410 [ 1156.158459][T13946] do_dentry_open+0x4ba/0x1290 [ 1156.163227][T13946] ? cdev_put.part.0+0x50/0x50 [ 1156.168002][T13946] ? security_inode_permission+0xc4/0xf0 [ 1156.173651][T13946] ? chown_common+0x550/0x550 [ 1156.178340][T13946] ? inode_permission+0xab/0x500 [ 1156.183297][T13946] path_openat+0x1e59/0x27d0 [ 1156.187888][T13946] ? path_lookupat.isra.0+0x530/0x530 [ 1156.193246][T13946] ? lock_acquire+0x1f2/0x8f0 [ 1156.197907][T13946] do_filp_open+0x192/0x260 [ 1156.202415][T13946] ? may_open_dev+0xf0/0xf0 [ 1156.206927][T13946] ? do_raw_spin_lock+0x129/0x2e0 [ 1156.211964][T13946] ? _raw_spin_unlock+0x24/0x40 [ 1156.216819][T13946] ? __alloc_fd+0x46d/0x600 [ 1156.221341][T13946] do_sys_openat2+0x585/0x7d0 [ 1156.226068][T13946] ? file_open_root+0x400/0x400 [ 1156.230927][T13946] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1156.236484][T13946] ? wait_for_completion+0x270/0x270 [ 1156.241773][T13946] ? __this_cpu_preempt_check+0x28/0x190 [ 1156.247412][T13946] ? __sb_end_write+0x101/0x1d0 [ 1156.252276][T13946] do_sys_open+0xc3/0x140 [ 1156.256611][T13946] ? filp_open+0x70/0x70 [ 1156.260858][T13946] ? ksys_write+0x1a5/0x250 [ 1156.265366][T13946] ? __ia32_sys_clock_settime+0x260/0x260 [ 1156.271100][T13946] ? trace_hardirqs_off_caller+0x55/0x230 [ 1156.276830][T13946] do_syscall_64+0xf6/0x7d0 [ 1156.281344][T13946] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1156.287244][T13946] RIP: 0033:0x45ca69 [ 1156.291146][T13946] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1156.311019][T13946] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1156.319438][T13946] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1156.327416][T13946] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1156.335480][T13946] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1156.343458][T13946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1156.351523][T13946] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1156.396875][ T3130] usb 6-1: USB disconnect, device number 72 03:40:19 executing program 5 (fault-call:1 fault-nth:18): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:40:19 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 03:40:19 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'vlan0\x00', @remote}) socket$kcm(0x2, 0x3, 0x2) r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x1000}, 0x4) 03:40:19 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 1157.308642][T28445] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1157.558607][T28445] usb 6-1: Using ep0 maxpacket: 8 [ 1157.679497][T28445] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1157.687644][T28445] usb 6-1: config 0 has no interface number 0 [ 1157.718068][T28445] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1157.751734][T28445] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1157.767753][T28445] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.803125][T28445] usb 6-1: config 0 descriptor?? [ 1157.820033][T14031] raw-gadget gadget: fail, usb_ep_enable returned -22 03:40:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x3f00}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:20 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:40:20 executing program 0: 03:40:20 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'vlan0\x00', @remote}) socket$kcm(0x2, 0x3, 0x2) r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x1000}, 0x4) [ 1158.050301][T14031] FAULT_INJECTION: forcing a failure. [ 1158.050301][T14031] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.084881][T14031] CPU: 0 PID: 14031 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1158.093600][T14031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1158.103663][T14031] Call Trace: [ 1158.106967][T14031] dump_stack+0x188/0x20d [ 1158.111313][T14031] should_fail.cold+0x5/0xa [ 1158.115837][T14031] ? fault_create_debugfs_attr+0x140/0x140 [ 1158.121663][T14031] should_failslab+0x5/0xf [ 1158.126089][T14031] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1158.131491][T14031] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1158.137051][T14031] snd_seq_oss_writeq_new+0x9b/0x310 [ 1158.142346][T14031] ? snd_seq_oss_readq_info_read+0x100/0x100 [ 1158.148341][T14031] ? lockdep_init_map_waits+0x26a/0x890 [ 1158.153898][T14031] ? lockdep_init_map_waits+0x26a/0x890 [ 1158.159454][T14031] ? __raw_spin_lock_init+0x34/0x100 [ 1158.164753][T14031] snd_seq_oss_open+0x705/0x980 [ 1158.169616][T14031] odev_open+0x6c/0x90 [ 1158.173717][T14031] ? odev_release+0x70/0x70 [ 1158.178222][T14031] soundcore_open+0x446/0x600 [ 1158.182929][T14031] ? sound_devnode+0xf0/0xf0 [ 1158.187522][T14031] chrdev_open+0x219/0x5c0 [ 1158.191943][T14031] ? cdev_put.part.0+0x50/0x50 [ 1158.196717][T14031] ? security_file_open+0x84/0x410 [ 1158.201842][T14031] do_dentry_open+0x4ba/0x1290 [ 1158.206614][T14031] ? cdev_put.part.0+0x50/0x50 [ 1158.211389][T14031] ? security_inode_permission+0xc4/0xf0 [ 1158.217028][T14031] ? chown_common+0x550/0x550 [ 1158.221743][T14031] ? inode_permission+0xab/0x500 [ 1158.226693][T14031] path_openat+0x1e59/0x27d0 [ 1158.231307][T14031] ? path_lookupat.isra.0+0x530/0x530 [ 1158.236865][T14031] ? lock_acquire+0x1f2/0x8f0 [ 1158.241557][T14031] do_filp_open+0x192/0x260 [ 1158.246065][T14031] ? may_open_dev+0xf0/0xf0 [ 1158.250593][T14031] ? do_raw_spin_lock+0x129/0x2e0 [ 1158.255654][T14031] ? _raw_spin_unlock+0x24/0x40 [ 1158.260597][T14031] ? __alloc_fd+0x46d/0x600 [ 1158.265118][T14031] do_sys_openat2+0x585/0x7d0 [ 1158.269805][T14031] ? file_open_root+0x400/0x400 [ 1158.274666][T14031] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1158.280251][T14031] ? wait_for_completion+0x270/0x270 [ 1158.285563][T14031] ? __this_cpu_preempt_check+0x28/0x190 [ 1158.291200][T14031] ? __sb_end_write+0x101/0x1d0 [ 1158.296059][T14031] do_sys_open+0xc3/0x140 [ 1158.300399][T14031] ? filp_open+0x70/0x70 [ 1158.304646][T14031] ? ksys_write+0x1a5/0x250 [ 1158.309156][T14031] ? __ia32_sys_clock_settime+0x260/0x260 [ 1158.314878][T14031] ? trace_hardirqs_off_caller+0x55/0x230 [ 1158.320618][T14031] do_syscall_64+0xf6/0x7d0 [ 1158.325138][T14031] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1158.331035][T14031] RIP: 0033:0x45ca69 [ 1158.334933][T14031] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1158.354629][T14031] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1158.363054][T14031] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1158.371033][T14031] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1158.379012][T14031] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1158.387024][T14031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1158.395791][T14031] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 03:40:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x6]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:20 executing program 0: 03:40:20 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:40:20 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'vlan0\x00', @remote}) socket$kcm(0x2, 0x3, 0x2) r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x1000}, 0x4) [ 1159.005948][T28445] usb 6-1: USB disconnect, device number 73 03:40:21 executing program 5 (fault-call:1 fault-nth:19): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:40:21 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'vlan0\x00', @remote}) socket$kcm(0x2, 0x3, 0x2) r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x1000}, 0x4) 03:40:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x4800}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:21 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 03:40:21 executing program 0: 03:40:22 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 03:40:22 executing program 0: 03:40:22 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'vlan0\x00', @remote}) socket$kcm(0x2, 0x3, 0x2) r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) [ 1159.929070][ T3140] usb 6-1: new high-speed USB device number 74 using dummy_hcd 03:40:22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x7]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:22 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 03:40:22 executing program 0: 03:40:22 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'vlan0\x00', @remote}) socket$kcm(0x2, 0x3, 0x2) r1 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r1, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) [ 1160.194997][ T3140] usb 6-1: Using ep0 maxpacket: 8 [ 1160.345873][ T3140] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1160.356379][ T3140] usb 6-1: config 0 has no interface number 0 [ 1160.377163][ T3140] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1160.402006][ T3140] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1160.427088][ T3140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.457270][ T3140] usb 6-1: config 0 descriptor?? [ 1160.499782][T14133] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1160.722732][T14133] FAULT_INJECTION: forcing a failure. [ 1160.722732][T14133] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.758205][T14133] CPU: 0 PID: 14133 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1160.766924][T14133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1160.777099][T14133] Call Trace: [ 1160.780409][T14133] dump_stack+0x188/0x20d [ 1160.784772][T14133] should_fail.cold+0x5/0xa [ 1160.789297][T14133] ? fault_create_debugfs_attr+0x140/0x140 [ 1160.795136][T14133] should_failslab+0x5/0xf [ 1160.799573][T14133] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1160.804965][T14133] ? mark_held_locks+0x9f/0xe0 [ 1160.809740][T14133] ? do_filp_open+0x192/0x260 [ 1160.814434][T14133] snd_seq_port_connect+0x5d/0x510 [ 1160.820685][T14133] ? _raw_read_unlock+0x24/0x40 [ 1160.825646][T14133] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 1160.831004][T14133] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 1160.836953][T14133] ? lockdep_hardirqs_on+0x463/0x620 [ 1160.842478][T14133] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1160.848126][T14133] snd_seq_oss_midi_open+0x3cb/0x640 [ 1160.853426][T14133] ? snd_seq_oss_midi_setup+0x50/0x50 [ 1160.858843][T14133] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 1160.864680][T14133] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 1160.870850][T14133] ? __raw_spin_lock_init+0x34/0x100 [ 1160.876158][T14133] snd_seq_oss_open+0x7fa/0x980 [ 1160.881024][T14133] odev_open+0x6c/0x90 [ 1160.885099][T14133] ? odev_release+0x70/0x70 [ 1160.889624][T14133] soundcore_open+0x446/0x600 [ 1160.894315][T14133] ? sound_devnode+0xf0/0xf0 [ 1160.898912][T14133] chrdev_open+0x219/0x5c0 [ 1160.903341][T14133] ? cdev_put.part.0+0x50/0x50 [ 1160.908119][T14133] ? security_file_open+0x84/0x410 [ 1160.913231][T14133] do_dentry_open+0x4ba/0x1290 [ 1160.917990][T14133] ? cdev_put.part.0+0x50/0x50 [ 1160.922744][T14133] ? security_inode_permission+0xc4/0xf0 [ 1160.928362][T14133] ? chown_common+0x550/0x550 [ 1160.933046][T14133] ? inode_permission+0xab/0x500 [ 1160.938121][T14133] path_openat+0x1e59/0x27d0 [ 1160.942702][T14133] ? path_lookupat.isra.0+0x530/0x530 [ 1160.948056][T14133] ? _kstrtoull+0x13f/0x1f0 [ 1160.952604][T14133] do_filp_open+0x192/0x260 [ 1160.957212][T14133] ? may_open_dev+0xf0/0xf0 [ 1160.961767][T14133] ? do_raw_spin_lock+0x129/0x2e0 [ 1160.968381][T14133] ? _raw_spin_unlock+0x24/0x40 [ 1160.973216][T14133] ? __alloc_fd+0x46d/0x600 [ 1160.977709][T14133] do_sys_openat2+0x585/0x7d0 [ 1160.982372][T14133] ? file_open_root+0x400/0x400 [ 1160.987211][T14133] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1160.992738][T14133] ? wait_for_completion+0x270/0x270 [ 1160.998015][T14133] ? __this_cpu_preempt_check+0x28/0x190 [ 1161.003670][T14133] ? __sb_end_write+0x101/0x1d0 [ 1161.008509][T14133] do_sys_open+0xc3/0x140 [ 1161.012879][T14133] ? filp_open+0x70/0x70 [ 1161.017109][T14133] ? ksys_write+0x1a5/0x250 [ 1161.021596][T14133] ? __ia32_sys_clock_settime+0x260/0x260 [ 1161.027299][T14133] ? trace_hardirqs_off_caller+0x55/0x230 [ 1161.033008][T14133] do_syscall_64+0xf6/0x7d0 [ 1161.037671][T14133] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1161.043541][T14133] RIP: 0033:0x45ca69 [ 1161.047419][T14133] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1161.067167][T14133] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1161.075577][T14133] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1161.083537][T14133] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1161.091492][T14133] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1161.099443][T14133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1161.107396][T14133] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1161.174750][ T8040] usb 6-1: USB disconnect, device number 74 03:40:24 executing program 5 (fault-call:1 fault-nth:20): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:40:24 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x8]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:24 executing program 0: 03:40:24 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'vlan0\x00', @remote}) socket$kcm(0x2, 0x3, 0x2) r1 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r1, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 03:40:24 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 03:40:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x60ea}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:24 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 03:40:24 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'vlan0\x00', @remote}) socket$kcm(0x2, 0x3, 0x2) r1 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r1, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 03:40:24 executing program 0: 03:40:24 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 03:40:24 executing program 0: [ 1162.078204][ T3130] usb 6-1: new high-speed USB device number 75 using dummy_hcd 03:40:24 executing program 0: [ 1162.339484][ T3130] usb 6-1: Using ep0 maxpacket: 8 [ 1162.460196][ T3130] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1162.477419][ T3130] usb 6-1: config 0 has no interface number 0 [ 1162.506376][ T3130] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1162.546532][ T3130] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1162.575315][ T3130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.616526][ T3130] usb 6-1: config 0 descriptor?? [ 1162.649815][T14222] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1162.884814][T14222] FAULT_INJECTION: forcing a failure. [ 1162.884814][T14222] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.905342][T14222] CPU: 1 PID: 14222 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1162.914043][T14222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1162.924190][T14222] Call Trace: [ 1162.927487][T14222] dump_stack+0x188/0x20d [ 1162.931833][T14222] should_fail.cold+0x5/0xa [ 1162.936341][T14222] ? fault_create_debugfs_attr+0x140/0x140 [ 1162.942163][T14222] should_failslab+0x5/0xf [ 1162.946581][T14222] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1162.951959][T14222] ? mark_held_locks+0x9f/0xe0 [ 1162.956721][T14222] ? do_filp_open+0x192/0x260 [ 1162.961401][T14222] snd_seq_port_connect+0x5d/0x510 [ 1162.966513][T14222] ? _raw_read_unlock+0x24/0x40 [ 1162.971365][T14222] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 1162.976824][T14222] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 1162.982716][T14222] ? lockdep_hardirqs_on+0x463/0x620 [ 1162.988007][T14222] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1162.993555][T14222] snd_seq_oss_midi_open+0x4e7/0x640 [ 1162.998839][T14222] ? snd_seq_oss_midi_setup+0x50/0x50 [ 1163.004218][T14222] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 1163.010049][T14222] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 1163.015950][T14222] ? __raw_spin_lock_init+0x34/0x100 [ 1163.021255][T14222] snd_seq_oss_open+0x7fa/0x980 [ 1163.026115][T14222] odev_open+0x6c/0x90 [ 1163.030198][T14222] ? odev_release+0x70/0x70 [ 1163.034708][T14222] soundcore_open+0x446/0x600 [ 1163.039395][T14222] ? sound_devnode+0xf0/0xf0 [ 1163.043993][T14222] chrdev_open+0x219/0x5c0 [ 1163.048418][T14222] ? cdev_put.part.0+0x50/0x50 [ 1163.053195][T14222] ? security_file_open+0x84/0x410 [ 1163.058317][T14222] do_dentry_open+0x4ba/0x1290 [ 1163.063094][T14222] ? cdev_put.part.0+0x50/0x50 [ 1163.067864][T14222] ? security_inode_permission+0xc4/0xf0 [ 1163.073505][T14222] ? chown_common+0x550/0x550 [ 1163.078186][T14222] ? inode_permission+0xab/0x500 [ 1163.083125][T14222] path_openat+0x1e59/0x27d0 [ 1163.087751][T14222] ? path_lookupat.isra.0+0x530/0x530 [ 1163.093103][T14222] ? lock_acquire+0x1f2/0x8f0 [ 1163.097815][T14222] do_filp_open+0x192/0x260 [ 1163.102299][T14222] ? may_open_dev+0xf0/0xf0 [ 1163.106783][T14222] ? do_raw_spin_lock+0x129/0x2e0 [ 1163.111793][T14222] ? _raw_spin_unlock+0x24/0x40 [ 1163.116630][T14222] ? __alloc_fd+0x46d/0x600 [ 1163.121242][T14222] do_sys_openat2+0x585/0x7d0 [ 1163.125964][T14222] ? file_open_root+0x400/0x400 [ 1163.130804][T14222] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1163.136330][T14222] ? wait_for_completion+0x270/0x270 [ 1163.141608][T14222] ? __this_cpu_preempt_check+0x28/0x190 [ 1163.147306][T14222] ? __sb_end_write+0x101/0x1d0 [ 1163.152140][T14222] do_sys_open+0xc3/0x140 [ 1163.156449][T14222] ? filp_open+0x70/0x70 [ 1163.160670][T14222] ? ksys_write+0x1a5/0x250 [ 1163.165152][T14222] ? __ia32_sys_clock_settime+0x260/0x260 [ 1163.170850][T14222] ? trace_hardirqs_off_caller+0x55/0x230 [ 1163.176551][T14222] do_syscall_64+0xf6/0x7d0 [ 1163.181036][T14222] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1163.186916][T14222] RIP: 0033:0x45ca69 [ 1163.190790][T14222] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1163.210368][T14222] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1163.218770][T14222] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1163.226737][T14222] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1163.234697][T14222] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1163.242648][T14222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1163.250598][T14222] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1163.321179][T28445] usb 6-1: USB disconnect, device number 75 03:40:26 executing program 5 (fault-call:1 fault-nth:21): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:40:26 executing program 3: 03:40:26 executing program 0: 03:40:26 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'vlan0\x00', @remote}) socket$kcm(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 03:40:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0xea60}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:26 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:26 executing program 0: 03:40:26 executing program 3: 03:40:26 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'vlan0\x00', @remote}) socket$kcm(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 03:40:26 executing program 0: 03:40:26 executing program 3: 03:40:26 executing program 3: [ 1164.247860][ T3140] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1164.503569][ T3140] usb 6-1: Using ep0 maxpacket: 8 [ 1164.629780][ T3140] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1164.647681][ T3140] usb 6-1: config 0 has no interface number 0 [ 1164.677886][ T3140] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1164.696327][ T3140] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1164.705986][ T3140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.718506][ T3140] usb 6-1: config 0 descriptor?? [ 1164.749317][T14318] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1164.994469][T14318] FAULT_INJECTION: forcing a failure. [ 1164.994469][T14318] name failslab, interval 1, probability 0, space 0, times 0 [ 1165.063223][T14318] CPU: 1 PID: 14318 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1165.071932][T14318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1165.081994][T14318] Call Trace: [ 1165.085302][T14318] dump_stack+0x188/0x20d [ 1165.089648][T14318] should_fail.cold+0x5/0xa [ 1165.094167][T14318] ? fault_create_debugfs_attr+0x140/0x140 [ 1165.099989][T14318] should_failslab+0x5/0xf [ 1165.104417][T14318] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1165.109803][T14318] ? mark_held_locks+0x9f/0xe0 [ 1165.114579][T14318] snd_seq_port_connect+0x5d/0x510 [ 1165.119699][T14318] ? _raw_read_unlock+0x24/0x40 [ 1165.124556][T14318] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 1165.129957][T14318] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 1165.135867][T14318] ? lockdep_hardirqs_on+0x463/0x620 [ 1165.141177][T14318] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1165.146731][T14318] snd_seq_oss_midi_open+0x3cb/0x640 [ 1165.152020][T14318] ? snd_seq_oss_midi_setup+0x50/0x50 [ 1165.157403][T14318] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 1165.163250][T14318] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 1165.169155][T14318] ? __raw_spin_lock_init+0x34/0x100 [ 1165.174448][T14318] snd_seq_oss_open+0x7fa/0x980 [ 1165.179308][T14318] odev_open+0x6c/0x90 [ 1165.183371][T14318] ? odev_release+0x70/0x70 [ 1165.187877][T14318] soundcore_open+0x446/0x600 [ 1165.192562][T14318] ? sound_devnode+0xf0/0xf0 [ 1165.197150][T14318] chrdev_open+0x219/0x5c0 [ 1165.201565][T14318] ? cdev_put.part.0+0x50/0x50 [ 1165.206338][T14318] ? security_file_open+0x84/0x410 [ 1165.211452][T14318] do_dentry_open+0x4ba/0x1290 [ 1165.216217][T14318] ? cdev_put.part.0+0x50/0x50 [ 1165.220984][T14318] ? security_inode_permission+0xc4/0xf0 [ 1165.226615][T14318] ? chown_common+0x550/0x550 [ 1165.231289][T14318] ? inode_permission+0xab/0x500 [ 1165.236242][T14318] path_openat+0x1e59/0x27d0 [ 1165.240849][T14318] ? path_lookupat.isra.0+0x530/0x530 [ 1165.246224][T14318] ? lock_acquire+0x1f2/0x8f0 [ 1165.250910][T14318] do_filp_open+0x192/0x260 [ 1165.255417][T14318] ? may_open_dev+0xf0/0xf0 [ 1165.259934][T14318] ? do_raw_spin_lock+0x129/0x2e0 [ 1165.264984][T14318] ? _raw_spin_unlock+0x24/0x40 [ 1165.269848][T14318] ? __alloc_fd+0x46d/0x600 [ 1165.274370][T14318] do_sys_openat2+0x585/0x7d0 [ 1165.279056][T14318] ? file_open_root+0x400/0x400 [ 1165.283914][T14318] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1165.289471][T14318] ? wait_for_completion+0x270/0x270 [ 1165.294760][T14318] ? __this_cpu_preempt_check+0x28/0x190 [ 1165.300405][T14318] ? __sb_end_write+0x101/0x1d0 [ 1165.305267][T14318] do_sys_open+0xc3/0x140 [ 1165.309603][T14318] ? filp_open+0x70/0x70 [ 1165.313857][T14318] ? ksys_write+0x1a5/0x250 [ 1165.318382][T14318] ? __ia32_sys_clock_settime+0x260/0x260 [ 1165.324108][T14318] ? trace_hardirqs_off_caller+0x55/0x230 [ 1165.329856][T14318] do_syscall_64+0xf6/0x7d0 [ 1165.334375][T14318] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1165.340270][T14318] RIP: 0033:0x45ca69 [ 1165.344192][T14318] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1165.363973][T14318] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1165.372369][T14318] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1165.380334][T14318] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1165.388314][T14318] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1165.396271][T14318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1165.404227][T14318] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1165.451725][ T3140] usb 6-1: USB disconnect, device number 76 03:40:28 executing program 5 (fault-call:1 fault-nth:22): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:40:28 executing program 0: 03:40:28 executing program 3: 03:40:28 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'vlan0\x00', @remote}) socket$kcm(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 03:40:28 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xe]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0xffff}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:28 executing program 3: 03:40:28 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'vlan0\x00', @remote}) r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 03:40:28 executing program 0: 03:40:28 executing program 3: 03:40:28 executing program 0: 03:40:28 executing program 3: [ 1166.426294][ T3130] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1166.677568][ T3130] usb 6-1: Using ep0 maxpacket: 8 [ 1166.808223][ T3130] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1166.820051][ T3130] usb 6-1: config 0 has no interface number 0 [ 1166.855663][ T3130] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1166.887595][ T3130] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1166.894862][ T0] NOHZ: local_softirq_pending 08 [ 1166.896655][ T3130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.928869][ T3130] usb 6-1: config 0 descriptor?? [ 1166.949036][T14404] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1167.175900][T14404] FAULT_INJECTION: forcing a failure. [ 1167.175900][T14404] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.223075][T14404] CPU: 0 PID: 14404 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1167.231783][T14404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1167.241846][T14404] Call Trace: [ 1167.245153][T14404] dump_stack+0x188/0x20d [ 1167.249557][T14404] should_fail.cold+0x5/0xa [ 1167.254075][T14404] ? fault_create_debugfs_attr+0x140/0x140 [ 1167.259900][T14404] should_failslab+0x5/0xf [ 1167.264326][T14404] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1167.269846][T14404] ? mark_held_locks+0x9f/0xe0 [ 1167.274624][T14404] snd_seq_port_connect+0x5d/0x510 [ 1167.279742][T14404] ? _raw_read_unlock+0x24/0x40 [ 1167.284600][T14404] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 1167.289979][T14404] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 1167.295878][T14404] ? lockdep_hardirqs_on+0x463/0x620 [ 1167.301264][T14404] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1167.306838][T14404] snd_seq_oss_midi_open+0x4e7/0x640 [ 1167.312134][T14404] ? snd_seq_oss_midi_setup+0x50/0x50 [ 1167.317506][T14404] ? mark_held_locks+0x9f/0xe0 [ 1167.322337][T14404] ? get_mdev+0x75/0x90 [ 1167.326475][T14404] ? get_mididev.isra.0+0x76/0xa0 [ 1167.331531][T14404] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 1167.337427][T14404] snd_seq_oss_open+0x7fa/0x980 [ 1167.342376][T14404] odev_open+0x6c/0x90 [ 1167.346436][T14404] ? odev_release+0x70/0x70 [ 1167.350952][T14404] soundcore_open+0x446/0x600 [ 1167.355644][T14404] ? sound_devnode+0xf0/0xf0 [ 1167.360213][T14404] chrdev_open+0x219/0x5c0 [ 1167.364611][T14404] ? cdev_put.part.0+0x50/0x50 [ 1167.369359][T14404] ? security_file_open+0x84/0x410 [ 1167.374452][T14404] do_dentry_open+0x4ba/0x1290 [ 1167.379201][T14404] ? cdev_put.part.0+0x50/0x50 [ 1167.383946][T14404] ? security_inode_permission+0xc4/0xf0 [ 1167.389719][T14404] ? chown_common+0x550/0x550 [ 1167.394386][T14404] ? inode_permission+0xab/0x500 [ 1167.399312][T14404] path_openat+0x1e59/0x27d0 [ 1167.403889][T14404] ? path_lookupat.isra.0+0x530/0x530 [ 1167.409245][T14404] ? _kstrtoull+0x13f/0x1f0 [ 1167.413751][T14404] do_filp_open+0x192/0x260 [ 1167.418253][T14404] ? may_open_dev+0xf0/0xf0 [ 1167.422752][T14404] ? do_raw_spin_lock+0x129/0x2e0 [ 1167.427764][T14404] ? _raw_spin_unlock+0x24/0x40 [ 1167.432593][T14404] ? __alloc_fd+0x46d/0x600 [ 1167.437081][T14404] do_sys_openat2+0x585/0x7d0 [ 1167.441739][T14404] ? file_open_root+0x400/0x400 [ 1167.446578][T14404] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1167.452218][T14404] ? wait_for_completion+0x270/0x270 [ 1167.457513][T14404] ? __this_cpu_preempt_check+0x28/0x190 [ 1167.463145][T14404] ? __sb_end_write+0x101/0x1d0 [ 1167.467983][T14404] do_sys_open+0xc3/0x140 [ 1167.472315][T14404] ? filp_open+0x70/0x70 [ 1167.476563][T14404] ? ksys_write+0x1a5/0x250 [ 1167.481049][T14404] ? __ia32_sys_clock_settime+0x260/0x260 [ 1167.486747][T14404] ? trace_hardirqs_off_caller+0x55/0x230 [ 1167.492452][T14404] do_syscall_64+0xf6/0x7d0 [ 1167.496941][T14404] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1167.502812][T14404] RIP: 0033:0x45ca69 [ 1167.506689][T14404] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1167.526381][T14404] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1167.534802][T14404] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1167.542859][T14404] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1167.550817][T14404] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1167.558887][T14404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1167.566872][T14404] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1167.699184][ T8040] usb 6-1: USB disconnect, device number 77 03:40:30 executing program 5 (fault-call:1 fault-nth:23): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:40:30 executing program 0: 03:40:30 executing program 3: 03:40:30 executing program 1: socket$kcm(0x2, 0x3, 0x2) r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 03:40:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x2c]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:30 executing program 1: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 03:40:30 executing program 3: 03:40:30 executing program 0: 03:40:30 executing program 1: r0 = socket(0x0, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 03:40:30 executing program 3: 03:40:30 executing program 0: [ 1168.567466][ T8040] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1168.819813][ T8040] usb 6-1: Using ep0 maxpacket: 8 [ 1168.945067][ T8040] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1168.955590][ T8040] usb 6-1: config 0 has no interface number 0 [ 1168.976716][ T8040] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1169.000629][ T8040] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1169.021293][ T8040] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.054595][ T8040] usb 6-1: config 0 descriptor?? [ 1169.078773][T14497] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1169.317204][T14497] FAULT_INJECTION: forcing a failure. [ 1169.317204][T14497] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.337883][T14497] CPU: 1 PID: 14497 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1169.346570][T14497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1169.356631][T14497] Call Trace: [ 1169.359931][T14497] dump_stack+0x188/0x20d [ 1169.364272][T14497] should_fail.cold+0x5/0xa [ 1169.369043][T14497] ? fault_create_debugfs_attr+0x140/0x140 [ 1169.374866][T14497] should_failslab+0x5/0xf [ 1169.379292][T14497] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1169.384676][T14497] ? mark_held_locks+0x9f/0xe0 [ 1169.389442][T14497] ? snd_virmidi_unsubscribe+0x90/0x90 [ 1169.394909][T14497] snd_seq_port_connect+0x5d/0x510 [ 1169.400030][T14497] ? _raw_read_unlock+0x24/0x40 [ 1169.404893][T14497] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 1169.410274][T14497] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 1169.416168][T14497] ? lockdep_hardirqs_on+0x463/0x620 [ 1169.421579][T14497] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1169.427132][T14497] snd_seq_oss_midi_open+0x3cb/0x640 [ 1169.432417][T14497] ? snd_seq_oss_midi_setup+0x50/0x50 [ 1169.437768][T14497] ? mark_held_locks+0x9f/0xe0 [ 1169.442599][T14497] ? get_mdev+0x75/0x90 [ 1169.446730][T14497] ? get_mididev.isra.0+0x76/0xa0 [ 1169.451746][T14497] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 1169.457638][T14497] snd_seq_oss_open+0x7fa/0x980 [ 1169.462467][T14497] odev_open+0x6c/0x90 [ 1169.466533][T14497] ? odev_release+0x70/0x70 [ 1169.471108][T14497] soundcore_open+0x446/0x600 [ 1169.475779][T14497] ? sound_devnode+0xf0/0xf0 [ 1169.480398][T14497] chrdev_open+0x219/0x5c0 [ 1169.484792][T14497] ? cdev_put.part.0+0x50/0x50 [ 1169.489534][T14497] ? security_file_open+0x84/0x410 [ 1169.494634][T14497] do_dentry_open+0x4ba/0x1290 [ 1169.499376][T14497] ? cdev_put.part.0+0x50/0x50 [ 1169.504160][T14497] ? security_inode_permission+0xc4/0xf0 [ 1169.509823][T14497] ? chown_common+0x550/0x550 [ 1169.514490][T14497] ? inode_permission+0xab/0x500 [ 1169.519407][T14497] path_openat+0x1e59/0x27d0 [ 1169.523980][T14497] ? path_lookupat.isra.0+0x530/0x530 [ 1169.529332][T14497] ? lock_acquire+0x1f2/0x8f0 [ 1169.534004][T14497] do_filp_open+0x192/0x260 [ 1169.538482][T14497] ? may_open_dev+0xf0/0xf0 [ 1169.542965][T14497] ? do_raw_spin_lock+0x129/0x2e0 [ 1169.547988][T14497] ? _raw_spin_unlock+0x24/0x40 [ 1169.552812][T14497] ? __alloc_fd+0x46d/0x600 [ 1169.557300][T14497] do_sys_openat2+0x585/0x7d0 [ 1169.561971][T14497] ? file_open_root+0x400/0x400 [ 1169.566796][T14497] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1169.572345][T14497] ? wait_for_completion+0x270/0x270 [ 1169.577604][T14497] ? __this_cpu_preempt_check+0x28/0x190 [ 1169.583212][T14497] ? __sb_end_write+0x101/0x1d0 [ 1169.588041][T14497] do_sys_open+0xc3/0x140 [ 1169.592347][T14497] ? filp_open+0x70/0x70 [ 1169.596579][T14497] ? ksys_write+0x1a5/0x250 [ 1169.601059][T14497] ? __ia32_sys_clock_settime+0x260/0x260 [ 1169.606769][T14497] ? trace_hardirqs_off_caller+0x55/0x230 [ 1169.612482][T14497] do_syscall_64+0xf6/0x7d0 [ 1169.617105][T14497] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1169.623119][T14497] RIP: 0033:0x45ca69 [ 1169.626996][T14497] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1169.646580][T14497] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1169.654992][T14497] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1169.662962][T14497] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1169.670910][T14497] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1169.678870][T14497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1169.686837][T14497] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1169.796702][ T3140] usb 6-1: USB disconnect, device number 78 03:40:32 executing program 5 (fault-call:1 fault-nth:24): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:40:32 executing program 0: 03:40:32 executing program 3: 03:40:32 executing program 1: r0 = socket(0x0, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 03:40:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x0, 0x2}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x2e]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:32 executing program 0: 03:40:32 executing program 3: 03:40:32 executing program 1: r0 = socket(0x0, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 03:40:32 executing program 3: 03:40:32 executing program 0: 03:40:33 executing program 1: r0 = socket(0x848000000015, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) [ 1170.757305][T28445] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1171.017202][T28445] usb 6-1: Using ep0 maxpacket: 8 [ 1171.137191][T28445] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1171.145335][T28445] usb 6-1: config 0 has no interface number 0 [ 1171.167180][T28445] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1171.187169][T28445] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1171.196226][T28445] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.230422][T28445] usb 6-1: config 0 descriptor?? [ 1171.250560][T14587] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1171.480281][T14587] FAULT_INJECTION: forcing a failure. [ 1171.480281][T14587] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.517032][T14587] CPU: 1 PID: 14587 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1171.525739][T14587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1171.535821][T14587] Call Trace: [ 1171.539126][T14587] dump_stack+0x188/0x20d [ 1171.543454][T14587] should_fail.cold+0x5/0xa [ 1171.548477][T14587] ? fault_create_debugfs_attr+0x140/0x140 [ 1171.554339][T14587] should_failslab+0x5/0xf [ 1171.558758][T14587] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1171.564173][T14587] ? mark_held_locks+0x9f/0xe0 [ 1171.568942][T14587] ? snd_virmidi_unsubscribe+0x90/0x90 [ 1171.574404][T14587] snd_seq_port_connect+0x5d/0x510 [ 1171.579515][T14587] ? _raw_read_unlock+0x24/0x40 [ 1171.584371][T14587] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 1171.589757][T14587] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 1171.595656][T14587] ? lockdep_hardirqs_on+0x463/0x620 [ 1171.601082][T14587] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1171.606649][T14587] snd_seq_oss_midi_open+0x3cb/0x640 [ 1171.612103][T14587] ? snd_seq_oss_midi_setup+0x50/0x50 [ 1171.617487][T14587] ? mark_held_locks+0x9f/0xe0 [ 1171.622271][T14587] ? get_mdev+0x75/0x90 [ 1171.626524][T14587] ? get_mididev.isra.0+0x76/0xa0 [ 1171.631561][T14587] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 1171.637472][T14587] snd_seq_oss_open+0x7fa/0x980 [ 1171.642338][T14587] odev_open+0x6c/0x90 [ 1171.646411][T14587] ? odev_release+0x70/0x70 [ 1171.650921][T14587] soundcore_open+0x446/0x600 [ 1171.655608][T14587] ? sound_devnode+0xf0/0xf0 [ 1171.660201][T14587] chrdev_open+0x219/0x5c0 [ 1171.664620][T14587] ? cdev_put.part.0+0x50/0x50 [ 1171.669412][T14587] ? security_file_open+0x84/0x410 [ 1171.674536][T14587] do_dentry_open+0x4ba/0x1290 [ 1171.679305][T14587] ? cdev_put.part.0+0x50/0x50 [ 1171.684078][T14587] ? security_inode_permission+0xc4/0xf0 [ 1171.689717][T14587] ? chown_common+0x550/0x550 [ 1171.694387][T14587] ? inode_permission+0xab/0x500 [ 1171.699331][T14587] path_openat+0x1e59/0x27d0 [ 1171.703931][T14587] ? path_lookupat.isra.0+0x530/0x530 [ 1171.709427][T14587] ? _kstrtoull+0x13f/0x1f0 [ 1171.713969][T14587] do_filp_open+0x192/0x260 [ 1171.718475][T14587] ? may_open_dev+0xf0/0xf0 [ 1171.722969][T14587] ? do_raw_spin_lock+0x129/0x2e0 [ 1171.727994][T14587] ? _raw_spin_unlock+0x24/0x40 [ 1171.732837][T14587] ? __alloc_fd+0x46d/0x600 [ 1171.737342][T14587] do_sys_openat2+0x585/0x7d0 [ 1171.742028][T14587] ? file_open_root+0x400/0x400 [ 1171.747388][T14587] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1171.752924][T14587] ? wait_for_completion+0x270/0x270 [ 1171.758194][T14587] ? __this_cpu_preempt_check+0x28/0x190 [ 1171.763828][T14587] ? __sb_end_write+0x101/0x1d0 [ 1171.768691][T14587] do_sys_open+0xc3/0x140 [ 1171.773030][T14587] ? filp_open+0x70/0x70 [ 1171.777271][T14587] ? ksys_write+0x1a5/0x250 [ 1171.781784][T14587] ? __ia32_sys_clock_settime+0x260/0x260 [ 1171.787510][T14587] ? trace_hardirqs_off_caller+0x55/0x230 [ 1171.793243][T14587] do_syscall_64+0xf6/0x7d0 [ 1171.797743][T14587] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1171.803628][T14587] RIP: 0033:0x45ca69 [ 1171.807514][T14587] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1171.827142][T14587] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1171.835545][T14587] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1171.843509][T14587] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1171.851484][T14587] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1171.859445][T14587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1171.867400][T14587] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1171.989198][ T3130] usb 6-1: USB disconnect, device number 79 03:40:34 executing program 5 (fault-call:1 fault-nth:25): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:40:34 executing program 3: 03:40:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) 03:40:34 executing program 1: r0 = socket(0x848000000015, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 03:40:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x0, 0x3}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:34 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x44]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x2, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x800, &(0x7f00000005c0)={[{@file_umask={'file_umask', 0x3d, 0x3}}, {@codepage={'codepage', 0x3d, 'cp737'}}, {@quiet='quiet'}], [{@fsuuid={'fsuuid'}}]}) 03:40:35 executing program 1: r0 = socket(0x848000000015, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 03:40:35 executing program 1: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) [ 1172.806308][T14692] hfs: unable to parse mount options 03:40:35 executing program 1: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) [ 1172.887018][T28445] usb 6-1: new high-speed USB device number 80 using dummy_hcd 03:40:35 executing program 1: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 03:40:35 executing program 1: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) [ 1173.129358][T28445] usb 6-1: Using ep0 maxpacket: 8 [ 1173.254097][T28445] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1173.265926][T28445] usb 6-1: config 0 has no interface number 0 [ 1173.274843][T28445] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1173.286205][T28445] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1173.304238][T28445] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.349737][T28445] usb 6-1: config 0 descriptor?? [ 1173.378561][T14682] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1173.623374][T14682] FAULT_INJECTION: forcing a failure. [ 1173.623374][T14682] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.686909][T14682] CPU: 1 PID: 14682 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1173.695620][T14682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1173.705682][T14682] Call Trace: [ 1173.709002][T14682] dump_stack+0x188/0x20d [ 1173.713346][T14682] should_fail.cold+0x5/0xa [ 1173.717850][T14682] ? fault_create_debugfs_attr+0x140/0x140 [ 1173.723672][T14682] should_failslab+0x5/0xf [ 1173.728120][T14682] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1173.733587][T14682] ? mark_held_locks+0x9f/0xe0 [ 1173.738362][T14682] ? snd_virmidi_unsubscribe+0x90/0x90 [ 1173.743831][T14682] snd_seq_port_connect+0x5d/0x510 [ 1173.748949][T14682] ? _raw_read_unlock+0x24/0x40 [ 1173.753807][T14682] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 1173.759186][T14682] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 1173.765084][T14682] ? lockdep_hardirqs_on+0x463/0x620 [ 1173.770381][T14682] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1173.775937][T14682] snd_seq_oss_midi_open+0x3cb/0x640 [ 1173.781238][T14682] ? snd_seq_oss_midi_setup+0x50/0x50 [ 1173.786620][T14682] ? mark_held_locks+0x9f/0xe0 [ 1173.791397][T14682] ? get_mdev+0x75/0x90 [ 1173.795557][T14682] ? get_mididev.isra.0+0x76/0xa0 [ 1173.800590][T14682] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 1173.806503][T14682] snd_seq_oss_open+0x7fa/0x980 [ 1173.811363][T14682] odev_open+0x6c/0x90 [ 1173.815450][T14682] ? odev_release+0x70/0x70 [ 1173.819966][T14682] soundcore_open+0x446/0x600 [ 1173.824650][T14682] ? sound_devnode+0xf0/0xf0 [ 1173.829248][T14682] chrdev_open+0x219/0x5c0 [ 1173.833675][T14682] ? cdev_put.part.0+0x50/0x50 [ 1173.838448][T14682] ? security_file_open+0x84/0x410 [ 1173.843574][T14682] do_dentry_open+0x4ba/0x1290 [ 1173.848348][T14682] ? cdev_put.part.0+0x50/0x50 [ 1173.853120][T14682] ? security_inode_permission+0xc4/0xf0 [ 1173.858756][T14682] ? chown_common+0x550/0x550 [ 1173.863447][T14682] ? inode_permission+0xab/0x500 [ 1173.868403][T14682] path_openat+0x1e59/0x27d0 [ 1173.873008][T14682] ? path_lookupat.isra.0+0x530/0x530 [ 1173.878388][T14682] ? lock_acquire+0x1f2/0x8f0 [ 1173.883074][T14682] do_filp_open+0x192/0x260 [ 1173.887582][T14682] ? may_open_dev+0xf0/0xf0 [ 1173.892095][T14682] ? do_raw_spin_lock+0x129/0x2e0 [ 1173.897132][T14682] ? _raw_spin_unlock+0x24/0x40 [ 1173.901983][T14682] ? __alloc_fd+0x46d/0x600 [ 1173.906512][T14682] do_sys_openat2+0x585/0x7d0 [ 1173.911200][T14682] ? file_open_root+0x400/0x400 [ 1173.916053][T14682] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1173.921612][T14682] ? wait_for_completion+0x270/0x270 [ 1173.926901][T14682] ? __this_cpu_preempt_check+0x28/0x190 [ 1173.932714][T14682] ? __sb_end_write+0x101/0x1d0 [ 1173.937573][T14682] do_sys_open+0xc3/0x140 [ 1173.941910][T14682] ? filp_open+0x70/0x70 [ 1173.946160][T14682] ? ksys_write+0x1a5/0x250 [ 1173.950695][T14682] ? __ia32_sys_clock_settime+0x260/0x260 [ 1173.956424][T14682] ? trace_hardirqs_off_caller+0x55/0x230 [ 1173.962165][T14682] do_syscall_64+0xf6/0x7d0 [ 1173.966682][T14682] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1173.972575][T14682] RIP: 0033:0x45ca69 [ 1173.976476][T14682] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1173.996173][T14682] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1174.004593][T14682] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1174.012572][T14682] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1174.020554][T14682] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1174.028532][T14682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1174.036530][T14682] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1174.099788][ T3140] usb 6-1: USB disconnect, device number 80 03:40:37 executing program 5 (fault-call:1 fault-nth:26): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:40:37 executing program 1: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 03:40:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:40:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r3, 0xffffffffffffffff) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r5, r6) r7 = dup2(r4, r5) ioctl$DRM_IOCTL_ADD_MAP(r7, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x5, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0xfd}) add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 03:40:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x0, 0x4}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:37 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x4c]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:37 executing program 1: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) [ 1174.781405][T14785] encrypted_key: insufficient parameters specified [ 1174.803316][T14788] encrypted_key: insufficient parameters specified 03:40:37 executing program 1: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) [ 1174.819074][ T28] audit: type=1804 audit(1590982837.190:63): pid=14787 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir206584202/syzkaller.TiW8uT/1266/bus" dev="sda1" ino=16368 res=1 03:40:37 executing program 1: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 03:40:37 executing program 1: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 03:40:37 executing program 1: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1175.047007][ T3130] usb 6-1: new high-speed USB device number 81 using dummy_hcd 03:40:37 executing program 1: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1175.326838][ T3130] usb 6-1: Using ep0 maxpacket: 8 [ 1175.358937][T14785] encrypted_key: insufficient parameters specified [ 1175.373062][ T28] audit: type=1804 audit(1590982837.740:64): pid=14785 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir206584202/syzkaller.TiW8uT/1266/bus" dev="sda1" ino=16368 res=1 [ 1175.467665][ T3130] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1175.481530][ T3130] usb 6-1: config 0 has no interface number 0 [ 1175.501557][ T3130] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1175.534320][ T3130] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1175.558286][ T3130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.577920][ T3130] usb 6-1: config 0 descriptor?? [ 1175.608265][T14783] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1175.838120][T14783] FAULT_INJECTION: forcing a failure. [ 1175.838120][T14783] name failslab, interval 1, probability 0, space 0, times 0 [ 1175.860264][T14783] CPU: 1 PID: 14783 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1175.868974][T14783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1175.879048][T14783] Call Trace: [ 1175.882369][T14783] dump_stack+0x188/0x20d [ 1175.886709][T14783] should_fail.cold+0x5/0xa [ 1175.891223][T14783] ? fault_create_debugfs_attr+0x140/0x140 [ 1175.897045][T14783] should_failslab+0x5/0xf [ 1175.901461][T14783] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1175.906834][T14783] ? mark_held_locks+0x9f/0xe0 [ 1175.911612][T14783] snd_seq_port_connect+0x5d/0x510 [ 1175.916735][T14783] ? _raw_read_unlock+0x24/0x40 [ 1175.921592][T14783] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 1175.926972][T14783] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 1175.932876][T14783] ? lockdep_hardirqs_on+0x463/0x620 [ 1175.938179][T14783] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1175.943755][T14783] snd_seq_oss_midi_open+0x4e7/0x640 [ 1175.949048][T14783] ? snd_seq_oss_midi_setup+0x50/0x50 [ 1175.954512][T14783] ? mark_held_locks+0x9f/0xe0 [ 1175.959295][T14783] ? get_mdev+0x75/0x90 [ 1175.963536][T14783] ? get_mididev.isra.0+0x76/0xa0 [ 1175.968565][T14783] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 1175.974475][T14783] snd_seq_oss_open+0x7fa/0x980 [ 1175.979338][T14783] odev_open+0x6c/0x90 [ 1175.983405][T14783] ? odev_release+0x70/0x70 [ 1175.987913][T14783] soundcore_open+0x446/0x600 [ 1175.992598][T14783] ? sound_devnode+0xf0/0xf0 [ 1175.997193][T14783] chrdev_open+0x219/0x5c0 [ 1176.001617][T14783] ? cdev_put.part.0+0x50/0x50 [ 1176.006383][T14783] ? security_file_open+0x84/0x410 [ 1176.011504][T14783] do_dentry_open+0x4ba/0x1290 [ 1176.016277][T14783] ? cdev_put.part.0+0x50/0x50 [ 1176.021046][T14783] ? security_inode_permission+0xc4/0xf0 [ 1176.026677][T14783] ? chown_common+0x550/0x550 [ 1176.031349][T14783] ? inode_permission+0xab/0x500 [ 1176.036293][T14783] path_openat+0x1e59/0x27d0 [ 1176.040902][T14783] ? path_lookupat.isra.0+0x530/0x530 [ 1176.046285][T14783] ? _kstrtoull+0x13f/0x1f0 [ 1176.050821][T14783] do_filp_open+0x192/0x260 [ 1176.055324][T14783] ? may_open_dev+0xf0/0xf0 [ 1176.059830][T14783] ? do_raw_spin_lock+0x129/0x2e0 [ 1176.064860][T14783] ? _raw_spin_unlock+0x24/0x40 [ 1176.069732][T14783] ? __alloc_fd+0x46d/0x600 [ 1176.074261][T14783] do_sys_openat2+0x585/0x7d0 [ 1176.078944][T14783] ? file_open_root+0x400/0x400 [ 1176.083795][T14783] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1176.089350][T14783] ? wait_for_completion+0x270/0x270 [ 1176.094639][T14783] ? __this_cpu_preempt_check+0x28/0x190 [ 1176.100283][T14783] ? __sb_end_write+0x101/0x1d0 [ 1176.105136][T14783] do_sys_open+0xc3/0x140 [ 1176.110074][T14783] ? filp_open+0x70/0x70 [ 1176.114309][T14783] ? ksys_write+0x1a5/0x250 [ 1176.118819][T14783] ? __ia32_sys_clock_settime+0x260/0x260 [ 1176.124546][T14783] ? trace_hardirqs_off_caller+0x55/0x230 [ 1176.130285][T14783] do_syscall_64+0xf6/0x7d0 [ 1176.134803][T14783] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1176.140700][T14783] RIP: 0033:0x45ca69 [ 1176.144595][T14783] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1176.164198][T14783] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1176.172637][T14783] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1176.180616][T14783] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1176.188592][T14783] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1176.196672][T14783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1176.204694][T14783] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1176.262548][ T3140] usb 6-1: USB disconnect, device number 81 03:40:39 executing program 5 (fault-call:1 fault-nth:27): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:40:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="c641d602e0c5"], 0x0, 0x1b}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 03:40:39 executing program 1: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x0, 0x5}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="c641d602e0c522"], 0x0, 0x1b}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 03:40:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x60]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:39 executing program 1: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x1c) 03:40:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x10000000002) 03:40:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x20028}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 03:40:39 executing program 1: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x1c) [ 1177.166516][ T3136] usb 6-1: new high-speed USB device number 82 using dummy_hcd 03:40:39 executing program 1: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x1c) 03:40:39 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@broadcast, @local}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x10000000002) [ 1177.416617][ T3136] usb 6-1: Using ep0 maxpacket: 8 [ 1177.536990][ T3136] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1177.545189][ T3136] usb 6-1: config 0 has no interface number 0 [ 1177.586564][ T3136] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1177.600968][ T3136] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1177.612623][ T3136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.635075][ T3136] usb 6-1: config 0 descriptor?? [ 1177.658022][T14876] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1177.888240][T14876] FAULT_INJECTION: forcing a failure. [ 1177.888240][T14876] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.922413][T14876] CPU: 0 PID: 14876 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1177.931121][T14876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1177.941178][T14876] Call Trace: [ 1177.944481][T14876] dump_stack+0x188/0x20d [ 1177.948845][T14876] should_fail.cold+0x5/0xa [ 1177.953360][T14876] ? fault_create_debugfs_attr+0x140/0x140 [ 1177.959184][T14876] should_failslab+0x5/0xf [ 1177.963613][T14876] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1177.968996][T14876] ? mark_held_locks+0x9f/0xe0 [ 1177.973762][T14876] ? snd_virmidi_unsubscribe+0x90/0x90 [ 1177.979228][T14876] snd_seq_port_connect+0x5d/0x510 [ 1177.984345][T14876] ? _raw_read_unlock+0x24/0x40 [ 1177.989199][T14876] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 1177.994580][T14876] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 1178.000486][T14876] ? lockdep_hardirqs_on+0x463/0x620 [ 1178.005781][T14876] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1178.011335][T14876] snd_seq_oss_midi_open+0x3cb/0x640 [ 1178.016631][T14876] ? snd_seq_oss_midi_setup+0x50/0x50 [ 1178.022004][T14876] ? mark_held_locks+0x9f/0xe0 [ 1178.026780][T14876] ? get_mdev+0x75/0x90 [ 1178.030942][T14876] ? get_mididev.isra.0+0x76/0xa0 [ 1178.035975][T14876] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 1178.041882][T14876] snd_seq_oss_open+0x7fa/0x980 [ 1178.046744][T14876] odev_open+0x6c/0x90 [ 1178.050903][T14876] ? odev_release+0x70/0x70 [ 1178.055410][T14876] soundcore_open+0x446/0x600 [ 1178.060096][T14876] ? sound_devnode+0xf0/0xf0 [ 1178.064692][T14876] chrdev_open+0x219/0x5c0 [ 1178.069113][T14876] ? cdev_put.part.0+0x50/0x50 [ 1178.073888][T14876] ? security_file_open+0x84/0x410 [ 1178.079180][T14876] do_dentry_open+0x4ba/0x1290 [ 1178.083952][T14876] ? cdev_put.part.0+0x50/0x50 [ 1178.088725][T14876] ? security_inode_permission+0xc4/0xf0 [ 1178.094360][T14876] ? chown_common+0x550/0x550 [ 1178.099042][T14876] ? inode_permission+0xab/0x500 [ 1178.103994][T14876] path_openat+0x1e59/0x27d0 [ 1178.108606][T14876] ? path_lookupat.isra.0+0x530/0x530 [ 1178.113986][T14876] ? lock_acquire+0x1f2/0x8f0 [ 1178.118677][T14876] do_filp_open+0x192/0x260 [ 1178.123186][T14876] ? may_open_dev+0xf0/0xf0 [ 1178.127700][T14876] ? do_raw_spin_lock+0x129/0x2e0 [ 1178.132742][T14876] ? _raw_spin_unlock+0x24/0x40 [ 1178.137602][T14876] ? __alloc_fd+0x46d/0x600 [ 1178.142122][T14876] do_sys_openat2+0x585/0x7d0 [ 1178.146814][T14876] ? file_open_root+0x400/0x400 [ 1178.151668][T14876] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1178.157222][T14876] ? wait_for_completion+0x270/0x270 [ 1178.162510][T14876] ? __this_cpu_preempt_check+0x28/0x190 [ 1178.168151][T14876] ? __sb_end_write+0x101/0x1d0 [ 1178.173010][T14876] do_sys_open+0xc3/0x140 [ 1178.177345][T14876] ? filp_open+0x70/0x70 [ 1178.181595][T14876] ? ksys_write+0x1a5/0x250 [ 1178.186109][T14876] ? __ia32_sys_clock_settime+0x260/0x260 [ 1178.191835][T14876] ? trace_hardirqs_off_caller+0x55/0x230 [ 1178.197580][T14876] do_syscall_64+0xf6/0x7d0 [ 1178.202099][T14876] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1178.207992][T14876] RIP: 0033:0x45ca69 [ 1178.211890][T14876] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1178.231525][T14876] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1178.239950][T14876] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1178.247928][T14876] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1178.255915][T14876] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1178.263891][T14876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1178.271866][T14876] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1178.588130][ T3136] usb 6-1: USB disconnect, device number 82 03:40:41 executing program 5 (fault-call:1 fault-nth:28): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:40:41 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x15, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 03:40:41 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup2(r0, r0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) dup3(r2, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, r1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup2(r3, r3) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, r4, 0x0) 03:40:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@broadcast, @local}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x10000000002) 03:40:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x0, 0x6}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x73]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:41 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@broadcast, @local}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x10000000002) [ 1179.586347][ T3136] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1179.826270][ T3136] usb 6-1: Using ep0 maxpacket: 8 03:40:42 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, 0x0, 0x20000041) [ 1179.967093][ T3136] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1179.975782][ T3136] usb 6-1: config 0 has no interface number 0 [ 1180.028795][ T3136] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1180.082773][ T3136] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a 03:40:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x7, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1180.143936][ T3136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.200338][ T3136] usb 6-1: config 0 descriptor?? [ 1180.247787][T15007] raw-gadget gadget: fail, usb_ep_enable returned -22 03:40:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, &(0x7f0000000000)=""/132, 0x4e, 0x84, 0x8}, 0x20) 03:40:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x62, 0xa, 0x2}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1180.485235][T15054] BPF:[3] ARRAY (anon) [ 1180.498275][T15054] BPF:type_id=1 index_type_id=2 nr_elems=0 [ 1180.508044][T15007] FAULT_INJECTION: forcing a failure. [ 1180.508044][T15007] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.514907][T15054] BPF: [ 1180.534560][T15054] BPF:Invalid elem [ 1180.544596][T15054] BPF: [ 1180.544596][T15054] [ 1180.575475][T15007] CPU: 0 PID: 15007 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1180.584526][T15007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1180.594605][T15007] Call Trace: [ 1180.597908][T15007] dump_stack+0x188/0x20d [ 1180.602257][T15007] should_fail.cold+0x5/0xa [ 1180.606778][T15007] ? fault_create_debugfs_attr+0x140/0x140 [ 1180.612610][T15007] should_failslab+0x5/0xf [ 1180.617044][T15007] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1180.622433][T15007] ? mark_held_locks+0x9f/0xe0 [ 1180.627230][T15007] snd_seq_port_connect+0x5d/0x510 [ 1180.632362][T15007] ? _raw_read_unlock+0x24/0x40 [ 1180.637226][T15007] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 1180.642645][T15007] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 1180.648548][T15007] ? lockdep_hardirqs_on+0x463/0x620 [ 1180.653866][T15007] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1180.659429][T15007] snd_seq_oss_midi_open+0x4e7/0x640 [ 1180.664731][T15007] ? snd_seq_oss_midi_setup+0x50/0x50 [ 1180.670114][T15007] ? mark_held_locks+0x9f/0xe0 [ 1180.674898][T15007] ? get_mdev+0x75/0x90 [ 1180.679116][T15007] ? get_mididev.isra.0+0x76/0xa0 [ 1180.684156][T15007] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 1180.690079][T15007] snd_seq_oss_open+0x7fa/0x980 [ 1180.694947][T15007] odev_open+0x6c/0x90 [ 1180.699024][T15007] ? odev_release+0x70/0x70 [ 1180.703533][T15007] soundcore_open+0x446/0x600 [ 1180.708226][T15007] ? sound_devnode+0xf0/0xf0 [ 1180.712820][T15007] chrdev_open+0x219/0x5c0 [ 1180.717247][T15007] ? cdev_put.part.0+0x50/0x50 [ 1180.722025][T15007] ? security_file_open+0x84/0x410 [ 1180.727150][T15007] do_dentry_open+0x4ba/0x1290 [ 1180.731926][T15007] ? cdev_put.part.0+0x50/0x50 [ 1180.736703][T15007] ? security_inode_permission+0xc4/0xf0 [ 1180.742346][T15007] ? chown_common+0x550/0x550 [ 1180.747032][T15007] ? inode_permission+0xab/0x500 [ 1180.751993][T15007] path_openat+0x1e59/0x27d0 [ 1180.756641][T15007] ? path_lookupat.isra.0+0x530/0x530 [ 1180.762027][T15007] ? lock_acquire+0x1f2/0x8f0 [ 1180.766723][T15007] do_filp_open+0x192/0x260 [ 1180.771256][T15007] ? may_open_dev+0xf0/0xf0 [ 1180.775779][T15007] ? do_raw_spin_lock+0x129/0x2e0 [ 1180.780826][T15007] ? _raw_spin_unlock+0x24/0x40 [ 1180.785687][T15007] ? __alloc_fd+0x46d/0x600 [ 1180.790214][T15007] do_sys_openat2+0x585/0x7d0 [ 1180.794907][T15007] ? file_open_root+0x400/0x400 [ 1180.799772][T15007] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1180.807837][T15007] ? wait_for_completion+0x270/0x270 [ 1180.813139][T15007] ? __this_cpu_preempt_check+0x28/0x190 [ 1180.818788][T15007] ? __sb_end_write+0x101/0x1d0 [ 1180.823665][T15007] do_sys_open+0xc3/0x140 [ 1180.828010][T15007] ? filp_open+0x70/0x70 [ 1180.832289][T15007] ? ksys_write+0x1a5/0x250 [ 1180.836815][T15007] ? __ia32_sys_clock_settime+0x260/0x260 [ 1180.842546][T15007] ? trace_hardirqs_off_caller+0x55/0x230 [ 1180.848287][T15007] do_syscall_64+0xf6/0x7d0 [ 1180.852814][T15007] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1180.858712][T15007] RIP: 0033:0x45ca69 [ 1180.862614][T15007] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1180.882226][T15007] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1180.890658][T15007] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1180.898639][T15007] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1180.906644][T15007] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1180.914625][T15007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1180.922609][T15007] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 03:40:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x80005}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000000)="ea0010e800440f20c066350e000000440f22c00f21720f21c1c3f40f3803760f650f01c26a06ea00005600", 0x2b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000000)) socketpair(0x21, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10400012}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r5, 0x20, 0x0, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'nr0\x00'}, @NL80211_ATTR_WIPHY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) r6 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000140)="8d20dd4642f107b71b516dcbe5c39734", 0x10) prctl$PR_MCE_KILL_GET(0x22) epoll_create1(0x80000) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1181.075100][ T3136] usb 6-1: USB disconnect, device number 83 03:40:44 executing program 5 (fault-call:1 fault-nth:29): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:40:44 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rename(&(0x7f0000000380)='./bus/file0\x00', &(0x7f00000003c0)='./bus/file1\x00') 03:40:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCFLSH(r0, 0x80045439, 0x73e000) 03:40:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x80005}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000000)="ea0010e800440f20c066350e000000440f22c00f21720f21c1c3f40f3803760f650f01c26a06ea00005600", 0x2b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000000)) socketpair(0x21, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10400012}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r5, 0x20, 0x0, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'nr0\x00'}, @NL80211_ATTR_WIPHY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) r6 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000140)="8d20dd4642f107b71b516dcbe5c39734", 0x10) prctl$PR_MCE_KILL_GET(0x22) epoll_create1(0x80000) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1181.829235][T15115] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:40:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x0, 0x7}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xff]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000019000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f0000000080)="3e0f1bcd66f083310d66b9800000c00f326635000800000f3066b9800000c00f326635000100000f300f3acc1b95440f20c066350f000000440f22c066650f8d8fa30000ad0fc72a660fc7360000", 0x4e}], 0x1, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0x5000, 0x2000, &(0x7f0000022000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:40:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newrule={0x1c, 0x20, 0x603}, 0x1c}}, 0x0) [ 1182.066278][ T4251] usb 6-1: new high-speed USB device number 84 using dummy_hcd 03:40:44 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) exit_group(0x0) madvise(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0xcc) [ 1182.336095][ T4251] usb 6-1: Using ep0 maxpacket: 8 03:40:44 executing program 0: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000140)) [ 1182.456641][ T4251] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1182.464764][ T4251] usb 6-1: config 0 has no interface number 0 [ 1182.516040][ T4251] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1182.545987][ T4251] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1182.555057][ T4251] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.607009][ T4251] usb 6-1: config 0 descriptor?? 03:40:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000019000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f0000000080)="3e0f1bcd66f083310d66b9800000c00f326635000800000f3066b9800000c00f326635000100000f300f3acc1b95440f20c066350f000000440f22c066650f8d8fa30000ad0fc72a660fc7360000", 0x4e}], 0x1, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0x5000, 0x2000, &(0x7f0000022000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4cb]}) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1182.627605][T15116] raw-gadget gadget: fail, usb_ep_enable returned -22 03:40:45 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 1182.881868][T15116] FAULT_INJECTION: forcing a failure. [ 1182.881868][T15116] name failslab, interval 1, probability 0, space 0, times 0 [ 1182.936107][T15116] CPU: 0 PID: 15116 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1182.944818][T15116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1182.954879][T15116] Call Trace: [ 1182.958181][T15116] dump_stack+0x188/0x20d [ 1182.962649][T15116] should_fail.cold+0x5/0xa [ 1182.967175][T15116] ? fault_create_debugfs_attr+0x140/0x140 [ 1182.973000][T15116] should_failslab+0x5/0xf [ 1182.977509][T15116] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1182.982884][T15116] ? mark_held_locks+0x9f/0xe0 [ 1182.987646][T15116] ? snd_virmidi_unsubscribe+0x90/0x90 [ 1182.993149][T15116] snd_seq_port_connect+0x5d/0x510 [ 1182.998282][T15116] ? _raw_read_unlock+0x24/0x40 [ 1183.003137][T15116] ? snd_seq_port_use_ptr+0x136/0x1a0 [ 1183.008515][T15116] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 1183.014423][T15116] ? lockdep_hardirqs_on+0x463/0x620 [ 1183.019726][T15116] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1183.025286][T15116] snd_seq_oss_midi_open+0x3cb/0x640 [ 1183.030604][T15116] ? snd_seq_oss_midi_setup+0x50/0x50 [ 1183.036023][T15116] ? mark_held_locks+0x9f/0xe0 [ 1183.040808][T15116] ? get_mdev+0x75/0x90 [ 1183.044966][T15116] ? get_mididev.isra.0+0x76/0xa0 [ 1183.050000][T15116] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 1183.055908][T15116] snd_seq_oss_open+0x7fa/0x980 [ 1183.060767][T15116] odev_open+0x6c/0x90 [ 1183.064834][T15116] ? odev_release+0x70/0x70 [ 1183.069342][T15116] soundcore_open+0x446/0x600 [ 1183.074049][T15116] ? sound_devnode+0xf0/0xf0 [ 1183.078659][T15116] chrdev_open+0x219/0x5c0 [ 1183.083085][T15116] ? cdev_put.part.0+0x50/0x50 [ 1183.087857][T15116] ? security_file_open+0x84/0x410 [ 1183.092974][T15116] do_dentry_open+0x4ba/0x1290 [ 1183.097741][T15116] ? cdev_put.part.0+0x50/0x50 [ 1183.102508][T15116] ? security_inode_permission+0xc4/0xf0 [ 1183.108148][T15116] ? chown_common+0x550/0x550 [ 1183.112828][T15116] ? inode_permission+0xab/0x500 [ 1183.117774][T15116] path_openat+0x1e59/0x27d0 [ 1183.122374][T15116] ? path_lookupat.isra.0+0x530/0x530 [ 1183.127753][T15116] ? lock_acquire+0x1f2/0x8f0 [ 1183.132445][T15116] do_filp_open+0x192/0x260 [ 1183.136975][T15116] ? may_open_dev+0xf0/0xf0 [ 1183.141486][T15116] ? do_raw_spin_lock+0x129/0x2e0 [ 1183.146527][T15116] ? _raw_spin_unlock+0x24/0x40 [ 1183.151385][T15116] ? __alloc_fd+0x46d/0x600 [ 1183.155932][T15116] do_sys_openat2+0x585/0x7d0 [ 1183.160621][T15116] ? file_open_root+0x400/0x400 [ 1183.165513][T15116] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1183.171072][T15116] ? wait_for_completion+0x270/0x270 [ 1183.176364][T15116] ? __this_cpu_preempt_check+0x28/0x190 [ 1183.182008][T15116] ? __sb_end_write+0x101/0x1d0 [ 1183.186870][T15116] do_sys_open+0xc3/0x140 [ 1183.191208][T15116] ? filp_open+0x70/0x70 [ 1183.195458][T15116] ? ksys_write+0x1a5/0x250 [ 1183.199972][T15116] ? __ia32_sys_clock_settime+0x260/0x260 [ 1183.205703][T15116] ? trace_hardirqs_off_caller+0x55/0x230 [ 1183.211446][T15116] do_syscall_64+0xf6/0x7d0 [ 1183.215968][T15116] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1183.221868][T15116] RIP: 0033:0x45ca69 [ 1183.225789][T15116] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1183.245396][T15116] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1183.253819][T15116] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1183.261803][T15116] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1183.269780][T15116] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1183.277762][T15116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1183.285763][T15116] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1183.339118][T15182] x_tables: duplicate underflow at hook 2 [ 1183.440038][ T3136] usb 6-1: USB disconnect, device number 84 03:40:46 executing program 5 (fault-call:1 fault-nth:30): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:40:46 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800200203804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) mlockall(0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) setxattr$security_ima(0x0, &(0x7f0000000340)='security.ima\x00', 0x0, 0x0, 0x0) 03:40:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000019000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f0000000080)="3e0f1bcd66f083310d66b9800000c00f326635000800000f3066b9800000c00f326635000100000f300f3acc1b95440f20c066350f000000440f22c066650f8d8fa30000ad0fc72a660fc7360000", 0x4e}], 0x1, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0x5000, 0x2000, &(0x7f0000022000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4cb]}) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:40:46 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = getpid() sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x3c}}, 0x0) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setfsgid(0x0) [ 1184.235246][T15232] EXT4-fs (loop0): bad geometry: block count 1080 exceeds size of device (1 blocks) 03:40:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x0, 0x8}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) [ 1184.476233][ T3136] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1184.745776][ T3136] usb 6-1: Using ep0 maxpacket: 8 [ 1184.875950][ T3136] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1184.884068][ T3136] usb 6-1: config 0 has no interface number 0 [ 1184.895560][T15232] EXT4-fs (loop0): Unrecognized mount option "" or missing value [ 1184.901785][ T3136] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1184.905013][T15232] EXT4-fs (loop0): failed to parse options in superblock:  [ 1184.923278][T15232] EXT4-fs (loop0): inodes count not valid: 536871552 vs 128 [ 1184.931009][ T3136] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1184.968695][ T3136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.007405][ T3136] usb 6-1: config 0 descriptor?? 03:40:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf32(r0, &(0x7f00000016c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0x2}, [], "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"}, 0x48f) 03:40:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000019000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f0000000080)="3e0f1bcd66f083310d66b9800000c00f326635000800000f3066b9800000c00f326635000100000f300f3acc1b95440f20c066350f000000440f22c066650f8d8fa30000ad0fc72a660fc7360000", 0x4e}], 0x1, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0x5000, 0x2000, &(0x7f0000022000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4cb]}) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1185.037272][T15236] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1185.271579][T15236] FAULT_INJECTION: forcing a failure. [ 1185.271579][T15236] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.271698][T15236] CPU: 1 PID: 15236 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1185.271707][T15236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1185.271714][T15236] Call Trace: [ 1185.271735][T15236] dump_stack+0x188/0x20d 03:40:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf32(r0, &(0x7f00000016c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x800}, [], "fc3133cee8f0a3f63db6c856c8dd41460a3a19149d60643e04291f5c528a9dc176d6f6a541718f5b02ebdbb3f80ccdc9db152451fa5e01c103fcbde7100e4bd252a6894ed5a060aa3a8044c648681ed5bb0131fed33c3268be3b1214903cc61605f9532d8a21bb1923b9982545c3b1efee170d0b70aaaa1e27c52884c371419400955b623e960f5d5fabb2ec7f9d08578804de587f0b86f4eaaa8f8984296df90c5c297872134cf97c3ad21108c12659a905bb67e3b11ec3431b0d63602b34d8396cdc77bf853b33ec74f51134f265b03c26e427033ead1555e2bf54368483d8d2fd8d01ee"}, 0x119) [ 1185.271760][T15236] should_fail.cold+0x5/0xa [ 1185.271781][T15236] ? fault_create_debugfs_attr+0x140/0x140 [ 1185.271810][T15236] should_failslab+0x5/0xf [ 1185.271825][T15236] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1185.271842][T15236] ? snd_seq_kernel_client_ctl+0xeb/0x130 03:40:48 executing program 5 (fault-call:1 fault-nth:31): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) [ 1185.271858][T15236] ? snd_seq_oss_midi_open+0x3cb/0x640 [ 1185.271875][T15236] ? snd_seq_oss_synth_setup_midi+0x123/0x520 [ 1185.271890][T15236] ? snd_seq_oss_open+0x7fa/0x980 [ 1185.271914][T15236] open_substream+0xe9/0x880 03:40:48 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0xa8c28, &(0x7f0000000200)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) [ 1185.271935][T15236] rawmidi_open_priv+0x2e8/0x6e0 [ 1185.271958][T15236] snd_rawmidi_kernel_open+0x1b5/0x270 [ 1185.271978][T15236] midisynth_subscribe+0xf2/0x330 [ 1185.271993][T15236] ? midisynth_use+0x250/0x250 [ 1185.272011][T15236] ? down_write+0xdb/0x150 [ 1185.272026][T15236] ? __down_timeout+0x2d0/0x2d0 [ 1185.272042][T15236] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1185.272058][T15236] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 1185.272081][T15236] check_and_subscribe_port+0x5b5/0x800 [ 1185.272098][T15236] ? midisynth_use+0x250/0x250 [ 1185.272118][T15236] snd_seq_port_connect+0x2e4/0x510 [ 1185.272142][T15236] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 1185.272158][T15236] ? lockdep_hardirqs_on+0x463/0x620 [ 1185.272179][T15236] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1185.272199][T15236] snd_seq_oss_midi_open+0x3cb/0x640 [ 1185.272218][T15236] ? snd_seq_oss_midi_setup+0x50/0x50 [ 1185.272234][T15236] ? mark_held_locks+0x9f/0xe0 03:40:48 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000040)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x0) [ 1185.272255][T15236] ? get_mdev+0x75/0x90 [ 1185.272273][T15236] ? get_mididev.isra.0+0x76/0xa0 [ 1185.272295][T15236] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 1185.272321][T15236] snd_seq_oss_open+0x7fa/0x980 [ 1185.272343][T15236] odev_open+0x6c/0x90 [ 1185.272356][T15236] ? odev_release+0x70/0x70 [ 1185.272373][T15236] soundcore_open+0x446/0x600 [ 1185.272394][T15236] ? sound_devnode+0xf0/0xf0 [ 1185.272408][T15236] chrdev_open+0x219/0x5c0 [ 1185.272424][T15236] ? cdev_put.part.0+0x50/0x50 [ 1185.272446][T15236] ? security_file_open+0x84/0x410 [ 1185.272467][T15236] do_dentry_open+0x4ba/0x1290 [ 1185.272483][T15236] ? cdev_put.part.0+0x50/0x50 [ 1185.272502][T15236] ? security_inode_permission+0xc4/0xf0 [ 1185.272525][T15236] ? chown_common+0x550/0x550 [ 1185.272542][T15236] ? inode_permission+0xab/0x500 [ 1185.272569][T15236] path_openat+0x1e59/0x27d0 [ 1185.272598][T15236] ? path_lookupat.isra.0+0x530/0x530 [ 1185.272619][T15236] ? _kstrtoull+0x13f/0x1f0 [ 1185.272646][T15236] do_filp_open+0x192/0x260 [ 1185.272662][T15236] ? may_open_dev+0xf0/0xf0 [ 1185.272686][T15236] ? do_raw_spin_lock+0x129/0x2e0 [ 1185.272714][T15236] ? _raw_spin_unlock+0x24/0x40 [ 1185.272729][T15236] ? __alloc_fd+0x46d/0x600 [ 1185.272755][T15236] do_sys_openat2+0x585/0x7d0 [ 1185.272776][T15236] ? file_open_root+0x400/0x400 [ 1185.272790][T15236] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1185.272809][T15236] ? wait_for_completion+0x270/0x270 [ 1185.272822][T15236] ? __this_cpu_preempt_check+0x28/0x190 [ 1185.272839][T15236] ? __sb_end_write+0x101/0x1d0 [ 1185.272857][T15236] do_sys_open+0xc3/0x140 [ 1185.272872][T15236] ? filp_open+0x70/0x70 [ 1185.272884][T15236] ? ksys_write+0x1a5/0x250 [ 1185.272902][T15236] ? __ia32_sys_clock_settime+0x260/0x260 [ 1185.272918][T15236] ? trace_hardirqs_off_caller+0x55/0x230 [ 1185.272942][T15236] do_syscall_64+0xf6/0x7d0 [ 1185.272963][T15236] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1185.272977][T15236] RIP: 0033:0x45ca69 [ 1185.272992][T15236] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1185.273001][T15236] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1185.273016][T15236] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1185.273025][T15236] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1185.273034][T15236] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1185.273043][T15236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1185.273052][T15236] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1185.305728][ T3136] usb 6-1: USB disconnect, device number 85 [ 1186.180745][T15331] hugetlbfs: Bad value for 'uid' [ 1186.215736][ T3136] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1186.236244][T15336] hugetlbfs: Bad value for 'uid' [ 1186.495588][ T3136] usb 6-1: Using ep0 maxpacket: 8 [ 1186.646559][ T3136] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1186.646579][ T3136] usb 6-1: config 0 has no interface number 0 [ 1186.646618][ T3136] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 03:40:49 executing program 0: [ 1186.646647][ T3136] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1186.646665][ T3136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.653836][ T3136] usb 6-1: config 0 descriptor?? 03:40:49 executing program 3: [ 1186.937972][T15321] raw-gadget gadget: fail, usb_ep_enable returned -22 03:40:49 executing program 0: 03:40:49 executing program 3: [ 1187.162854][T15321] FAULT_INJECTION: forcing a failure. [ 1187.162854][T15321] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.188728][T15321] CPU: 1 PID: 15321 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1187.197435][T15321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1187.207493][T15321] Call Trace: [ 1187.210796][T15321] dump_stack+0x188/0x20d [ 1187.215141][T15321] should_fail.cold+0x5/0xa [ 1187.219919][T15321] ? fault_create_debugfs_attr+0x140/0x140 [ 1187.225745][T15321] should_failslab+0x5/0xf [ 1187.230167][T15321] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1187.235563][T15321] ? __lock_acquire+0x2184/0x4c50 [ 1187.240675][T15321] dummy_urb_enqueue+0x82/0x8a0 [ 1187.245576][T15321] ? usb_hcd_map_urb_for_dma+0x4aa/0x14f0 [ 1187.251309][T15321] usb_hcd_submit_urb+0x2aa/0x1ee0 [ 1187.256438][T15321] ? snd_rawmidi_kernel_open+0x1b5/0x270 [ 1187.262073][T15321] ? usb_create_hcd+0x30/0x30 [ 1187.266760][T15321] ? __mutex_lock+0x458/0x13c0 [ 1187.271610][T15321] ? do_sys_open+0xc3/0x140 [ 1187.276204][T15321] ? substream_open.isra.0+0xab/0x830 [ 1187.281586][T15321] ? mutex_trylock+0x2c0/0x2c0 [ 1187.286357][T15321] usb_submit_urb+0x6e5/0x13b0 [ 1187.291125][T15321] ? down_read+0x110/0x420 [ 1187.295550][T15321] snd_usbmidi_submit_urb+0x19/0x60 [ 1187.300771][T15321] snd_usbmidi_input_start.part.0+0xbe/0x1c0 [ 1187.306769][T15321] substream_open.isra.0+0x505/0x830 [ 1187.312060][T15321] open_substream+0x42e/0x880 [ 1187.316744][T15321] rawmidi_open_priv+0x2e8/0x6e0 [ 1187.321688][T15321] snd_rawmidi_kernel_open+0x1b5/0x270 [ 1187.327150][T15321] midisynth_subscribe+0xf2/0x330 [ 1187.332175][T15321] ? midisynth_use+0x250/0x250 [ 1187.336941][T15321] ? down_write+0xdb/0x150 [ 1187.341353][T15321] ? __down_timeout+0x2d0/0x2d0 [ 1187.346291][T15321] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1187.352275][T15321] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 1187.358101][T15321] check_and_subscribe_port+0x5b5/0x800 [ 1187.363652][T15321] ? midisynth_use+0x250/0x250 [ 1187.368435][T15321] snd_seq_port_connect+0x2e4/0x510 [ 1187.373659][T15321] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 1187.379566][T15321] ? lockdep_hardirqs_on+0x463/0x620 [ 1187.384869][T15321] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1187.390434][T15321] snd_seq_oss_midi_open+0x3cb/0x640 [ 1187.395735][T15321] ? snd_seq_oss_midi_setup+0x50/0x50 [ 1187.401112][T15321] ? mark_held_locks+0x9f/0xe0 [ 1187.405895][T15321] ? get_mdev+0x75/0x90 [ 1187.410066][T15321] ? get_mididev.isra.0+0x76/0xa0 [ 1187.415127][T15321] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 1187.421037][T15321] snd_seq_oss_open+0x7fa/0x980 [ 1187.425905][T15321] odev_open+0x6c/0x90 [ 1187.429982][T15321] ? odev_release+0x70/0x70 [ 1187.434496][T15321] soundcore_open+0x446/0x600 [ 1187.439187][T15321] ? sound_devnode+0xf0/0xf0 [ 1187.443784][T15321] chrdev_open+0x219/0x5c0 [ 1187.448215][T15321] ? cdev_put.part.0+0x50/0x50 [ 1187.452995][T15321] ? security_file_open+0x84/0x410 [ 1187.458125][T15321] do_dentry_open+0x4ba/0x1290 [ 1187.462893][T15321] ? cdev_put.part.0+0x50/0x50 [ 1187.467710][T15321] ? security_inode_permission+0xc4/0xf0 [ 1187.473381][T15321] ? chown_common+0x550/0x550 [ 1187.478083][T15321] ? inode_permission+0xab/0x500 [ 1187.483037][T15321] path_openat+0x1e59/0x27d0 [ 1187.487697][T15321] ? path_lookupat.isra.0+0x530/0x530 [ 1187.493083][T15321] ? _kstrtoull+0x13f/0x1f0 [ 1187.497613][T15321] do_filp_open+0x192/0x260 [ 1187.502174][T15321] ? may_open_dev+0xf0/0xf0 [ 1187.506697][T15321] ? do_raw_spin_lock+0x129/0x2e0 [ 1187.514003][T15321] ? _raw_spin_unlock+0x24/0x40 [ 1187.518866][T15321] ? __alloc_fd+0x46d/0x600 [ 1187.523386][T15321] do_sys_openat2+0x585/0x7d0 [ 1187.528081][T15321] ? file_open_root+0x400/0x400 [ 1187.532952][T15321] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1187.538607][T15321] ? wait_for_completion+0x270/0x270 [ 1187.543909][T15321] ? __this_cpu_preempt_check+0x28/0x190 [ 1187.549577][T15321] ? __sb_end_write+0x101/0x1d0 [ 1187.554443][T15321] do_sys_open+0xc3/0x140 [ 1187.558792][T15321] ? filp_open+0x70/0x70 [ 1187.563043][T15321] ? ksys_write+0x1a5/0x250 [ 1187.567560][T15321] ? __ia32_sys_clock_settime+0x260/0x260 [ 1187.573287][T15321] ? trace_hardirqs_off_caller+0x55/0x230 [ 1187.579029][T15321] do_syscall_64+0xf6/0x7d0 [ 1187.583577][T15321] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1187.589473][T15321] RIP: 0033:0x45ca69 [ 1187.593505][T15321] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1187.613247][T15321] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1187.621668][T15321] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1187.629648][T15321] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1187.637627][T15321] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1187.645605][T15321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1187.653584][T15321] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1187.680116][T15321] usb 6-1: usb_submit_urb: -12 03:40:50 executing program 0: [ 1187.729057][T13825] usb 6-1: USB disconnect, device number 86 03:40:50 executing program 3: 03:40:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x0, 0x48}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:50 executing program 0: 03:40:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:50 executing program 5 (fault-call:1 fault-nth:32): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:40:50 executing program 1: 03:40:50 executing program 3: 03:40:50 executing program 0: 03:40:50 executing program 0: 03:40:50 executing program 1: 03:40:50 executing program 3: 03:40:50 executing program 1: 03:40:50 executing program 0: [ 1188.885585][ T3130] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1189.125271][ T3130] usb 6-1: Using ep0 maxpacket: 8 [ 1189.246107][ T3130] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1189.269858][ T3130] usb 6-1: config 0 has no interface number 0 [ 1189.290082][ T3130] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1189.325362][ T3130] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1189.337318][ T3130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.348283][ T3130] usb 6-1: config 0 descriptor?? [ 1189.376997][T15421] raw-gadget gadget: fail, usb_ep_enable returned -22 03:40:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x0, 0x300}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:51 executing program 3: 03:40:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) [ 1189.613056][T15421] FAULT_INJECTION: forcing a failure. [ 1189.613056][T15421] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.661156][T15421] CPU: 1 PID: 15421 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1189.669861][T15421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1189.679924][T15421] Call Trace: [ 1189.683226][T15421] dump_stack+0x188/0x20d [ 1189.687576][T15421] should_fail.cold+0x5/0xa [ 1189.692092][T15421] ? fault_create_debugfs_attr+0x140/0x140 [ 1189.697919][T15421] should_failslab+0x5/0xf [ 1189.702349][T15421] kmem_cache_alloc_node_trace+0x27c/0x790 [ 1189.708172][T15421] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 1189.713983][T15421] ? free_object+0x70/0x70 [ 1189.718408][T15421] ? lockdep_init_map_waits+0x26a/0x890 [ 1189.723964][T15421] __kmalloc_node+0x38/0x60 [ 1189.728477][T15421] kvmalloc_node+0x61/0xf0 [ 1189.733024][T15421] open_substream+0x33d/0x880 [ 1189.737715][T15421] rawmidi_open_priv+0x2e8/0x6e0 [ 1189.742666][T15421] snd_rawmidi_kernel_open+0x1b5/0x270 [ 1189.748142][T15421] midisynth_subscribe+0xf2/0x330 [ 1189.753176][T15421] ? midisynth_use+0x250/0x250 [ 1189.758041][T15421] ? down_write+0xdb/0x150 [ 1189.762553][T15421] ? __down_timeout+0x2d0/0x2d0 [ 1189.767413][T15421] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1189.773405][T15421] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 1189.779408][T15421] check_and_subscribe_port+0x5b5/0x800 [ 1189.784973][T15421] ? midisynth_use+0x250/0x250 [ 1189.789752][T15421] snd_seq_port_connect+0x2e4/0x510 [ 1189.794970][T15421] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 1189.800874][T15421] ? lockdep_hardirqs_on+0x463/0x620 [ 1189.806180][T15421] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1189.811769][T15421] snd_seq_oss_midi_open+0x3cb/0x640 [ 1189.817079][T15421] ? snd_seq_oss_midi_setup+0x50/0x50 [ 1189.822458][T15421] ? mark_held_locks+0x9f/0xe0 [ 1189.827246][T15421] ? get_mdev+0x75/0x90 [ 1189.831415][T15421] ? get_mididev.isra.0+0x76/0xa0 [ 1189.836463][T15421] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 1189.842379][T15421] snd_seq_oss_open+0x7fa/0x980 [ 1189.847334][T15421] odev_open+0x6c/0x90 [ 1189.851411][T15421] ? odev_release+0x70/0x70 [ 1189.855923][T15421] soundcore_open+0x446/0x600 [ 1189.860610][T15421] ? sound_devnode+0xf0/0xf0 [ 1189.865192][T15421] chrdev_open+0x219/0x5c0 [ 1189.869611][T15421] ? cdev_put.part.0+0x50/0x50 [ 1189.874390][T15421] ? security_file_open+0x84/0x410 [ 1189.879530][T15421] do_dentry_open+0x4ba/0x1290 [ 1189.884301][T15421] ? cdev_put.part.0+0x50/0x50 [ 1189.889084][T15421] ? security_inode_permission+0xc4/0xf0 [ 1189.894726][T15421] ? chown_common+0x550/0x550 [ 1189.899411][T15421] ? inode_permission+0xab/0x500 [ 1189.904365][T15421] path_openat+0x1e59/0x27d0 [ 1189.908984][T15421] ? path_lookupat.isra.0+0x530/0x530 [ 1189.914417][T15421] ? lock_acquire+0x1f2/0x8f0 [ 1189.919112][T15421] do_filp_open+0x192/0x260 [ 1189.923619][T15421] ? may_open_dev+0xf0/0xf0 [ 1189.928138][T15421] ? do_raw_spin_lock+0x129/0x2e0 [ 1189.933179][T15421] ? _raw_spin_unlock+0x24/0x40 [ 1189.938038][T15421] ? __alloc_fd+0x46d/0x600 [ 1189.942583][T15421] do_sys_openat2+0x585/0x7d0 [ 1189.947276][T15421] ? file_open_root+0x400/0x400 [ 1189.952127][T15421] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1189.957685][T15421] ? wait_for_completion+0x270/0x270 [ 1189.962972][T15421] ? __this_cpu_preempt_check+0x28/0x190 [ 1189.968610][T15421] ? __sb_end_write+0x101/0x1d0 [ 1189.973600][T15421] do_sys_open+0xc3/0x140 [ 1189.978040][T15421] ? filp_open+0x70/0x70 [ 1189.982288][T15421] ? ksys_write+0x1a5/0x250 [ 1189.986830][T15421] ? __ia32_sys_clock_settime+0x260/0x260 [ 1189.992557][T15421] ? trace_hardirqs_off_caller+0x55/0x230 [ 1189.998299][T15421] do_syscall_64+0xf6/0x7d0 [ 1190.002816][T15421] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1190.008708][T15421] RIP: 0033:0x45ca69 [ 1190.012613][T15421] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1190.032221][T15421] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1190.040678][T15421] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1190.048660][T15421] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1190.056639][T15421] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1190.064617][T15421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1190.072597][T15421] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1190.176123][ T3130] usb 6-1: USB disconnect, device number 87 03:40:53 executing program 5 (fault-call:1 fault-nth:33): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cc9092089904dfe21abf000000010902230001000000000904120001ff768000082402010000000009058c0ec7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc006, 0x0) 03:40:53 executing program 1: 03:40:53 executing program 0: 03:40:53 executing program 3: 03:40:53 executing program 3: 03:40:53 executing program 0: 03:40:53 executing program 1: 03:40:53 executing program 0: 03:40:53 executing program 3: 03:40:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x0, 0x500}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x73, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) 03:40:53 executing program 1: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) [ 1191.102797][T15530] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1191.125081][ T4251] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1191.133536][T15532] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1191.381779][ T4251] usb 6-1: Using ep0 maxpacket: 8 03:40:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}, 0xfdef) [ 1191.505867][ T4251] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1191.513991][ T4251] usb 6-1: config 0 has no interface number 0 [ 1191.521381][ T4251] usb 6-1: config 0 interface 18 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 199 [ 1191.539158][ T4251] usb 6-1: New USB device found, idVendor=0499, idProduct=e2df, bcdDevice=bf.1a [ 1191.549006][ T4251] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.559063][ T4251] usb 6-1: config 0 descriptor?? [ 1191.576598][T15517] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1191.841714][T15517] FAULT_INJECTION: forcing a failure. [ 1191.841714][T15517] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.884570][T15517] CPU: 0 PID: 15517 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1191.893282][T15517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1191.903345][T15517] Call Trace: [ 1191.906684][T15517] dump_stack+0x188/0x20d [ 1191.911042][T15517] should_fail.cold+0x5/0xa [ 1191.915571][T15517] ? fault_create_debugfs_attr+0x140/0x140 [ 1191.921407][T15517] should_failslab+0x5/0xf [ 1191.925848][T15517] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1191.931326][T15517] ? mark_held_locks+0x9f/0xe0 [ 1191.936196][T15517] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1191.942025][T15517] dummy_urb_enqueue+0x82/0x8a0 [ 1191.946926][T15517] ? usb_hcd_map_urb_for_dma+0x4aa/0x14f0 [ 1191.952671][T15517] usb_hcd_submit_urb+0x2aa/0x1ee0 [ 1191.957801][T15517] ? snd_rawmidi_kernel_open+0x1b5/0x270 [ 1191.963547][T15517] ? usb_create_hcd+0x30/0x30 [ 1191.968261][T15517] ? __mutex_lock+0x458/0x13c0 [ 1191.973055][T15517] ? do_sys_open+0xc3/0x140 [ 1191.977565][T15517] ? substream_open.isra.0+0xab/0x830 [ 1191.982957][T15517] ? mutex_trylock+0x2c0/0x2c0 [ 1191.988336][T15517] usb_submit_urb+0x6e5/0x13b0 [ 1191.993108][T15517] ? down_read+0x110/0x420 [ 1191.997534][T15517] snd_usbmidi_submit_urb+0x19/0x60 [ 1192.002746][T15517] snd_usbmidi_input_start.part.0+0xbe/0x1c0 [ 1192.008751][T15517] substream_open.isra.0+0x505/0x830 [ 1192.014061][T15517] open_substream+0x42e/0x880 [ 1192.018759][T15517] rawmidi_open_priv+0x2e8/0x6e0 [ 1192.023718][T15517] snd_rawmidi_kernel_open+0x1b5/0x270 [ 1192.029224][T15517] midisynth_subscribe+0xf2/0x330 [ 1192.034523][T15517] ? midisynth_use+0x250/0x250 [ 1192.039305][T15517] ? down_write+0xdb/0x150 [ 1192.043735][T15517] ? __down_timeout+0x2d0/0x2d0 [ 1192.048718][T15517] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1192.054806][T15517] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 1192.060643][T15517] check_and_subscribe_port+0x5b5/0x800 [ 1192.066210][T15517] ? midisynth_use+0x250/0x250 [ 1192.071001][T15517] snd_seq_port_connect+0x2e4/0x510 [ 1192.076210][T15517] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 1192.082217][T15517] ? lockdep_hardirqs_on+0x463/0x620 [ 1192.087502][T15517] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1192.093035][T15517] snd_seq_oss_midi_open+0x3cb/0x640 [ 1192.098302][T15517] ? snd_seq_oss_midi_setup+0x50/0x50 [ 1192.103674][T15517] ? mark_held_locks+0x9f/0xe0 [ 1192.108460][T15517] ? get_mdev+0x75/0x90 [ 1192.112788][T15517] ? get_mididev.isra.0+0x76/0xa0 [ 1192.117812][T15517] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 1192.123693][T15517] snd_seq_oss_open+0x7fa/0x980 [ 1192.128531][T15517] odev_open+0x6c/0x90 [ 1192.132666][T15517] ? odev_release+0x70/0x70 [ 1192.137156][T15517] soundcore_open+0x446/0x600 [ 1192.141816][T15517] ? sound_devnode+0xf0/0xf0 [ 1192.146479][T15517] chrdev_open+0x219/0x5c0 [ 1192.150878][T15517] ? cdev_put.part.0+0x50/0x50 [ 1192.155624][T15517] ? security_file_open+0x84/0x410 [ 1192.160721][T15517] do_dentry_open+0x4ba/0x1290 [ 1192.165470][T15517] ? cdev_put.part.0+0x50/0x50 [ 1192.170235][T15517] ? security_inode_permission+0xc4/0xf0 [ 1192.175854][T15517] ? chown_common+0x550/0x550 [ 1192.180512][T15517] ? inode_permission+0xab/0x500 [ 1192.185470][T15517] path_openat+0x1e59/0x27d0 [ 1192.190063][T15517] ? path_lookupat.isra.0+0x530/0x530 [ 1192.195439][T15517] ? _kstrtoull+0x13f/0x1f0 [ 1192.199931][T15517] do_filp_open+0x192/0x260 [ 1192.204432][T15517] ? may_open_dev+0xf0/0xf0 [ 1192.208922][T15517] ? do_raw_spin_lock+0x129/0x2e0 [ 1192.213939][T15517] ? _raw_spin_unlock+0x24/0x40 [ 1192.218795][T15517] ? __alloc_fd+0x46d/0x600 [ 1192.223284][T15517] do_sys_openat2+0x585/0x7d0 [ 1192.228075][T15517] ? file_open_root+0x400/0x400 [ 1192.232912][T15517] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1192.238530][T15517] ? wait_for_completion+0x270/0x270 [ 1192.243827][T15517] ? __this_cpu_preempt_check+0x28/0x190 [ 1192.249471][T15517] ? __sb_end_write+0x101/0x1d0 [ 1192.254393][T15517] do_sys_open+0xc3/0x140 [ 1192.258722][T15517] ? filp_open+0x70/0x70 [ 1192.262942][T15517] ? ksys_write+0x1a5/0x250 [ 1192.267449][T15517] ? __ia32_sys_clock_settime+0x260/0x260 [ 1192.273149][T15517] ? trace_hardirqs_off_caller+0x55/0x230 [ 1192.278859][T15517] do_syscall_64+0xf6/0x7d0 [ 1192.283354][T15517] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1192.289246][T15517] RIP: 0033:0x45ca69 [ 1192.293124][T15517] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1192.312727][T15517] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1192.321141][T15517] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1192.329134][T15517] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1192.337109][T15517] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1192.345079][T15517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1192.353031][T15517] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1192.364566][T15517] usb 6-1: usb_submit_urb: -12 [ 1192.370306][T15517] ------------[ cut here ]------------ [ 1192.376197][T15517] URB 00000000b2055a25 submitted while active [ 1192.383228][T15517] WARNING: CPU: 0 PID: 15517 at drivers/usb/core/urb.c:363 usb_submit_urb+0x10c1/0x13b0 [ 1192.392959][T15517] Kernel panic - not syncing: panic_on_warn set ... [ 1192.399651][T15517] CPU: 0 PID: 15517 Comm: syz-executor.5 Not tainted 5.7.0-rc7-syzkaller #0 [ 1192.408325][T15517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1192.418400][T15517] Call Trace: [ 1192.421733][T15517] dump_stack+0x188/0x20d [ 1192.426107][T15517] ? usb_submit_urb+0xff0/0x13b0 [ 1192.431581][T15517] panic+0x2e3/0x75c [ 1192.435491][T15517] ? add_taint.cold+0x16/0x16 [ 1192.440192][T15517] ? __probe_kernel_read+0x188/0x1d0 [ 1192.445465][T15517] ? __warn.cold+0x14/0x35 [ 1192.449870][T15517] ? usb_submit_urb+0x10c1/0x13b0 [ 1192.454889][T15517] __warn.cold+0x2f/0x35 [ 1192.459115][T15517] ? usb_submit_urb+0x10c1/0x13b0 [ 1192.464131][T15517] report_bug+0x27b/0x2f0 [ 1192.468467][T15517] do_error_trap+0x12b/0x220 [ 1192.473040][T15517] ? usb_submit_urb+0x10c1/0x13b0 [ 1192.478049][T15517] do_invalid_op+0x32/0x40 [ 1192.482468][T15517] ? usb_submit_urb+0x10c1/0x13b0 [ 1192.487478][T15517] invalid_op+0x23/0x30 [ 1192.491636][T15517] RIP: 0010:usb_submit_urb+0x10c1/0x13b0 [ 1192.497264][T15517] Code: 89 de e8 32 54 6a fc 84 db 0f 85 42 f6 ff ff e8 f5 52 6a fc 4c 89 fe 48 c7 c7 60 46 ab 88 c6 05 22 f3 7b 05 01 e8 b7 82 3b fc <0f> 0b e9 20 f6 ff ff c7 44 24 14 01 00 00 00 e9 d7 f6 ff ff 41 bd [ 1192.516848][T15517] RSP: 0018:ffffc900056272c8 EFLAGS: 00010282 [ 1192.522893][T15517] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1192.530864][T15517] RDX: 0000000000040000 RSI: ffffffff815cf161 RDI: fffff52000ac4e4b [ 1192.538823][T15517] RBP: dffffc0000000000 R08: ffff8880387d4180 R09: ffffed1015cc66a9 [ 1192.546776][T15517] R10: ffff8880ae633547 R11: ffffed1015cc66a8 R12: 0000000000000cc0 [ 1192.554760][T15517] R13: 00000000fffffff0 R14: ffff888092eab400 R15: ffff88809f2d6c00 [ 1192.562785][T15517] ? vprintk_func+0x81/0x17e [ 1192.567369][T15517] ? usb_submit_urb+0x10c1/0x13b0 [ 1192.572386][T15517] snd_usbmidi_submit_urb+0x19/0x60 [ 1192.577585][T15517] snd_usbmidi_input_start.part.0+0xbe/0x1c0 [ 1192.583556][T15517] substream_open.isra.0+0x505/0x830 [ 1192.588844][T15517] open_substream+0x42e/0x880 [ 1192.593535][T15517] rawmidi_open_priv+0x2e8/0x6e0 [ 1192.598523][T15517] snd_rawmidi_kernel_open+0x1b5/0x270 [ 1192.604113][T15517] midisynth_subscribe+0xf2/0x330 [ 1192.609215][T15517] ? midisynth_use+0x250/0x250 [ 1192.613966][T15517] ? down_write+0xdb/0x150 [ 1192.618370][T15517] ? __down_timeout+0x2d0/0x2d0 [ 1192.623224][T15517] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1192.629184][T15517] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 1192.634996][T15517] check_and_subscribe_port+0x5b5/0x800 [ 1192.640557][T15517] ? midisynth_use+0x250/0x250 [ 1192.645303][T15517] snd_seq_port_connect+0x2e4/0x510 [ 1192.650490][T15517] snd_seq_ioctl_subscribe_port+0x1df/0x310 [ 1192.656363][T15517] ? lockdep_hardirqs_on+0x463/0x620 [ 1192.661642][T15517] snd_seq_kernel_client_ctl+0xeb/0x130 [ 1192.667189][T15517] snd_seq_oss_midi_open+0x3cb/0x640 [ 1192.672475][T15517] ? snd_seq_oss_midi_setup+0x50/0x50 [ 1192.677866][T15517] ? mark_held_locks+0x9f/0xe0 [ 1192.682627][T15517] ? get_mdev+0x75/0x90 [ 1192.686787][T15517] ? get_mididev.isra.0+0x76/0xa0 [ 1192.692321][T15517] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 1192.698821][T15517] snd_seq_oss_open+0x7fa/0x980 [ 1192.703677][T15517] odev_open+0x6c/0x90 [ 1192.707725][T15517] ? odev_release+0x70/0x70 [ 1192.712222][T15517] soundcore_open+0x446/0x600 [ 1192.717495][T15517] ? sound_devnode+0xf0/0xf0 [ 1192.722080][T15517] chrdev_open+0x219/0x5c0 [ 1192.726478][T15517] ? cdev_put.part.0+0x50/0x50 [ 1192.731242][T15517] ? security_file_open+0x84/0x410 [ 1192.736565][T15517] do_dentry_open+0x4ba/0x1290 [ 1192.741314][T15517] ? cdev_put.part.0+0x50/0x50 [ 1192.746434][T15517] ? security_inode_permission+0xc4/0xf0 [ 1192.752189][T15517] ? chown_common+0x550/0x550 [ 1192.756940][T15517] ? inode_permission+0xab/0x500 [ 1192.761941][T15517] path_openat+0x1e59/0x27d0 [ 1192.766645][T15517] ? path_lookupat.isra.0+0x530/0x530 [ 1192.772218][T15517] ? _kstrtoull+0x13f/0x1f0 [ 1192.776710][T15517] do_filp_open+0x192/0x260 [ 1192.781199][T15517] ? may_open_dev+0xf0/0xf0 [ 1192.785707][T15517] ? do_raw_spin_lock+0x129/0x2e0 [ 1192.790733][T15517] ? _raw_spin_unlock+0x24/0x40 [ 1192.795604][T15517] ? __alloc_fd+0x46d/0x600 [ 1192.800102][T15517] do_sys_openat2+0x585/0x7d0 [ 1192.804778][T15517] ? file_open_root+0x400/0x400 [ 1192.809610][T15517] ? __mutex_unlock_slowpath+0xe2/0x660 [ 1192.815135][T15517] ? wait_for_completion+0x270/0x270 [ 1192.820401][T15517] ? __this_cpu_preempt_check+0x28/0x190 [ 1192.826022][T15517] ? __sb_end_write+0x101/0x1d0 [ 1192.830866][T15517] do_sys_open+0xc3/0x140 [ 1192.835206][T15517] ? filp_open+0x70/0x70 [ 1192.839435][T15517] ? ksys_write+0x1a5/0x250 [ 1192.843937][T15517] ? __ia32_sys_clock_settime+0x260/0x260 [ 1192.849652][T15517] ? trace_hardirqs_off_caller+0x55/0x230 [ 1192.855375][T15517] do_syscall_64+0xf6/0x7d0 [ 1192.859862][T15517] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1192.865732][T15517] RIP: 0033:0x45ca69 [ 1192.869604][T15517] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1192.889202][T15517] RSP: 002b:00007f032cf75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1192.897618][T15517] RAX: ffffffffffffffda RBX: 00000000004f8580 RCX: 000000000045ca69 [ 1192.905782][T15517] RDX: 000000000000c006 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1192.913750][T15517] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1192.921719][T15517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1192.929677][T15517] R13: 00000000000007dc R14: 00000000004cab2a R15: 00007f032cf766d4 [ 1192.939522][T15517] Kernel Offset: disabled [ 1192.944034][T15517] Rebooting in 86400 seconds..