[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 74.341008][ T31] audit: type=1800 audit(1570598130.387:25): pid=11146 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 74.364542][ T31] audit: type=1800 audit(1570598130.417:26): pid=11146 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 74.399362][ T31] audit: type=1800 audit(1570598130.437:27): pid=11146 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.244' (ECDSA) to the list of known hosts. 2019/10/09 05:15:44 fuzzer started 2019/10/09 05:15:48 dialing manager at 10.128.0.26:43589 2019/10/09 05:15:48 syscalls: 2412 2019/10/09 05:15:48 code coverage: enabled 2019/10/09 05:15:48 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/10/09 05:15:48 extra coverage: enabled 2019/10/09 05:15:48 setuid sandbox: enabled 2019/10/09 05:15:48 namespace sandbox: enabled 2019/10/09 05:15:48 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/09 05:15:48 fault injection: enabled 2019/10/09 05:15:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/09 05:15:48 net packet injection: enabled 2019/10/09 05:15:48 net device setup: enabled 2019/10/09 05:15:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 05:19:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x50}}, 0x0) syzkaller login: [ 313.241088][T11314] IPVS: ftp: loaded support on port[0] = 21 [ 313.374809][T11314] chnl_net:caif_netlink_parms(): no params data found [ 313.444159][T11314] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.451366][T11314] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.460205][T11314] device bridge_slave_0 entered promiscuous mode [ 313.470007][T11314] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.477308][T11314] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.485978][T11314] device bridge_slave_1 entered promiscuous mode [ 313.516534][T11314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.529460][T11314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.560449][T11314] team0: Port device team_slave_0 added [ 313.569547][T11314] team0: Port device team_slave_1 added [ 313.666553][T11314] device hsr_slave_0 entered promiscuous mode [ 313.721225][T11314] device hsr_slave_1 entered promiscuous mode [ 313.881737][T11314] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.888954][T11314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.896715][T11314] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.903961][T11314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.981921][T11314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.001212][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.014562][ T3364] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.025494][ T3364] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.037215][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 314.055587][T11314] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.072747][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.081815][ T3364] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.089041][ T3364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.146805][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 314.156380][ T3364] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.163607][ T3364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.173832][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 314.183758][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 314.193102][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 314.202174][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 314.215967][T11314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 314.248367][T11314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.286058][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 05:19:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000100)='dev\x00\xcbh\x80\x87\x1d\xf6\xbe\x8f^K;\xf0z|x}\xdb\xc7\xc2\x1c(\x05\x91\x1f\v\x87(\xe8vB\x87\xb7U\rhI\xb3p\xc2\xd8\x809\xbex\xee\x97e\xe9\x93\x85\xe4\xc6g\xcb\xed\xeak\xdb\x96%zx\xed2m\xe7\xdbK\x93\xc7\x96BL\xe9\xeb\xb5F\xc7\x85\x9cwe\xf8\xb4\xcd}\xf5\x89W\xf9\"\xf8\xba\xfc;#\xa7\x18\xa1\n\xd3\x9e\xd9\xbfO\xff\x00\xc8=\xb9A\xd69\xf6\xca\x80\r\xe9\x01\x88H\xa9\xf4\x05\x00\x00\x9b\xa0\xb7\x1e\x1bp\xe1 \xaf\xae\xb7\xade;\xab\x19:TU\xf9\xe8W\xf9\xc0|\xc6\x03\x05$\xe2w\xbc.\x17\x03\x91\xaf\xca\xe9\x95\x82\x7f\x03|\xe4\x0fhT\x9a\a\x92o\x98\'\x84\xedP\x98\xbf@zo\xb1f\x9d\xef\f\xc3\x8dp,\'\xad\x14\x1e\t\a\xfa+q\xd8\x1f\xf10#\xc3\xf6\xdf\xf0\'Fl@\x00\x00\x00\xbd\x01\xd6\xd0\xa4w^c\xde\xe1\nx\xb9&\x12\xf4\v1\xd6R+\xca\x9e\x9e5\xdf\x81U\xd5pT\xdaK?\xc2o\xceW\xf5iK\x03\x9f\x9c\x9fh\xe1]~\xab\x05\xb5\xa7T\x9cQ\x1a\x84\xbb\xbe\xec\xb2&D\x81\x81\x8f\xbe\x1eG 4i\x81\xb6\xbb\x1d\x9d0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000001c0)='-selinux\x00'}, 0x30) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) dup(r13) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffed8, 0x20, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x48d, 0x20, 0x0, 0xfffffffffffffdbe) kcmp(r4, r5, 0x1, r7, r9) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffff621, 0x1) ftruncate(r0, 0x48280) r14 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x2, 0x2}}]}}]}, 0x48}}, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x3e72e5090da2f5ab) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, r6}, 0x14) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) sched_setattr(r7, &(0x7f00000002c0)={0x30, 0x6, 0x0, 0xfffffffa, 0x1, 0x9, 0x0, 0x9}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)=@bridge_getneigh={0x28, 0x1e, 0xb1a8d53efdd38381, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 05:19:33 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0xfc8c521745a34d5c}) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) write$vnet(r1, &(0x7f0000001180)={0x1, {&(0x7f00000000c0)=""/4096, 0x1000, &(0x7f00000010c0)=""/146, 0x1, 0x2}}, 0x68) r2 = syz_open_dev$vbi(&(0x7f0000001200)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000001240)={0x1000, 0x1000, 0x1, "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"}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000002280)='/dev/full\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000022c0), &(0x7f0000002300)=0xb) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002340)='/dev/hwrng\x00', 0x40000, 0x0) write$FUSE_LSEEK(r4, &(0x7f0000002380)={0x18, 0x0, 0x8, {0x3}}, 0x18) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000023c0)='/dev/null\x00', 0x20100, 0x0) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f0000002400)={0x4, 0x2, 0xfff}) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000002440)={0x1, 0x100}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r7, &(0x7f00000024c0)=@abs, &(0x7f0000002540)=0x6e) r8 = syz_open_dev$dmmidi(&(0x7f0000002580)='/dev/dmmidi#\x00', 0x3230, 0x600) ioctl$RNDCLEARPOOL(r8, 0x5206, &(0x7f00000025c0)=0x4) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r5, 0xc0305615, &(0x7f0000002600)={0x0, {0x1, 0x8000}}) ioctl$VHOST_SET_VRING_ENDIAN(r6, 0x4008af13, &(0x7f0000002640)={0x1}) ioctl$VIDIOC_S_JPEGCOMP(r6, 0x408c563e, &(0x7f0000002680)={0x0, 0x9, 0x10, "51e050d6e0df0efccae06048d279317f6006b548a6a52b5db6c25e65bcdd3e26af970e439cfeb668b8ff14847d9ea70842cd5c7a89d5051fe3cf2d67", 0x19, "ab5ad340abd73baedd93859d8f98513d4f3795710255175b68cd7fa32bd6cb568a03c88f33ae2ddffbb503e132a13a4c8b7de5033e096a3b7bad64a3", 0xa0}) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002740)='/dev/sequencer\x00', 0x800, 0x0) ioctl$VIDIOC_STREAMOFF(r9, 0x40045613, &(0x7f0000002780)=0x9) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/vga_arbiter\x00', 0x28080, 0x0) ioctl$HIDIOCGFLAG(r10, 0x8004480e, &(0x7f0000002800)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r9, 0xc0096616, &(0x7f0000002840)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r11 = syz_open_dev$adsp(&(0x7f0000002880)='/dev/adsp#\x00', 0x1, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r11, 0x800442d3, &(0x7f00000028c0)={0x7fff, 0xff, 0x2, @local, 'bcsf0\x00'}) r12 = syz_open_dev$midi(&(0x7f0000002900)='/dev/midi#\x00', 0x1ff, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r12, 0xc0845658, &(0x7f0000002940)={0x0, @reserved}) [ 317.999479][T11351] IPVS: ftp: loaded support on port[0] = 21 [ 318.134768][T11351] chnl_net:caif_netlink_parms(): no params data found [ 318.189594][T11351] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.196918][T11351] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.206011][T11351] device bridge_slave_0 entered promiscuous mode [ 318.216174][T11351] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.223645][T11351] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.232383][T11351] device bridge_slave_1 entered promiscuous mode [ 318.284997][T11351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.325939][T11351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.379212][T11351] team0: Port device team_slave_0 added [ 318.409188][T11351] team0: Port device team_slave_1 added 05:19:34 executing program 0: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000280)='net/ip_vs\x00') ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x800}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000300)={r2, 0x5}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1) sendfile(r4, r4, &(0x7f00000001c0), 0x8080fffffffe) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) r6 = creat(&(0x7f0000001c00)='./bus\x00', 0x0) r7 = socket(0x2, 0x803, 0xff) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000000)={0x0, 0xd854}, 0x8) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) accept4$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14, 0x800) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000200)={@ipv4={[], [], @rand_addr=0x5}, @empty, @ipv4={[], [], @broadcast}, 0x6, 0x2, 0xff, 0x0, 0x4, 0x100, r10}) r11 = dup(r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r6, 0x800fe) sendfile(r11, r12, 0x0, 0x8000fffffffe) [ 318.517109][T11351] device hsr_slave_0 entered promiscuous mode [ 318.553050][T11351] device hsr_slave_1 entered promiscuous mode [ 318.592514][T11351] debugfs: Directory 'hsr0' with parent '/' already present! [ 318.624471][T11351] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.632006][T11351] bridge0: port 2(bridge_slave_1) entered forwarding state 05:19:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x207) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_tcp_int(r4, 0x6, 0x24, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86!\v>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:\x99:g\x1c\xca\xa3{]\xb1\xb2\xab\xb9\v\xac\x86V\xae#\xc3),+\xe4\xf5/]k\xf9\xe8b+z\rL\x1a\xae)B\x1a\xd1\x9f\v_\xb2\xc92\xeaV\x11\x15\xde\v\x112\xd29\xb3\xe9~/v\xf3\vG\xa8]?y\xabS\xc5\xc3iP\x7f\xac\xfa\xcd\x9eb\xcc=M\xee\xd8\xf4\x1e\xff\x01\x87[;f\x0f\xe7}\x17\xc3\\r\x14H\x9a^c\xfc\x97\xd5\xb6f7#\xad\xf1\xf5M\xee\xd3+\xd6l\xe6\xbdV\x00\x1b\xaa\x99\xcc\xcc}\xbb\x85\xd4?\r\xdb\xbf\xd2j\xae\xf3W\xb5\x02 \xb9o\xce\x80\x1a8G\x8e\xd3\xb5\xa1\x12\xc0\x94\x9b\x15\x96M \xdd7\xca\xc4{\xbbQ\xb5\xeb%:!\xda&\xd4\xd2\x1c\xbe\xbaf4P\xf7\x84\x99\xbe`t\x1c!\xa2\xb3\"$\x06\xc8\x9e1\xe5@}\x00\x00\x00\x00\x00') [ 318.639718][T11351] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.647372][T11351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.807214][T11351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.921056][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.943521][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.954424][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.966793][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 318.985217][T11351] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.118451][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.127477][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.134734][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.143495][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.152540][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.160774][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state 05:19:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x2200) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000040)) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @local}, 0xc) prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x10, 0x4000030, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000600)={'hsr0\x00', 0x1202}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f0000000100)=0x40, &(0x7f00000005c0)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'syz_tun\x00', 0x2000000000000001}) [ 319.255075][T11351] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 319.266154][T11351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.301270][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 319.311526][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 319.321528][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 319.331306][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.340792][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 319.350549][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 319.359979][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 319.369177][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.378677][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 319.387776][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 319.399191][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 319.407791][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 05:19:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x200000, 0x4) [ 319.473337][T11351] 8021q: adding VLAN 0 to HW filter on device batadv0 05:19:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x200000, 0x4) 05:19:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x200000, 0x4) 05:19:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x200000, 0x4) 05:19:35 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb5, 0x45, 0x6b, 0x8, 0x10c4, 0x818a, 0xef8a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x82, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000005140)={0xac, &(0x7f0000004b40)={0x0, 0x0, 0x3, "c96e2a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r4, 0x6f8}, 0x8) 05:19:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) [ 320.223849][ T3364] usb 2-1: new high-speed USB device number 2 using dummy_hcd 05:19:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) [ 320.463665][ T3364] usb 2-1: Using ep0 maxpacket: 8 05:19:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) [ 320.582294][ T3364] usb 2-1: config 0 has an invalid interface number: 130 but max is 0 [ 320.590708][ T3364] usb 2-1: config 0 has no interface number 0 [ 320.597078][ T3364] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=ef.8a [ 320.606401][ T3364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 05:19:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) [ 320.640462][ T3364] usb 2-1: config 0 descriptor?? [ 320.687246][ T3364] radio-si470x 2-1:0.130: could not find interrupt in endpoint [ 320.695120][ T3364] radio-si470x: probe of 2-1:0.130 failed with error -5 05:19:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) [ 320.903078][ T3364] radio-raremono 2-1:0.130: Thanko's Raremono connected: (10C4:818A) [ 321.162505][ T3364] radio-raremono 2-1:0.130: raremono_cmd_main failed (-71) [ 321.182705][ T3364] radio-raremono 2-1:0.130: V4L2 device registered as radio32 [ 321.202902][ T3364] usb 2-1: USB disconnect, device number 2 [ 321.209113][ T3364] radio-raremono 2-1:0.130: Thanko's Raremono disconnected [ 321.931909][ T30] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 322.171870][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 322.302668][ T30] usb 2-1: config 0 has an invalid interface number: 130 but max is 0 [ 322.310953][ T30] usb 2-1: config 0 has no interface number 0 [ 322.317261][ T30] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=ef.8a [ 322.326544][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.338287][ T30] usb 2-1: config 0 descriptor?? [ 322.388005][ T30] radio-si470x 2-1:0.130: could not find interrupt in endpoint [ 322.395890][ T30] radio-si470x: probe of 2-1:0.130 failed with error -5 [ 322.602688][ T30] radio-raremono 2-1:0.130: Thanko's Raremono connected: (10C4:818A) [ 322.622669][ T30] radio-raremono 2-1:0.130: raremono_cmd_main failed (-71) [ 322.631590][ T30] radio-raremono 2-1:0.130: V4L2 device registered as radio32 [ 322.652832][ T30] usb 2-1: USB disconnect, device number 3 [ 322.659106][ T30] radio-raremono 2-1:0.130: Thanko's Raremono disconnected 05:19:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xc, &(0x7f0000000080), 0xb7) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) sendmsg$kcm(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1b0000005a000b000000d4126e00002ddb00000007000000000000", 0x1b}], 0x1}, 0x0) 05:19:38 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:38 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000040)) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x410100, 0x10) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000000c0)=0x100000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000100)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x5, 0x77eda607129232a4) setsockopt$inet6_dccp_int(r2, 0x21, 0x4, &(0x7f0000000180)=0x92, 0x4) r3 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x220, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xd8, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x7, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4b9}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bcsh0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x12}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x308}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x220}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r5 = syz_open_procfs(0x0, &(0x7f0000000540)='attr/prev\x00') setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000580)=0x27, 0x4) r6 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f00000005c0)=0x4, 0x4) r7 = syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SIOCGSTAMP(r7, 0x8906, &(0x7f0000000640)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e24, 0xecce, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}, 0x9, 0x2}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000780)={r8, 0x4}, 0xc) r9 = socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_SETFSLABEL(r9, 0x41009432, &(0x7f00000007c0)="df3bb76c8b4edb712e4dfbf469ef29ab97096a0f5da76a1546476f5e918b0e990121d5f2307c18bbc91766c6bdf2f8bf56d46c92e0e0f5ea49cda728c8c1ba408d4a5c0f16b8e0c8bdec18f629c70463e1f2c03500d467899bd5454b1e80113c62a30dfa3771a51523490365781c0c845266e5d63e4427724c44c29b428ef7781c0c8b4193312cb2fd5c5e59f7239270759c077baaeb8e0379faea8192f1d600a38deb69428980d00e0810a6edd1b4ac43e26fb0d779963b302344b747fc98c552c9e95bb21794525f91b67a5fe58615f3dd1469ecb01d300b2748386abfed6c9a537c88dda002170bc6db0c44a8081bd5f727258a39a79f16454dbc9a0da016") pipe2(&(0x7f0000005580)={0xffffffffffffffff}, 0x80800) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000055c0)={0x0, 0x7ff, 0x7, 0x3f}, &(0x7f0000005600)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000005640)={r11, @in6={{0xa, 0x4e21, 0xffffff2c, @remote, 0x6}}, 0x6, 0x1000, 0x3f, 0x2}, 0x98) pipe(&(0x7f0000005700)={0xffffffffffffffff}) sendto$inet6(r12, &(0x7f0000005740)="a97650d33a2db1d49b941b03f5b00e446ff23ad8d9f6bff2fcefbef8f9dbef56e2169efff5f52beeabb9d466d810d5287b4a683ed0ca81214a76acd6ef05af1e528a23a40f3be198f07afa799a3a8995775eeaeffb986847b272ebe9f08796cc0026c720e8bac09262879f96611dd1278ad853d440b81eebe3859559a396dca4aac25ceffacb6f5cd51a5bb7d085e4e12a0df82ee08e870249d1c47ff6d7f353501e30f6b360f4aaeb7f6dd5eea9fd5227ea0f71085667e7ce8cb0e854e63f80be825d16267f3b1463a5242b52690da3d5fa05", 0xd3, 0x8000, 0x0, 0x0) syz_open_dev$dspn(&(0x7f0000005840)='/dev/dsp#\x00', 0x80000000, 0x0) readahead(r10, 0x2, 0x1) sendmsg$inet6(r12, &(0x7f0000005940)={&(0x7f0000005880)={0xa, 0x4e24, 0x4, @ipv4={[], [], @broadcast}, 0x1}, 0x1c, &(0x7f00000058c0), 0x0, &(0x7f0000005900)=[@hoplimit={{0x14, 0x29, 0x34, 0x9}}], 0x18}, 0x20000002) r13 = openat$mixer(0xffffffffffffff9c, &(0x7f0000005980)='/dev/mixer\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r13, 0x84, 0x77, &(0x7f00000059c0)={r11, 0xfffe, 0x9, [0x579, 0x8db5, 0xd2, 0x3, 0x40, 0x1000, 0x81, 0x8, 0xffff]}, &(0x7f0000005a00)=0x1a) 05:19:39 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:39 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:39 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:39 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:39 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:39 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:39 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:39 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:39 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) [ 323.671848][T11466] IPVS: ftp: loaded support on port[0] = 21 05:19:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) [ 323.958659][T11466] chnl_net:caif_netlink_parms(): no params data found [ 324.048252][T11466] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.055570][T11466] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.064294][T11466] device bridge_slave_0 entered promiscuous mode [ 324.075811][T11466] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.083120][T11466] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.092102][T11466] device bridge_slave_1 entered promiscuous mode [ 324.128793][T11466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.141544][T11466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.173908][T11466] team0: Port device team_slave_0 added [ 324.183380][T11466] team0: Port device team_slave_1 added [ 324.356376][T11466] device hsr_slave_0 entered promiscuous mode [ 324.612682][T11466] device hsr_slave_1 entered promiscuous mode [ 324.741930][T11466] debugfs: Directory 'hsr0' with parent '/' already present! [ 324.770921][T11466] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.778210][T11466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.786274][T11466] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.793485][T11466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.876045][T11466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.897979][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.909291][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.921363][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.937338][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 324.957231][T11466] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.970080][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 324.979757][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.988718][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.995898][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.045223][T11466] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.056617][T11466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.073979][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.083374][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.092333][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.099489][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.108711][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 325.118653][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 325.128515][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 325.138285][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 325.147759][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 325.157535][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 325.167037][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 325.176189][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.185759][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 325.195067][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.210087][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 325.218795][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 325.248807][T11466] 8021q: adding VLAN 0 to HW filter on device batadv0 05:19:41 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:41 executing program 2: syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x20080, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}}, 0xa0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xfe, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r7) close(r7) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x40000, 0x0) r12 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000400)={r11, 0x1, 0x0, r12}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r10, 0xc0045540, &(0x7f00000002c0)=0x3d) r13 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r13, 0x40046207, 0x0) 05:19:41 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) dup(r0) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) [ 325.815934][T11503] Unknown ioctl 1074025778 [ 325.862242][T11503] Unknown ioctl 1075883638 05:19:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:42 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) dup(r0) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:42 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) dup(r0) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000080)={0x79, 0x7d, 0x1, {0x0, 0x72, 0x9, 0x81, {0x1, 0x1, 0x6}, 0x3010000, 0x101, 0x7f, 0x20, 0x7, 'bridge\x00', 0x7, 'bridge\x00', 0x7, 'bridge\x00', 0x2a, 'mime_type@}eth0wlan0cgroup&md5sum\\md5sum\x9a='}}, 0x79) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000480)={0x4, &(0x7f0000000340)=[{}, {}, {}, {}]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x1, 0x1ee, [0x0, 0x20000140, 0x200002ce, 0x200002fe], 0x0, &(0x7f0000000100), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfcb893efe20c1966, 0x1, [{0x3, 0x41, 0x892f, 'veth0_to_bridge\x00', 'ip6gre0\x00', 'syz_tun\x00', 'bridge_slave_0\x00', @broadcast, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @dev={[], 0x20}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0xde, 0x10e, 0x15e, [@pkttype={'pkttype\x00', 0x8, {{0x6}}}, @statistic={'statistic\x00', 0x18, {{0x0, 0x1, 0x7b01, 0x4, 0xfffffbff, 0x7b}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x400}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x6, 0x400000000000}}}}]}, {0x0, '\x00', 0x1, 0x7ffffffffffffffd}, {0x0, '\x00', 0x1, 0x7ffffffffffffffe}]}, 0x266) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_NF_CALL_IP6TABLES={0x8}, @IFLA_BR_NF_CALL_ARPTABLES={0x8}]}}}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKBSZGET(r4, 0x80081270, &(0x7f00000004c0)) 05:19:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:42 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) [ 326.608659][T11548] netlink: 'syz-executor.2': attribute type 37 has an invalid length. [ 326.617232][T11548] netlink: 'syz-executor.2': attribute type 38 has an invalid length. [ 326.680532][T11548] netlink: 'syz-executor.2': attribute type 37 has an invalid length. [ 326.689085][T11548] netlink: 'syz-executor.2': attribute type 38 has an invalid length. 05:19:42 executing program 2: r0 = socket(0x10, 0x80002, 0x0) bind(r0, &(0x7f0000000b00)=@generic={0x5, "c60e0f0f520be519d52c1107a49ea9518a2d6944831af0cbe30a9546467b57e0efdec6c347810d210f4d409723c257a0980ff81c27ec0f0447c791bfb4c023a0ff592f73dd17ab6a6a0c6d58554f84d829ca37898c6ce4b9155b7bad4204c986a5a62e46cad1bbc1566cc5a2436ac9c3eae04bf08ca3e23281265833b41e"}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="7400000064000b0500000000000000edffffff00", @ANYRES32, @ANYBLOB="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"], 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000002180)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="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", 0xfe}], 0x1, &(0x7f0000000280)=[@iv={0xd0, 0x117, 0x2, 0xb9, "7465c8f95b309295223155bc4a179a3463ad1b14c5f729079a8c093252d4bcb39c58d3d3541ddd9887f86c32aa2d61e7f480c3610414686033b40d7fb2b6b3c85d18f2bcad1ceb9ecd900452afafd63e2dfb1ae6f9ad786794eb9891182a5b9aec9406c5246e0960d8e690a7e938ada0b11439944aa5d4a9c5505997c0c56690f33447131ac1469aebd4d5731908fd3a324b91f64c39d65e21c3fefc11765c81101c743d3599d33bf870b5b667436ee5daba703cf9eefcb805"}, @assoc={0x18, 0x117, 0x4, 0x8}], 0xe8, 0x10}, {0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="944147763d8bb2e1aec7985fc15f546c85af018b9846280826044a6ceab1656b607fc6fca3bdbe985b735265fa1f6b333a537be79b4576cc56143e457402c45ba78f6eee9fc20892eabcc801f321ce60afcb7fb8f78868ebf525cd5220d293800cc95c264fa45f5f814ab2de5194ad8f14865b1671cb50020a6c61d09a67551f78cd0ee10ae22a265b34c6f70b5b830da5cb8ea243fe2be486f9da9f8eb3174518d40a8c1416e71060e9757e211e0b0415eee9fac568d93cc481170b896360b3368299ad29fb7f376ce7315ce9299d2341d03c824c", 0xd5}, {&(0x7f0000000480)="d19e931f5d3180ba6bac86866036f5a73b50b4b0118564c94e12b06e2c09ef4f434d331f295cb4c11d7cf4025fcff0d4eaaee5af1eaa4d0d7efe08b9a3b05a005d47d811f4205b9e5712d1dde990fabd71c374387630ec5ff6094854b41a1583a7e40444296262ba889ee194b3", 0x6d}], 0x2, &(0x7f0000000500)=[@iv={0x78, 0x117, 0x2, 0x62, "2d2648504c3b0e0ca0b57030734da6c9326ff006e1eeb4a58a0fb78714cb4d8aa95833208aaaee4fb5e73a9ff0639b73be90b14940348a8d8cc5e34fe2b1c768bdc38d1445d34204f3c9cc9b9f8b232d22279df0a53efa87d9badd328f91a20d9f97"}], 0x78}, {0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000940)=[@assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x118, 0x117, 0x2, 0xfe, "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"}, @assoc={0x18, 0x117, 0x4, 0xe9e2}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x401}, @op={0x18, 0x117, 0x3, 0x1}], 0x190, 0x800}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)="0b2e8e031e111655ae39fce26d3743e767ea5d07ca53438b1340e41bb1e9af8f51b498cc", 0x24}, {&(0x7f0000002300)="c036f72a1ffa2b99d97e0280166e227a886be125b13dfbab243cb047fccccb3a8eab290e8886091fd6be27ee0ebd2be00f9c57ca84ea29e8dd6f1849ed4d5a8f96122f3512baf77f1aecb88772433d70374a5be7e739e49d35ac09bb8e950007b0e59f1a129be2953c28fb8668af2613f7faabec62b59e62ce29cecaf631718c4d31a4471c958a52c49f0d89297ade68fa2ad040b76d23754325c6cb95b7f5591d332510d424cae1e1e614e645ac2b2586", 0xb1}, {&(0x7f0000000bc0)="d7ec541648c237ea3793763f084d6192b6e2b5cae32f90a0b093e641daa3c0a889c156a6e45d75ae5ada21a4db1c0a97bae47f6569eed7c92e8f423f397d4c2aa22167be1ca1441dec98", 0x4a}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000c40)="0bef227e1c3566887c5c34aebd1c7c4c2d00a5514ed3f60597a85da6b91981fdf7881973244c2b6f180780f17a3ccc2d0b08e16b4977a9b06ddc72f0e029ed66878d2be92b28907068b52d1472c399b01ac1c66229d6c01feffc486261f9b0f852fc71699f97c7c107214ae453f5ef54b7fec8e612b59f653941c42a69c40bae44226fe1d5d01773361f7a102cec424a015cc20c796693fe662d50eba85fa070af0fdf701db8b9bc4dea3743f462a7502c0d4d66c5809231b0175a6fd668dd945419fbf7984fa931b3640b0014c052a0be57d5649a134ae7afb89fa52d1e71c8cfb799265550ca2e829ba4f3538f26b0081ec1364f89e3675f7d734aca13df1a3e7fc40c45a1f8618f554e03c2121c1c460daf52caea507897daa5c27ad77515de8c78ceab89f14f821a1c6fe3198fa60925171d923663811e5203635eb17fb494f565e8359cba35c3aec08ea2c9d87cb83c26f81bf6da51a660e04d0f9e5c722f1c41dcd14b51488bd122f99f5da4d43402446e366bd1556d3130d26b5d14c612deecd6a43d95ae01900c481493ade81d5d6c5c2e3060ad8666558dca236c5c37bae43450b6d7ca48c21537258cfcd51cb8cb6e051dc069a2ec054adfd7f8e3782793b516eb94892c5c03bc2475cbabbd23e3f1280adcf76258ac28969e121740cbe0fede787b441280f856125093b5ee95822edd4aa9e861a8ab79181e7107961d0406e37baf69fd71c74b371e2a28dd7569fc9fbce001aef1e704e678dd004bd7ad5fe6b02b2b1c58832f83d17e5972543bd3a9cc2ecd6b8db2d754637ef895e1ef45acd4759cfe6b7da584c6709c56d9125281a2fe9e588ea9577c76bae46cdaba422d817f56addb0f9e698ceb8a73d56e8fb0c751e8f0e977db12205a9c5d4e7668bb61daea5ced22aa0f388b1fcef44a354e4ded038a7480ec7201fa347649479785bfa0c863b47bc85063d4861dfd1c0d0a10d6c6c791247631d5844fd28e226a06ccdfc88becd1583fcf2bafe1400ea56ab551cecaf0866d812f2310ce2d04b9c23f7d1316dd68d814d8e9147402d859647177e272626ca1b6b2c043c4cd059fe79707f7d399eba0dcbf6f9d15e384ca8775ad608057e09eb414b27f41d86d024b48ed9465baf2fbc439199b57203b48733098dbe3bbfdb04df5994d110b7a902473fab068108106667a13871656183ecf8f3cd51a72b547b963e0ae1c1be558f479038ef3a6916b69989200f21c2d842c7efa1731539d8a75dea1ca16eca41919a117d4020d585bf5a1c663c1746b089f1ee2f93d6051815c8fec1f1434dc80d20982b1b14b0223b64b7eb2709c41628e6010472843018a67add604a25fdaee595b586197e98ac3d3d6aab95116fc58d6d8224cf9bbbf3db553953e8ece17b2e30064525ed7399a012f18416d3a8933e922ed04796c6a32fc803520ce583728103b3cc0a4879a912db387dcfc8f3b0bbda800a9e4d8e3ca77d4a3e7c5a8999ab61cfed9bc841404147fc070a225c9950c284050ec12e2889ad7505966371f1ac1ee74aa5bdc120f00e1aa87e2933a58dace5c5c58148a9925d882a9a51b5cfbba7ef83946e1bdec65e38cbe2486178514d57ab27fdaaa78e34798ddd79f7c133558a91670b582215bf438141e51c04de6476e8262b4e5adbe739a5b45b0b917dd14bbe164ba06d547cc2b42f927865e22d1a7da3f5aa27e997030ea8d2bdf6ee40eb6bd2337e16b1752374ad911ee8ab5ab44494a0fc49de42d720807c77fb7bab1c27f3a1c66ce7540736432d80365ffd103efc6dfc3ab9cfb648f8ab4d20ff28aeb50b8f435bb96d106531eeb664138e6020451c8fdcc67b202596b1efa42d89c708b95b530239aa2838528d34e035007eac9ca42f29634378f8e9da7de8cd5893b562d55eaf76184ecc45b3f90838c38d0e70dc87dc8c2c1246f55e83322efe1c52ff543b466599475978d29e5e47067de7991278071011862cd96918863ce026ae06c71d66fb1fce3f0fe12e8ef43cd338cd26d65cf16f4414a2099e2e4c1e1f7d793e3ba4b27d1fbb1b15def88a71aead5531902bf39287b485dde7f7bd7265f9a81d1c60c172b712206baaf0becde26e811c0c1574ab91d4e377e2a082bcc7f4656a36ab93fab91337c73d01ed69daa00e08b9ec25d616088980e58d66f8282b53ac9027af71aaed52ccc17616f03d21393b97f9c696dd5a9b3f8d9c09d904899eddc8cd1a2126c53706777d01afae86a4754f3e6772fe112533f863204b45a48a003ddf3c54d79fcc926dbc8aec38db5c39887e77797a5bb1d9367a1bfc8f9746fa859ab7c499d20ff91f3f0caf08ba907d90e2b3afd7b3a4026c49b006f419bfda52c94f1c18805f26027948b0e5256f24ffa714702564a271d2ca9ddb8788f69e47c66b1c17c24dd5bf2bdb21e3d4fec1d7cdf24aa7ba1cc0e58a906a05430b7110668a3c5e69fce7463945152d8df752c49a953af0948c282cde56395f5969d93e11d4b83ce3ca0f7cb114f9a4fe1fb3b50282dda07d7e4358bae33927f0ebae661e58f89a459af1f6d7ba7165cc110dd479ceb27043c000b3afb7026c1f54b752597efa1b7afbaa1828f6be1da92a8b27a70ff151a741bef1f3181dd7a2387ae236927ea9313eb57a5860308a4212764af79ef2adc03b19c35ce53991346a9f8541eb97eebc3a784d59f87c1cc4a3d6d74c15e7ea3083ff9d3cc8c3a7c205f38fca8cebe82a30e8e2a14a3eb380bdef03b60cc805025add1ecfd1ec76580acdd465cf533c7b289b8a1b9e2ae9f8657e6ad3f27d631d10d107de29e774d3393a084d674994209cbb2f3c911e519e5583783078006937d3156d73196bb3345514b9bfba636a0085baa7211b29722c7040363f8128dcdeed582db8df34772e3c5b68778fa298bb934d3be32c91d68d228bca69a0e0ad101382f9a44a107b0dd93d6e95ec85c4a0bf6b01627da970ed2b50dcc6f500cefee2de5a9ae5ceb283136136cba1b914896e7ec0ef6ce2cdd5aae257181cb87722c22442e140886bddfea2adea7949dff08cfc9fea4d125ada6002994be8b8e289ebb81447230cf5bba27c93e17d3cad21470b6caedc775a5c475521e74d8afd1d6e394c02ec9fd34d80fbbe301ad457d194c88999bc0ac7c281934c5bef39aefe545f0596181db230f2eb1922989c5f63062010047d22a21550da2ccbed3efd4822f8f4ef4385281178b84cc74c9090c85dd59ea6340e91126954bbde3fdfc80c72688534fc92b268bac816a14ba8eb2ab4ac83f8dab30975e014195ab2376cb57c88d7dc5d31d4e1fe42f254a60f4aa9f759bc3eb977ae72509dc7f3c0ed1a50c8ec4957abdcf2eac65972a17f31e488fe5f9f7f949accc236c873c9a9423682dcc739b41894d3a98410f0a000a6fe1224b8fbfd62b6447cdbc32c6c9ce98d900130ac46ecb921bf81c25c0845f433ee2403e11b0540a62046da1393d2ced3eee0490e84cca41992c7299bc465e6cc3bc2d891ac4366d1e5c3cbf35d32b8a492eb58257ed34d3f226206d527e3cdf5e96691a8fe1234e26607ca372f0a82cce362936cd8d824e4b808e094a9b7d5693e2115aa3f1df705d5f07c6e598f4192fb957ca57082aa569be04dba7b316c4ae0980c84135fe69b17d725ac091eaec60bfbbc7aade05f9642aff85180a45657f960abb578eabec03a6576736a550f371dbf64dcd59a6cbbf3871a5d72673aeda00b700d54811e09732b0c9903ca5c00d1e12c187ea41bc9091d9f40037c41fdc9c008aa5645ff1206355e7aa180adc701951e6d461dddb42dba3a5908e2518a4d0b12a329f06d964d106e89510914f316cc8eaec6d9b7d3b9917d95c55cf758425da1286b678a79b4751e41a87cdd198e6015b9e224af44d08861b66c9712b9218f8b4272813e27af250b52cde0d647d1917ae8dc0b07e094d29bbba45ba7a413fecf42394032712c0d3ad7e234b4e2c7676d2896def13496d1aebc792dd72327b42f16517b5a7cd83f2c99a9b4e06a9f3fada29c3112178e02e04844957e11cc3c1bc0f7c08264f71cccc44ebf919e8af2559af8fe02c048e2a23dbffaf5d794f35e0b00e43b8f155842f88d522f47600890a509f74376b44b41add4bcb576b57e7514e321bd81a91d36fa023ad8f77a42a7e507982ad1005927a310b0db57ce6b515d16cdbc4014cb723e29f60cb25339546a4ef6f3586ca693100882fdadf1765bfe3361a68a0a8205374f07837a2509876540f04b33fdd575ce425f6aff4e375c031c98792c1093a4de435624a2ba623bc22f2bb2edb971810398b214b47bd58285ee2cb138276ef63f9e633f86845cfd440eed69c54855a90f3dc8f0e0a59009196bfda0d6f852c50bef31d27a1e8fe9ade9aeba7ceeef14448d77aac9c130e8abb4c123781f583a1f42c76251746f98e4a92cb53a7de7b1767c1418cfcfa09c94a8e003e8b0b550fbcd018de16d01a8ce9dbb3ad76f5312ce29f99d1fdf7c8cb404e0825b5dd9e74acc8372c17271f912f542c7f021a16ec79e6892d25825f810cfb658553686dc91f82ff7f907234836f78379bfd73f18f49564e3accdc346a8fb6cf06673793f96da5493cf8f1d8edaa24f2aaf97a9d218b380f54d4a3db3edab301251694c40274ef0167c945c94a220fa5ca6d64afcbdc0a4e071bdcd1555c29cc2000e17fad21cadb53b710a74596fa5f06ac9a504bb9c85cb71d4357568bb89572e4a5697417c1ae27f40cb59eb3e1b42716f6a093192f1eb03f999c25c3f27c669a1ea31d22553cf8c6b4c29b4a6ccb1b84abb03de6aea7b764043a1d234ebade147b8bf93ab30f6e0372cd93363aa24aaba6f71da29a424b5a59c280a49e83813068bfcbc730a543c5f8d1f18e516f8005e4e223be03aa53f0d8e42e0e387a7cf1cfe65ad8730072dc4adb0e11ec276a147e8c49c8cfdf78cec653e591b23129f081a27a646c4ac43b55e7840903ed3b4a1c52714539fdb593e0422720c5fd0d3ccde93e4438c787f9fe212cb75d60122ba90ff60d82a47e4e7f5b9bb6fdd4a6162588926b3dd5733ab0237545cb5e53ea69127f3650a4ba6a1dcf8b7bb16200afcdeec53b31fffe08b6b9ab66906bd54f3b014e990e70a20b6acde7673b737531514385c87c7a49566356bf177e2058fdb22edda943a083b51edc217e15804e92730eaa241aa710fc34d87a0bf9ea0e646e0b7ed6cac21ac703036452104812d0d8f6b510bfc1e43458f3a01b8f46526f21ad07a242dd4256d3828d3ea188f1768985d74f3428c19aea672ec1d98b225a6ce74e1c19fffc6ce613269d122ab275698e4819e1adf649e9523dc1455fa81f21ae851afe3d48bc032128d31229a219e890fe3a7c6614dcb272727b4c45ff2752b96324ce66ec0958802d271de3b47a98722f780c0135f18202ca14ee99d21a08b4d1e8b977a1506e1bb32b14d1c68a7e638025808c9dac430a7ab06d5c5c7a4cee79fd4b86d4a2e4f5945e67b5826a133e763d9b763ae8d5b5eff70c05e1dae11d20901683962627b8b2e9e49f21397d604fa7859657935d63731bdd1c2ce8e3bfc87280d2c553548a6432a16bcfb3cde2234084f2b6267da2b74506385e08706b10e52f6f017dd17db79298f6e070133fd05cde3aa3f6186fccf909bc0d9c27c66b86f7eb8dc6d4078a7c7bb89f9de56622012b88036f397949603f5cd6596d8631e25c2d07500b69f6db45c68f11dfed76b6bf4102408df5af7943932f87fb0b4e01e4d056edc0e180aaf6c837cf0ead91d624404337e4", 0x1000}], 0x1, &(0x7f0000001c80)=[@iv={0x110, 0x117, 0x2, 0xf7, "3306e13bfe5885d0fb4467947c46188a54bc83193d337eb3f737f325b619501ce2dcf0a9ba22351f7dee6a2a3fad7b982a648a33b2c5d37fd3c410acf1bf79e02b79094bf8e21ac4b943716bedccb31b066273885d658abe474a9dfe7d47378a8b4cfc97a04c3f017563e9df247ddecbfad6a8fbf9727eda7b0c00f1f49e76ba0bb51c7c31b026fe21f36509f2b97c6ab04cf6338d5f79c664d3909536b3f0f3929ff0e913fd62f0c2d239ede27a574f81abd1ea862d07e8c19e4e138367891c0ea9643cecc3464f06729ecc5aa8512cae4f2297f1a440615f44ac8486219736b1bee68fb8930297d6c21a3351023409b80cd25b832aa6"}, @assoc={0x18, 0x117, 0x4, 0x51}, @iv={0xd0, 0x117, 0x2, 0xb6, "5dc9abd620ad2a4b0a05a44401fd61c14ffb1dab4eceb94e8129d9dbee37ac02429d177a7c3ab6185fc638dfbc690573db2a25203712d2ef61e67685ada2eae4c8af0118b2dcd853f138cad473f4799ea88257fa170b47bb0d865a869ecd24ba345c42d507da2d63fdc9134f0ec208eecc22172ceaeb447fdd994d80da5917e850a646804621bf70a15f58aa21e1cd492c5918a7eb0fd3d6e35c16f79a564bcd6c864a11f59fee1d85797ad5d52971f3ef986eaa55f5"}, @op={0x18}, @op={0x18}], 0x228, 0x40040000}, {0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001ec0)="cca4c0de7a6dcda92ae3d393075a9d196008c661a5be33ddfb3f1c7c020849f18e436ef237f8b0458f143d0d10d1307f7858536fb86c3f47df6c1d12d5b6080ad85ff533d98fe7a4956b44011b5a6ae8f331574ab29fda22445d6ea06b00169978f85d587dbcc8abc8d909cb0f436511c2dd0ff67625d3b3700bdc3fbc7db198759fd3425beac140e60c8751cca6fb5adaa6dbdcca134faf508acc7211f28aa7d47190c088ff122088b3e2636bf09ff99786454d4c68daafa91d47c81804bda21c026c1aff1ae5d01d931ed28b4c5ad794243c326ca4524542d028ca13a0b9bf56c9ecd4cf3de98b1c03c1b15f60756d8a", 0xf1}, {&(0x7f0000001fc0)="acca5937066ad2a9c9a116db3b6db6e9336e673d3df7202ba942f3066dfd55e7dc9c6032b31d9c50feb8a6944ded673f280a91c47331f30c7095a73adaa240d0e3f9cbea32728f945d917d0169fe865a58790b8e5b63d4a72ee35f6c46c5233c83e0028571ef13962dc9aa8d7fe4d598ac12e387a6cb7f05d71dbffd29308b5ff0537fe3df19dc3ed4c74f386c4508b661b77ac255ca41f56260330e622175f4f08535cc458a50894e2d684a55", 0xad}, {&(0x7f0000002080)="ab8361d1d82a65bbaabdf4cc45ebec0cfa3e1772e7c0939ecd70647a24bda77d5f1e583c9520a3f56b03", 0x2a}, {&(0x7f00000020c0)="1e1b1ef7d86dd708e76892c604eb035aec1e543db35f60cb9d57c697385bee1c989ff4affca0e7542f52cf74684e4290a2bbcf99f14a37d153ebad02e18a678282edfd0bf2df099d96a1410c778b1f6086", 0x51}], 0x4, 0x0, 0x0, 0x240c8090}], 0x6, 0x0) 05:19:42 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:42 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x0, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:43 executing program 2: r0 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r0, &(0x7f0000005d00)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000140)=0xa, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0xc4, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x10001, 0x1c90c0) 05:19:43 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:43 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x0, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x0, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x386}}}}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0xf, &(0x7f0000000380)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x401}]}, 0x4, [{0x2, &(0x7f0000000580)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]}) 05:19:43 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:43 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x0, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:43 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:43 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x0, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:43 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x789040, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) r3 = dup(0xffffffffffffffff) ioctl$VIDIOC_G_EDID(r3, 0xc0285628, &(0x7f00000001c0)={0x0, 0x80000000, 0x1ff, [], &(0x7f0000000180)=0x81}) r4 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x3ff, 0x40000) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x401, 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x9, 0x20100) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="06f6b968d5d6710f22314e80bd8c5b6f5c950770dba3dce0a54a45e5b73f8cd9c3375924d7e58a0d499907f4fdeb44ee3ad16b929c8191fa7c77365a42a8384c2ff1f48de930b5038e6fe0806eee36ebd0419e31009ecec27ebaa23f221d2fdaaeb75414a1f06ec741cded8d1675e8f220c2beeba7755233be08cd7001fabc2e9a0cc147c4a4db6bf4e1c69f7b9522e60c928392a46258f3013731c72e2c125081ffe207e01a5cf0a56d0f42c1e0c571033980bd34c4eacf6d1c1639d3d5eac42f88c73a348a7d4ef774972539dd1a8bae0080799c", 0xd5, 0xfffffffffffffffa) r7 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$link(0x8, r6, r7) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x200, 0x0) getpeername$inet6(r8, &(0x7f0000000500), &(0x7f0000000540)=0x1c) r9 = getpgrp(0xffffffffffffffff) r10 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vhci\x00', 0x100) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40000) kcmp$KCMP_EPOLL_TFD(r1, r9, 0x7, r10, &(0x7f0000000600)={r11, r5, 0xdb}) r12 = syz_open_dev$swradio(&(0x7f0000000640)='/dev/swradio#\x00', 0x1, 0x2) ioctl$BLKSECDISCARD(r12, 0x127d, &(0x7f0000000680)=0x80000001) msgget$private(0x0, 0x308) getpeername$tipc(r5, &(0x7f00000006c0)=@id, &(0x7f0000000700)=0x10) r13 = syz_open_dev$vcsa(&(0x7f0000000740)='/dev/vcsa#\x00', 0x5, 0x40000) ioctl$SIOCGETNODEID(r13, 0x89e1, &(0x7f0000000780)={0x2}) r14 = syz_open_dev$swradio(&(0x7f00000007c0)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_tcp_int(r14, 0x6, 0x1e, &(0x7f0000000800)=0x1, 0x4) r15 = syz_open_dev$mouse(&(0x7f0000000840)='/dev/input/mouse#\x00', 0xffffffffffffff4f, 0x2000) setsockopt$netlink_NETLINK_RX_RING(r15, 0x10e, 0x6, &(0x7f0000000880)={0x101, 0x6, 0x1f, 0x7}, 0x10) 05:19:43 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) [ 327.762417][ T30] usb 3-1: new low-speed USB device number 2 using dummy_hcd 05:19:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x0, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:43 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x400000000010, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) [ 328.233116][ T30] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 328.243864][ T30] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 328.293314][ T30] usb 3-1: language id specifier not provided by device, defaulting to English [ 328.434404][T11666] IPVS: ftp: loaded support on port[0] = 21 [ 328.572754][T11666] chnl_net:caif_netlink_parms(): no params data found [ 328.628554][T11666] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.636296][T11666] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.645087][T11666] device bridge_slave_0 entered promiscuous mode [ 328.655918][T11666] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.663225][T11666] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.672059][T11666] device bridge_slave_1 entered promiscuous mode [ 328.705745][T11666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.718646][T11666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.753435][T11666] team0: Port device team_slave_0 added [ 328.763855][T11666] team0: Port device team_slave_1 added [ 328.858004][T11666] device hsr_slave_0 entered promiscuous mode [ 328.902830][T11666] device hsr_slave_1 entered promiscuous mode [ 329.072183][T11666] debugfs: Directory 'hsr0' with parent '/' already present! [ 329.105451][T11666] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.113401][T11666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.121122][T11666] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.128380][T11666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.141633][ T30] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 329.150849][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.251035][T11666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.273557][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.285975][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.295865][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.311060][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 329.336660][T11666] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.358159][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.368536][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.376014][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.430044][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.439103][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.446327][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.464932][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.476452][ T30] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 329.499787][ T30] usb 3-1: USB disconnect, device number 2 [ 329.510188][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.519762][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.529588][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.546296][T11666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.559005][T11666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.576368][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.632324][T11666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.211915][ T30] usb 3-1: new low-speed USB device number 3 using dummy_hcd 05:19:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x34d, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010600"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}}, 0x0) 05:19:46 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x400000000010, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:46 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xd8, 0x401]) syz_usb_connect(0x0, 0x24, &(0x7f0000002f00)=ANY=[@ANYBLOB="12010000456fea20810d0019673a000000010902120001000000000904000000d19e4200"], 0x0) 05:19:46 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) [ 330.554220][T11686] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 330.565259][T11686] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 05:19:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x400000000010, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:46 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:46 executing program 2: fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000440)='security.evm\x00', &(0x7f0000000480)=@ng={0x4, 0x10, "fbd7c6ef2c6cb4018a452b3f1737fa3a4b5a"}, 0x14, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000600f79a08070ada0048ad000000010902240001000000000904b90002c750dc000905040b000000000009050103c600080000"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x74, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0xff, 0x10, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0xd2, {{0xb, 0x24, 0x6, 0x0, 0x1, "3b2547170229"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x0, 0x401, 0xfe}, {0x6, 0x24, 0x1a, 0x2, 0x24}}, {{0x9, 0x5, 0x81, 0x3, 0x7f, 0x8c, 0x21, 0x8e}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x2, 0xd, 0x0, 0x5f}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0xc4, "", {{{0x9, 0x5, 0x82, 0x2, 0x10c, 0x5, 0x16, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x3f4, 0x40, 0x80, 0x1}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x2, 0x80, 0x7, 0x0, 0x5}, 0x99, &(0x7f00000004c0)={0x5, 0xf, 0x99, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0xe, 0x3ff}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "f4bc288ba4633f3114036c11305b84a2"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x12, 0x0, 0x20, 0x6}, @wireless={0xb, 0x10, 0x1, 0x2, 0x46, 0xa6, 0x7, 0x3ff, 0x4}, @ptm_cap={0x3}, @generic={0x61, 0x10, 0x3, "495bf2ae71377ecc6af1612ad671ac13e67f8f039ef497e935ee42813618ff6113dd44357aff15a41d5ee57f1d0bba5b9f8601f8ba473cf694848a98c63ba3f7061c196b8bc185713d695fc7d59de54f38f3cc2dd1096042a0cdefc86ce0"}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x407}}, {0x22, &(0x7f00000001c0)=@string={0x22, 0x3, "1d906c2ff3db5537de00c8dd78bf6a1670b6deeb6bdbf0971c76a5fcc1e2395b"}}, {0xd9, &(0x7f0000000200)=@string={0xd9, 0x3, "ebc492b1cf1792d34fdb28e568914758af96d6b4cca2c9c88e496b57655c4a352b9b79a682d19e85f9dd42a39d6b81534b106fd08d50cdd87ac7a6b2de20ca922fa26018a4ebafbf1df60a6b84a2d056c6adaa4e3cf213d313a024f8dc943296bd069c989278c383c6a17616a7f0f75ef7e1efe2d836a6a43a919dbed3de546c0f19cc64fa77d38acc30113125e2fb715a73c5027d4848b066f8f402acf4ce4898faf64b09cce3b748fe72985cd037a8ca60bd537338ce4263ffec3d245ce081afee9e897161db018d2da43018c115765e30880710194e"}}, {0x97, &(0x7f0000000300)=@string={0x97, 0x3, "4c0b553db72d7eb028a2db3257c83120cd9a39539449ded3b617d9c8024871af8a29bad94cce5a852b90daca8c99a3d7fa3cbfce013df59394f15282e2cd84d27acb8d4b839adff5f15726deee0fa64c940f5d16a81ef1156a34718d9aed7355d53d3899a2f4cb3eb0e15cf5ce6e23cb5f505cfd2f3ba37e62ce7acac63664f261671987e8f5b624be610ee262a88f1a32b969c8fc"}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000580)=0x4) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000005c0)={{0xb0, 0x5, 0x2, 0x8, 0xfc, 0x2}, 0x9, 0x0, 0x4e76}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x10, 0x18, @str='\x01\xac\x0f\x00\x06\xac\x0f\x00\b\xac\x0f\x00'}]}, 0x24}}, 0x4000) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x4, 0x8, 0x5}) 05:19:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, 0x0, 0x0) 05:19:46 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) [ 330.841957][ T3364] usb 4-1: new high-speed USB device number 2 using dummy_hcd 05:19:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, 0x0, 0x0) 05:19:47 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, 0x0, 0x0) [ 331.082601][ T3364] usb 4-1: Using ep0 maxpacket: 32 05:19:47 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) [ 331.203199][ T3364] usb 4-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=3a.67 [ 331.212508][ T3364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.247848][ T3364] usb 4-1: config 0 descriptor?? 05:19:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180), 0x0) [ 331.299538][ T3364] pwc: Visionite VCS-UC300 USB webcam detected. [ 331.522737][ T3364] pwc: recv_control_msg error -71 req 06 val 3700 [ 331.543166][ T3364] pwc: Failed to set LED on/off time (-71) [ 331.562111][ T3364] pwc: send_video_command error -71 [ 331.567392][ T3364] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 331.575252][ T3364] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 331.586608][ T3364] usb 4-1: USB disconnect, device number 2 [ 331.602074][ T30] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 331.852647][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 331.992828][ T30] usb 3-1: unable to get BOS descriptor or descriptor too short [ 332.052365][ T30] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 332.060153][ T30] usb 3-1: can't read configurations, error -71 [ 332.067774][ T30] usb usb3-port1: attempt power cycle [ 332.282027][T11359] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 332.532246][T11359] usb 4-1: Using ep0 maxpacket: 32 [ 332.653594][T11359] usb 4-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=3a.67 [ 332.662929][T11359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.675090][T11359] usb 4-1: config 0 descriptor?? [ 332.718426][T11359] pwc: Visionite VCS-UC300 USB webcam detected. [ 332.781881][ T30] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 332.932063][T11359] pwc: recv_control_msg error -71 req 06 val 3700 [ 332.952577][T11359] pwc: Failed to set LED on/off time (-71) [ 332.973940][T11359] pwc: send_video_command error -71 [ 332.979271][T11359] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 332.987053][T11359] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 333.046150][T11359] usb 4-1: USB disconnect, device number 3 05:19:49 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180), 0x0) 05:19:49 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x88280, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000040)=0xa1) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000080)={0x0, 0x401, 0x3f, 0x7, 0x7fffffff, 0x40}) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000c, r1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3ff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e24, 0xfb, @dev={0xfe, 0x80, [], 0x1d}, 0x5}}, 0x4, 0x7, 0x400, 0x6, 0xd50998e89fef2e3f}, 0x98) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x40a281, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0xdede}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000002c0)={r4, 0x7}, &(0x7f0000000300)=0x8) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x23775a56400c0ec9, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xffff, 0x400004) setsockopt$packet_int(r6, 0x107, 0xb, &(0x7f00000003c0)=0x5, 0x4) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RRENAME(r7, &(0x7f0000000440)={0x7, 0x15, 0x1}, 0x7) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vsock\x00', 0x8000c2, 0x0) write$vhci(r8, &(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x630d84f5620725aa, 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) fcntl$getownex(r9, 0x10, &(0x7f0000000580)) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000005c0)={0x0, 0xc3d0, 0x101, 0x4, 0x4}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000640)={r2, 0x1000, 0xffffffff, 0x81, 0x100, 0x9, 0x4, 0x7ff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x10001}}, 0x7737, 0xa43f, 0x1ff, 0x9, 0x6}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000740)={r11, 0x7}, &(0x7f0000000780)=0x8) r12 = open(&(0x7f00000007c0)='./file0\x00', 0x40000, 0x22) ioctl$EVIOCGSW(r12, 0x8040451b, &(0x7f0000000800)=""/145) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$HIDIOCGFLAG(r13, 0x8004480e, &(0x7f0000000900)) 05:19:49 executing program 2: seccomp(0x1, 0x0, &(0x7f00000005c0)={0x3, &(0x7f0000000040)=[{}, {0x54}, {0x6, 0x0, 0x0, 0x7fffffff}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x10, 0x18, @str='\x01\xac\x0f\x00\x06\xac\x0f\x00\b\xac\x0f\x00'}]}, 0x24}}, 0x4000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x10, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x1f}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x240408d2}, 0x400c004) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000000)={0x0, 0x0, {0x1, 0xfffffe01, 0x10, 0x1}}) 05:19:49 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0x2) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0}}, {{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="100000000000000007010000000000001000000000000000000000000000000fdb78312368dfb5ebc9ed45f7891300302ca2e15b97403026debd8b010cefc0ebe93c5df37eaedbb9096fb5415364df2f0b94138dce73637c90070000008229429a2ee850a391d4a79e6c6e8a65e8d40b8002829ed5ff5ff0e9fad76b8bcdfd60f58cbfa165a716fbcc8928950b"], 0x20}}], 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x19, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x2}}]}}]}, 0x48}}, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000001c0)={@empty, @multicast2, r8}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) mkdirat(r10, &(0x7f0000000180)='./file0\x00', 0x20) 05:19:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180), 0x0) [ 333.622878][T11762] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! [ 333.673740][T11762] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.3'. 05:19:49 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0f", 0xe) [ 333.789263][T11770] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.3'. 05:19:50 executing program 3: ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x7fffc) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="2321202e2f46696c6530202a2d206d696d655f74797065766d6e65743174727573746564202f7b23406d64f3c5198e5d9e09d87f1bc5113573756d5e08643573756d20245b29266b657972696e67736563757269747976626f786e0274316b0a1138594b54e624129a76db695350b27626469a23841f65fb48aaf3be8dca87b37960257354c9e2f969795d72739f41ca5586e6b92dbcc1b4e8135550c6ccc410b0019384c30b316ca1d3a1a645afb515f1086cae351ae3aa680d9c608e390a2524db84b163a87cd6e430617750e8126921cddb2c5f4b9b6187b6fd36858973998fae94a65d92cd5f590224cc15567f9b4772118123a2c4b666eb63d688c919279037ecdb405ae597ec8c09675ef993d9a60797f0981d2150fe6dc2d895ae40001bac683e39cc8b83f81d723027dffbb4793952725b2e695d194868d5ac6b7235f85639518b51f5d59dd0080023f785ce8688e0a696cd171ac14ee0e073cb27bf17773a0ae0f37e8f6007749c3a3938eeea11cca554f6f2ce9735ada92c2375f971fbea36754f8073bc5f1ce6bd63c34b08ad"], 0x16c) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x3ac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000005, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00'}, &(0x7f0000000040)=0x44) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000380)=0x9) r3 = syz_open_dev$midi(0x0, 0x9e7e, 0x130742) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) write$P9_RLOPEN(r1, &(0x7f0000000740)={0x18, 0xd, 0x2, {{0x8, 0x0, 0x5}}}, 0x18) listen(r2, 0x200000000002) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140), 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$inet6(r3, &(0x7f0000000680)={0xa, 0x4e24, 0x7f, @remote, 0x1}, 0x1c) lsetxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000440)='trusted.overlay.opaque\x00', &(0x7f0000000480)='y\x00', 0x2, 0x1) r5 = syz_open_dev$amidi(&(0x7f00000004c0)='/dev/amidi#\x00', 0x5260, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="bc860000", @ANYRES16=r7, @ANYBLOB="190000000000000000000c0000001800050008000100756470000c0002000800040000000000"], 0x2c}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x42000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="54017375", @ANYRES16=r7, @ANYBLOB="200027bd7000ffdbdf250700000054000900080001000300000008000200040000000800020070b100000800010003000000080002000800000008000100050000000800020008000000080001005c0b0000080002000700000008000100070000005400050000000100756470001c0002000800040001000000080003000400000008000400010100004c0004000c00010073797a31000000000c00070008000200010100002400070008000400040000000800040005000000080004000200000008000400ec4800000c000700080002003e07000020000200080001004cc900007b020100800000000800010000040000040004001400090008000200800000000800010008090000180005001400020008000300800000000800030009000000"], 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 05:19:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0f", 0xe) 05:19:50 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:50 executing program 2: syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000050000000000006907800000000e00000010000000004019078f4c7d1f6ff071ccdc1188f869a280ebca23c09903661233c6227b94859beea04000000f1fa8318c20f8b50dabbec7066539b6904"], 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x10000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open_tree(r2, &(0x7f00000002c0)='./file0\x00', 0x10000) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f0000000300)) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f00000001c0)={0x7, 0x4000000, 0x1ff, 0x9, 0x7, 0x1}) r10 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r10) sendmmsg$inet_sctp(r3, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="20000000000000008400020002000000000004000000000000000000", @ANYRES32=r5], 0x20}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={r5, 0x47, "f8adee7f330a8c1d8f9fc3dfd76811d429c341ede936911c182b236344bcd11546a0e3bce53061674dfd301c29ec0c17987ca3a091a60b71352888d5752c7a61bbe6b0157c611c"}, &(0x7f0000000140)=0x4f) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x1, 0xde, 0xfffff800, r11}, 0x10) [ 334.184052][ C1] hrtimer: interrupt took 35508 ns 05:19:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0f", 0xe) 05:19:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc028020000300", 0x15) [ 334.588817][T11813] IPVS: ftp: loaded support on port[0] = 21 [ 334.828365][T11813] chnl_net:caif_netlink_parms(): no params data found [ 334.884133][T11813] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.891377][T11813] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.900612][T11813] device bridge_slave_0 entered promiscuous mode [ 334.911016][T11813] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.918246][T11813] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.927009][T11813] device bridge_slave_1 entered promiscuous mode [ 334.959464][T11813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.977273][T11813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.012506][T11813] team0: Port device team_slave_0 added [ 335.022210][T11813] team0: Port device team_slave_1 added [ 335.121413][T11813] device hsr_slave_0 entered promiscuous mode [ 335.165941][T11813] device hsr_slave_1 entered promiscuous mode [ 335.292364][T11813] debugfs: Directory 'hsr0' with parent '/' already present! [ 335.322653][T11813] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.329860][T11813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.337730][T11813] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.344961][T11813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.434020][T11813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.457660][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.468863][ T3364] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.478884][ T3364] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.491218][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 335.514848][T11813] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.535596][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.544666][ T3364] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.551985][ T3364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.597678][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.607065][ T3364] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.614300][ T3364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.624618][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 335.634587][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 335.661040][T11813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.671990][T11813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.716037][T11813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.728172][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 335.737586][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.746930][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.758139][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 05:19:52 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xe8, 0x7cb8c3f0e5e06bff, 0x0, 0x6, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_pwait(r2, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x41ee, &(0x7f00000000c0)={0xffffffff}, 0x8) 05:19:52 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:52 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='veth1\x00') ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="11") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000002480)="11dca50d5e0bcfe47bf070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x0, 0x0, &(0x7f0000000080)={0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, &(0x7f0000000100)={0x1, 0x9}) 05:19:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc028020000300", 0x15) 05:19:52 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4002, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) ioprio_set$pid(0x1, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) getpgid(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 05:19:52 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc028020000300", 0x15) 05:19:52 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x800000000000001) dup3(r0, 0xffffffffffffffff, 0x100000) ioctl$int_in(r0, 0x800000800c5012, &(0x7f0000000100)) 05:19:52 executing program 1: setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:52 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xe8, 0x7cb8c3f0e5e06bff, 0x0, 0x6, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_pwait(r2, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x41ee, &(0x7f00000000c0)={0xffffffff}, 0x8) 05:19:52 executing program 2: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000014, 0x6, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) syz_emit_ethernet(0x4e, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8660762bb13700180100fe8000000000000000000000000000bbfefd634d8362384f4177f9079d12840f00"/78], 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x4) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x81, 0x2, 0x4e8928a4220403f5, "d257dc42fbb70660ae174927d61f16a8797d27d6d5cac965bfa948b1cae5f8b0", 0x32314d59}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000040)="252e63ca4ba8d1") ptrace$cont(0x9, r1, 0x0, 0x0) move_pages(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x2) 05:19:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000280)={0x5, &(0x7f00000000c0)=""/216, &(0x7f0000000600)=[{0x9, 0x3f, 0x1ff, &(0x7f00000001c0)=""/63}, {0x7fff, 0x12, 0x9, &(0x7f0000000200)=""/18}, {0x2, 0xac, 0x3e17a35f, &(0x7f0000000380)=""/172}, {0x20, 0xf8, 0x13e, &(0x7f0000000480)=""/248}, {0x7fff, 0x5f, 0x3ff, &(0x7f0000000580)=""/95}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffde0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x72, 0x2}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x8, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000003, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:19:52 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @dev, 0x8}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x300}, 0x2}], 0x13, 0x24000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x10, 0x18, @str='\x01\xac\x0f\x00\x06\xac\x0f\x00\b\xac\x0f\x00'}]}, 0x24}}, 0x4000) r2 = dup(r1) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f00000000c0)={0x23, 0x34, 0x12, 0x1a, 0xa, 0xffffffff, 0x6, 0x11b, 0xffffffffffffffff}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x7fff, @empty, 0x7fffffff}, 0x1c) 05:19:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500", 0x19) 05:19:52 executing program 1: setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:52 executing program 1: setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x20000, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x4) ioctl$int_out(r0, 0xa000002276, &(0x7f0000fd3ffc)) [ 336.890020][T11877] kvm [11876]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000008f data 0x4d00000000f 05:19:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500", 0x19) [ 336.938716][T11877] kvm [11876]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000008e data 0x4d00000000f [ 337.006934][T11877] kvm [11876]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000008d data 0x4d00000000f 05:19:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x80, 0x20001) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x80, 0x1, 0x6, 0x3, 0x53, 0xffff8af5, 0x1}, 0x1c) ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$isdn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x4f) sendto$inet(r1, &(0x7f0000000240)="f4", 0x1, 0x6024091, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 337.058473][T11877] kvm [11876]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000008c data 0x4d00000000f 05:19:53 executing program 1: mknod(0x0, 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:53 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xfe, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000000)={0x50, 0x24, 0x1a, {0x1a, 0x31, "6b10a8839cd70740bb503ca8ece522d83e5872c83d07c463"}}, &(0x7f00000000c0)={0x0, 0x3, 0xe7, @string={0xe7, 0x3, "f88be9f148ce3d2f1bd8a7d2cf131047c348d54cb6724278aa9069fbdc1239c9dd7249d77a9f44e9941e4be7d39b69a6377bdbb397b63b968eb6940f25969338f60b7c01863d20e2965184cc3d949fff14d8b98a0f08d6c11462953e12ef1b4961da37b1f23843bd799c0e887965d3c80c36e7ed04ae4cada3744803913ea284216f9046d37374377e8fee1eea3cb9d11faa9f16cada77220a99556d7583b895baee5dd638b89d3751ed352d17b0a6518b194f5054e289d2c49f18d91ec6fc370fa887efab0c2740338b96f7e095de89ce3ab311d92ae9c2a7407312325f3f59c3258e6b48"}}, &(0x7f00000001c0)={0x0, 0x22, 0xc, {[@local=@item_4={0x3, 0x2, 0x4, "66c3181d"}, @local=@item_4={0x3, 0x2, 0x8, "8304417a"}, @local=@item_012={0x0, 0x2, 0x7}, @global=@item_012={0x0, 0x1, 0x45981841c00d6d67}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xfc, 0x1, {0x22, 0x346}}}}, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x13, 0x97, "75908c9a72ed5dbef1d29c03a4228729c61a1f078a4427ab085d5a55a818b10bb2566f0883dc23c8c0d1adaaf134090e7fdaca19ffcaedfa1798a409bee59a69690f54d38b0ea8b838d2ccbb4e54bf94698a649f9b3718860becbb79c43efd024830d5eb46d7d39259f8ef447ac00ad224b36564f5eb07276e85e73a2d4c62a67b227d648b8f15408889ce52eaedddfc2030f253e56a60"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000400)={0x20, 0x1, 0xcf, "acc0dac6bf82c08f6d9f9cd6a6b383df6aad060fba831943b8366be12067df7adb564ffcf96ca57eb552da65db569e67c102c8f4ab48fbd590065741071db006d25a5b1fb8bf1c8d1d8ec6a345c154139a4d985ea1ab21faf669514ba110768fe38230e4fdf70d73825af0e858c9a136509ae38cb8958e8d13cff803493bdf3217f7bf18a41e9e7d65687df4ce1999ecd800dbf99b8a1d3b0c84aec4c45e374bb1c195803edc8599983220a4a6e28a1f1dce4ecc0ac2c6ca5546d18a6dfbf02004551aabecd0527dc80d0b1ff1e94d"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x3f}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6}, 0x0}, 0x0) [ 337.101530][T11877] kvm [11876]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000008b data 0x4d00000000f [ 337.142889][T11877] kvm [11876]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000008a data 0x4d00000000f 05:19:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500", 0x19) [ 337.191033][T11877] kvm [11876]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000089 data 0x4d00000000f 05:19:53 executing program 1: mknod(0x0, 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) [ 337.267303][T11877] kvm [11876]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000088 data 0x4d00000000f [ 337.327632][T11877] kvm [11876]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000087 data 0x4d00000000f [ 337.340256][T11912] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 337.365114][T11877] kvm [11876]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000086 data 0x4d00000000f 05:19:53 executing program 1: mknod(0x0, 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e100", 0x1b) 05:19:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffef8, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="8100000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f00000002c0)={0x20, 0x4, 0xfffffffffffffffe}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000002500070574e800100000773f50754d74", @ANYRES32=r2, @ANYBLOB="00000000f1ffffff0000000008000100736662002c00020028000100000000000000000000001200000000f3dc69cb10f0befc00"/64], 0x58}}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000380)={r6, @in6={{0xa, 0x4e21, 0x7, @remote, 0x2}}, 0x6, 0x2, 0x4831c5e6, 0x0, 0x400}, &(0x7f0000000440)=0x98) r7 = socket(0x10, 0x80002, 0x0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x400000, 0x0) connect$rxrpc(r8, &(0x7f0000000280)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) sendmmsg$alg(r7, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 05:19:53 executing program 4: syz_emit_ethernet(0x6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c289000008004500005c0000000000019078ac7014bbac141411050690780000060040000000000000000089000ea581019ca53a75ce79f9dbe62300ac1414aaac141400442c00000000000000000000e000000200000000e000000100000000000000007f0000010000000000000000"], 0x0) r0 = io_uring_setup(0xe18, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x3}) r1 = inotify_init1(0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r2) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r2, r3, r5, 0xffffffffffffffff], 0x7) [ 337.602062][ T3364] usb 4-1: new high-speed USB device number 4 using dummy_hcd 05:19:53 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e100", 0x1b) 05:19:53 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) [ 337.842263][ T3364] usb 4-1: Using ep0 maxpacket: 8 05:19:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e100", 0x1b) 05:19:54 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x7) openat$cgroup_subtree(r4, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}) [ 337.963286][ T3364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.974432][ T3364] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 337.988211][ T3364] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.40 [ 337.997447][ T3364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.133730][ T3364] usb 4-1: config 0 descriptor?? 05:19:56 executing program 3: clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x1, 'lo\x00'}, 0x18) 05:19:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="8c2fb08f70aca1f2e24e7dc4636db1607852800ad7239bfbb123065f680fcd8bd0da6e13b662424ccd67943bc81a1d56defee801abbb295542689614ad3cf075062ecc8fff703998f05b4a75cd21c51a0cdf5c1d22ec6c88b2f328c35d2284ce37375165fc7b892d9211b9f2b8d60d65de6a11b376b8379dea0e24d9d54997f9b0c35fdbb691b6a85b1dd235877eaf2c6b56cdebc12feefdd198891969cc07ec80aa29bcc95a7fa0866e97a784c0ac21edab15d06cfb51b0f47e5f4404", 0xbd}, {&(0x7f0000000340)="4520d8c1ee8e08b9ee293229", 0xc}], 0x2}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000580)}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a40)=""/38, 0x26}, {&(0x7f0000000a80)=""/108, 0x6c}], 0x2}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) 05:19:56 executing program 0 (fault-call:4 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:56 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:56 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000140)) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f0000000280)=""/4096) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x200000, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000001280), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 05:19:56 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x161643, 0x45) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000080)=0x2, 0x4) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x2, 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f00000001c0)={0x80000000, 0x4, [0x4]}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x40505, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0xd845) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x4, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x7}}, ["", ""]}, 0x24}}, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f00000003c0)={0x10}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000400)={0x0, 0x140000, 0xffffffffffffffff}) dup(r5) r6 = syz_genetlink_get_family_id$tipc2(0xfffffffffffffffe) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x182a848281cdc0c7}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x18, r6, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000540)={[0x4, 0x0, 0x3f, 0x5, 0x24, 0x40a, 0x9, 0x9, 0x1, 0x9, 0x4, 0xffff, 0xffff, 0x6, 0x0, 0x8], 0x4, 0x800}) socketpair(0x11, 0x5, 0x3f, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000a80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x46420068}, 0xc, &(0x7f0000000a40)={&(0x7f0000000680)={0x384, r6, 0xf9f3fb1934edc3eb, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57c1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff0000}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x16}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x1c4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @mcast1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @mcast2, 0x800}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x800}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @mcast2, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8001, @rand_addr="f5f2d4818990d22cc673934e64bfd406", 0x8a0}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfffffff8, @local, 0x1ff}}}}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20200}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x25d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9c3}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_LINK={0x34, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf749}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) keyctl$get_keyring_id(0x0, 0x0, 0x400) r8 = syz_open_dev$mouse(&(0x7f0000000ac0)='/dev/input/mouse#\x00', 0x3, 0x4080) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f0000000b00)='vmnet0vboxnet0!\'\x00', 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000b40)='./file0\x00', 0x40) syz_open_dev$usbfs(&(0x7f0000000b80)='/dev/bus/usb/00#/00#\x00', 0xffffffff8ea3a518, 0x20) r9 = socket$kcm(0x29, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000000bc0)='trusted.overlay.origin\x00', &(0x7f0000000c00)='y\x00', 0x2, 0x2) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/null\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r10, 0x2405, r2) [ 340.390646][T11959] FAULT_INJECTION: forcing a failure. [ 340.390646][T11959] name failslab, interval 1, probability 0, space 0, times 1 [ 340.403676][T11959] CPU: 0 PID: 11959 Comm: syz-executor.0 Not tainted 5.3.0-rc7+ #0 [ 340.411622][T11959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 340.421749][T11959] Call Trace: [ 340.428205][T11959] dump_stack+0x191/0x1f0 [ 340.432756][T11959] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 340.438699][T11959] should_fail+0xa3f/0xa50 [ 340.443165][T11959] __should_failslab+0x264/0x280 [ 340.448129][T11959] should_failslab+0x29/0x70 [ 340.452764][T11959] kmem_cache_alloc_node+0x103/0xe70 [ 340.458149][T11959] ? __alloc_skb+0x215/0xa10 [ 340.462785][T11959] __alloc_skb+0x215/0xa10 [ 340.467292][T11959] netlink_sendmsg+0x783/0x1330 [ 340.472217][T11959] ? netlink_getsockopt+0x1430/0x1430 [ 340.477620][T11959] sock_write_iter+0x644/0x650 [ 340.482419][T11959] ? sock_read_iter+0x660/0x660 [ 340.487441][T11959] __vfs_write+0xa2c/0xcb0 [ 340.491902][T11959] vfs_write+0x481/0x920 [ 340.496175][T11959] ksys_write+0x265/0x430 [ 340.500540][T11959] __se_sys_write+0x92/0xb0 [ 340.505677][T11959] __x64_sys_write+0x4a/0x70 [ 340.510290][T11959] do_syscall_64+0xbc/0xf0 [ 340.514767][T11959] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 340.520671][T11959] RIP: 0033:0x459a59 [ 340.524595][T11959] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 340.545705][T11959] RSP: 002b:00007f9a26988c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 340.554143][T11959] RAX: ffffffffffffffda RBX: 00007f9a26988c90 RCX: 0000000000459a59 [ 340.562265][T11959] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000005 [ 340.570265][T11959] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 340.578264][T11959] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a269896d4 05:19:56 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(0x0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) [ 340.586255][T11959] R13: 00000000004c6229 R14: 00000000004e0cc8 R15: 0000000000000006 [ 340.596327][ T3364] usbhid 4-1:0.0: can't add hid device: -71 [ 340.602556][ T3364] usbhid: probe of 4-1:0.0 failed with error -71 [ 340.636137][ T3364] usb 4-1: USB disconnect, device number 4 [ 340.637290][T11974] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 05:19:56 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x4) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000540), 0x118) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 05:19:56 executing program 2: r0 = syz_open_procfs(0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) pipe(0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), &(0x7f0000001e80)={&(0x7f0000000c80)={0xa8e3}, 0x8}) syz_open_procfs(0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0\x00', &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000500)={0x0, 0xfb, 0x66, 0x2, 0x1, "237d5aa4862f1391a4fab3b22bf6775a", "250a6d0edc470f151326cf2faddc83a3bfc20a6c3f1c7d334f3f6ceb2f7f687c70d6b2d94354fc3e5773e47c8fec44b980d112dc118787b5c8b6e4245d251941b63cdc8db1b8b21384532136397030a535"}, 0x66, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000200)=0x6e) close(0xffffffffffffffff) pipe(&(0x7f00000000c0)) read(r0, &(0x7f0000000000)=""/128, 0x80) write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x0) [ 340.792649][T11316] usb 5-1: new high-speed USB device number 2 using dummy_hcd 05:19:57 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009050f1f000000000009058703a422020144"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x2a4) read$char_usb(r1, &(0x7f0000000040)=""/9, 0xffffffffffffffa1) r2 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044590, 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000040)=""/76) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 05:19:57 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(0x0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:57 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000340)="17f0d80c95eb7bbf08b20528f8a4576e05c1fe7e0ad8fc318c9a", 0x1a, 0x400, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0xfffffffffffffc9a) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) getresgid(&(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000380)) getresgid(&(0x7f00000003c0), 0x0, &(0x7f00000004c0)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, 0x0, 0x0) tkill(0x0, 0x1000000000013) [ 341.063459][T11316] usb 5-1: Using ep0 maxpacket: 8 05:19:57 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(0x0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:19:57 executing program 0 (fault-call:4 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:19:57 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) [ 341.192546][T11316] usb 5-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 341.203090][T11316] usb 5-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.214716][T11316] usb 5-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 341.223990][T11316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.323427][ T30] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 341.330433][T12019] FAULT_INJECTION: forcing a failure. [ 341.330433][T12019] name failslab, interval 1, probability 0, space 0, times 0 [ 341.344393][T12019] CPU: 0 PID: 12019 Comm: syz-executor.0 Not tainted 5.3.0-rc7+ #0 [ 341.352357][T12019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.362466][T12019] Call Trace: [ 341.365837][T12019] dump_stack+0x191/0x1f0 [ 341.370340][T12019] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 341.376311][T12019] should_fail+0xa3f/0xa50 [ 341.380829][T12019] __should_failslab+0x264/0x280 [ 341.385841][T12019] should_failslab+0x29/0x70 [ 341.390520][T12019] __kmalloc_node_track_caller+0x1cd/0x1320 [ 341.396493][T12019] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 341.402652][T12019] ? kmem_cache_alloc_node+0x1b6/0xe70 [ 341.408202][T12019] ? netlink_sendmsg+0x783/0x1330 [ 341.413345][T12019] ? netlink_sendmsg+0x783/0x1330 [ 341.418557][T12019] __alloc_skb+0x306/0xa10 05:19:57 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) [ 341.423056][T12019] ? netlink_sendmsg+0x783/0x1330 [ 341.428179][T12019] netlink_sendmsg+0x783/0x1330 [ 341.433120][T12019] ? netlink_getsockopt+0x1430/0x1430 [ 341.438559][T12019] sock_write_iter+0x644/0x650 [ 341.443388][T12019] ? sock_read_iter+0x660/0x660 [ 341.448270][T12019] __vfs_write+0xa2c/0xcb0 [ 341.452728][T12019] vfs_write+0x481/0x920 [ 341.457007][T12019] ksys_write+0x265/0x430 [ 341.461366][T12019] __se_sys_write+0x92/0xb0 [ 341.465894][T12019] __x64_sys_write+0x4a/0x70 [ 341.470503][T12019] do_syscall_64+0xbc/0xf0 [ 341.474945][T12019] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 341.480871][T12019] RIP: 0033:0x459a59 [ 341.484801][T12019] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 341.504422][T12019] RSP: 002b:00007f9a26988c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 341.512857][T12019] RAX: ffffffffffffffda RBX: 00007f9a26988c90 RCX: 0000000000459a59 [ 341.520954][T12019] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000006 [ 341.528958][T12019] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 341.537028][T12019] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a269896d4 [ 341.545012][T12019] R13: 00000000004c6229 R14: 00000000004e0cc8 R15: 0000000000000007 [ 341.575216][T11316] hub 5-1:118.0: ignoring external hub [ 341.614740][T11316] cdc_wdm 5-1:118.0: cdc-wdm0: USB WDM device [ 341.694725][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 341.812743][ T30] usb 4-1: config 0 has an invalid interface number: 28 but max is 0 [ 341.821021][ T30] usb 4-1: config 0 has no interface number 0 [ 341.827742][ T30] usb 4-1: config 0 interface 28 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 341.838865][ T30] usb 4-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 341.848091][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.868634][ T30] usb 4-1: config 0 descriptor?? [ 341.937114][T12043] IPVS: ftp: loaded support on port[0] = 21 [ 342.035961][T12043] chnl_net:caif_netlink_parms(): no params data found [ 342.077321][T12043] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.084679][T12043] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.093943][T12043] device bridge_slave_0 entered promiscuous mode [ 342.103058][T12043] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.110177][T12043] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.118678][T12043] device bridge_slave_1 entered promiscuous mode [ 342.143878][T12043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.155660][T12043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.182488][T12043] team0: Port device team_slave_0 added [ 342.190390][T12043] team0: Port device team_slave_1 added [ 342.245925][T12043] device hsr_slave_0 entered promiscuous mode [ 342.312230][T12043] device hsr_slave_1 entered promiscuous mode [ 342.362032][T11961] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 342.382242][T12043] debugfs: Directory 'hsr0' with parent '/' already present! [ 342.405696][T12043] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.414804][T12043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.422562][T12043] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.429711][T12043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.487059][T12043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.506176][T11316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.514813][T11316] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.524147][T11316] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.534223][T11316] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 342.551213][T12043] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.565845][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.574442][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.581534][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.596076][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.604993][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.612253][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.622194][T11961] usb 5-1: Using ep0 maxpacket: 8 [ 342.640887][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 342.651124][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 342.674435][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 342.683695][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 342.699988][T12043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.712409][T12043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 342.722099][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 342.750664][T12043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.794546][ T30] ldusb 4-1:0.28: LD USB Device #1 now attached to major 180 minor 1 [ 342.834810][ T30] usb 4-1: USB disconnect, device number 5 [ 342.845610][ T30] ldusb 4-1:0.28: LD USB Device #1 now disconnected [ 342.977978][ T12] usb 5-1: USB disconnect, device number 2 [ 343.641895][ T30] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 343.761944][T11359] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 343.881880][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 344.002508][T11359] usb 5-1: Using ep0 maxpacket: 8 [ 344.007891][ T30] usb 4-1: config 0 has an invalid interface number: 28 but max is 0 [ 344.016181][ T30] usb 4-1: config 0 has no interface number 0 [ 344.022504][ T30] usb 4-1: config 0 interface 28 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 344.033540][ T30] usb 4-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 344.042772][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.054067][ T30] usb 4-1: config 0 descriptor?? [ 344.100505][ T30] ldusb 4-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 344.122612][T11359] usb 5-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 344.133092][T11359] usb 5-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.144411][T11359] usb 5-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 344.153566][T11359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.203192][T11359] hub 5-1:118.0: ignoring external hub [ 344.211872][T11359] cdc_wdm 5-1:118.0: cdc-wdm1: USB WDM device [ 344.298065][T11359] usb 4-1: USB disconnect, device number 6 [ 344.314158][T11359] ldusb 4-1:0.28: LD USB Device #0 now disconnected 05:20:00 executing program 0 (fault-call:4 fault-nth:2): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) 05:20:00 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000340)="17f0d80c95eb7bbf08b20528f8a4576e05c1fe7e0ad8fc318c9a", 0x1a, 0x400, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0xfffffffffffffc9a) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) getresgid(&(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000380)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f00000004c0)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x0, &(0x7f0000000740)=0x200, 0x4) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = gettid() tkill(r5, 0x1000000000013) 05:20:00 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x1}, {0x7, 0x2}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:20:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) getpid() writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000806050368fe07002b0000000e430a001400020045b300070300000319001a00120002000e0001000600030000000000000000f769", 0x39}], 0x1) 05:20:00 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009050f1f000000000009058703a422020144"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x2a4) read$char_usb(r1, &(0x7f0000000040)=""/9, 0xffffffffffffffa1) r2 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044590, 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000040)=""/76) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 05:20:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fsetxattr$security_capability(r1, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2, 0x4, 0x0) [ 344.532527][ T12] usb 5-1: USB disconnect, device number 3 [ 344.575626][T12069] FAULT_INJECTION: forcing a failure. [ 344.575626][T12069] name failslab, interval 1, probability 0, space 0, times 0 [ 344.589374][T12069] CPU: 1 PID: 12069 Comm: syz-executor.0 Not tainted 5.3.0-rc7+ #0 [ 344.597328][T12069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.607408][T12069] Call Trace: [ 344.610752][T12069] dump_stack+0x191/0x1f0 [ 344.615661][T12069] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 344.621620][T12069] should_fail+0xa3f/0xa50 05:20:00 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) [ 344.626144][T12069] __should_failslab+0x264/0x280 [ 344.631163][T12069] should_failslab+0x29/0x70 [ 344.635833][T12069] kmem_cache_alloc+0xd6/0xd10 [ 344.640665][T12069] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 344.646877][T12069] ? skb_clone+0x326/0x5d0 [ 344.651359][T12069] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 344.657497][T12069] skb_clone+0x326/0x5d0 [ 344.661817][T12069] netlink_deliver_tap+0x804/0xeb0 [ 344.667024][T12069] netlink_unicast+0xe17/0x1050 [ 344.671972][T12069] netlink_sendmsg+0x110f/0x1330 [ 344.677009][T12069] ? netlink_getsockopt+0x1430/0x1430 [ 344.682442][T12069] sock_write_iter+0x644/0x650 [ 344.687274][T12069] ? sock_read_iter+0x660/0x660 [ 344.692160][T12069] __vfs_write+0xa2c/0xcb0 [ 344.696644][T12069] vfs_write+0x481/0x920 [ 344.700958][T12069] ksys_write+0x265/0x430 [ 344.705360][T12069] __se_sys_write+0x92/0xb0 [ 344.710349][T12069] __x64_sys_write+0x4a/0x70 [ 344.714986][T12069] do_syscall_64+0xbc/0xf0 [ 344.719435][T12069] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 344.725516][T12069] RIP: 0033:0x459a59 [ 344.729439][T12069] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 344.749078][T12069] RSP: 002b:00007f9a26988c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 344.757519][T12069] RAX: ffffffffffffffda RBX: 00007f9a26988c90 RCX: 0000000000459a59 [ 344.765519][T12069] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000006 05:20:00 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x48d, 0x20, 0x0, 0xfffffffffffffdbe) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) [ 345.032640][T12091] Invalid argument reading file caps for ./bus 05:20:01 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:20:01 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x48d, 0x0, 0x0, 0xfffffffffffffdbe) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x10, r1, 0x0) ftruncate(r0, 0x48280) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa9 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 345.360208][T12097] RSP: 002b:00007f9a26988c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 345.368670][T12097] RAX: ffffffffffffffda RBX: 00007f9a26988c90 RCX: 0000000000459a59 05:20:01 executing program 4: sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000040000004800010044000400200001000a00000000000000ff09"], 0x2}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @quote}], 0xf1be) [ 345.376657][T12097] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000006 [ 345.385348][T12097] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 345.393351][T12097] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a269896d4 [ 345.401424][T12097] R13: 00000000004c6229 R14: 00000000004e0cc8 R15: 0000000000000007 [ 345.441967][ T3364] usb 4-1: Using ep0 maxpacket: 8 [ 345.445010][T12104] Invalid argument reading file caps for ./bus 05:20:01 executing program 0 (fault-call:4 fault-nth:4): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) [ 345.562599][ T3364] usb 4-1: config 0 has an invalid interface number: 28 but max is 0 [ 345.570939][ T3364] usb 4-1: config 0 has no interface number 0 [ 345.577727][ T3364] usb 4-1: config 0 interface 28 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 345.588973][ T3364] usb 4-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 345.598288][ T3364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.707478][ T3364] usb 4-1: config 0 descriptor?? [ 345.719324][T12118] FAULT_INJECTION: forcing a failure. [ 345.719324][T12118] name failslab, interval 1, probability 0, space 0, times 0 [ 345.732650][T12118] CPU: 0 PID: 12118 Comm: syz-executor.0 Not tainted 5.3.0-rc7+ #0 [ 345.740600][T12118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.750689][T12118] Call Trace: [ 345.754023][T12118] dump_stack+0x191/0x1f0 [ 345.758381][T12118] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 345.764907][T12118] should_fail+0xa3f/0xa50 [ 345.769375][T12118] __should_failslab+0x264/0x280 [ 345.774348][T12118] should_failslab+0x29/0x70 [ 345.778966][T12118] __kmalloc_node_track_caller+0x1cd/0x1320 [ 345.784879][T12118] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 345.790967][T12118] ? kmem_cache_alloc_node+0x1b6/0xe70 [ 345.801492][T12118] ? netlink_ack+0x579/0x1240 [ 345.806213][T12118] ? netlink_ack+0x579/0x1240 [ 345.810932][T12118] __alloc_skb+0x306/0xa10 [ 345.815371][T12118] ? netlink_ack+0x579/0x1240 [ 345.820107][T12118] netlink_ack+0x579/0x1240 [ 345.824675][T12118] netlink_rcv_skb+0x316/0x620 [ 345.829462][T12118] ? rtnetlink_bind+0x120/0x120 [ 345.834357][T12118] rtnetlink_rcv+0x50/0x60 [ 345.838799][T12118] netlink_unicast+0xf6c/0x1050 [ 345.843712][T12118] netlink_sendmsg+0x110f/0x1330 [ 345.848709][T12118] ? netlink_getsockopt+0x1430/0x1430 [ 345.854101][T12118] sock_write_iter+0x644/0x650 [ 345.858939][T12118] ? sock_read_iter+0x660/0x660 [ 345.863838][T12118] __vfs_write+0xa2c/0xcb0 [ 345.868314][T12118] vfs_write+0x481/0x920 [ 345.872615][T12118] ksys_write+0x265/0x430 [ 345.876994][T12118] __se_sys_write+0x92/0xb0 [ 345.881525][T12118] __x64_sys_write+0x4a/0x70 [ 345.886150][T12118] do_syscall_64+0xbc/0xf0 [ 345.890857][T12118] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 345.896765][T12118] RIP: 0033:0x459a59 [ 345.900694][T12118] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 345.920662][T12118] RSP: 002b:00007f9a26988c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 345.929144][T12118] RAX: ffffffffffffffda RBX: 00007f9a26988c90 RCX: 0000000000459a59 [ 345.937133][T12118] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000006 [ 345.945116][T12118] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 05:20:02 executing program 2: io_setup(0x81, &(0x7f0000000180)=0x0) io_cancel(r0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 05:20:02 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 05:20:02 executing program 4: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e21, @local}], 0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 345.953098][T12118] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a269896d4 [ 345.961080][T12118] R13: 00000000004c6229 R14: 00000000004e0cc8 R15: 0000000000000007 [ 346.020265][ T3364] ldusb 4-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 346.077591][T12123] Invalid argument reading file caps for ./bus [ 346.343455][ T3364] usb 4-1: USB disconnect, device number 7 [ 346.354740][T12062] ===================================================== [ 346.361737][T12062] BUG: KMSAN: uninit-value in __vfs_read+0x1a9/0xc90 [ 346.368446][T12062] CPU: 0 PID: 12062 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 346.376352][T12062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.386860][T12062] Call Trace: [ 346.390180][T12062] dump_stack+0x191/0x1f0 [ 346.394545][T12062] kmsan_report+0x17d/0x2f0 [ 346.399079][T12062] __msan_warning+0x73/0xe0 [ 346.403614][T12062] ld_usb_read+0x872/0xc40 [ 346.408077][T12062] ? init_wait_entry+0x190/0x190 [ 346.413044][T12062] ? kmalloc_array+0x110/0x110 [ 346.417829][T12062] __vfs_read+0x1a9/0xc90 [ 346.422180][T12062] ? rw_verify_area+0x3a5/0x5e0 [ 346.427031][T12062] vfs_read+0x359/0x6f0 [ 346.431201][T12062] ksys_read+0x265/0x430 [ 346.435447][T12062] __se_sys_read+0x92/0xb0 [ 346.439858][T12062] __x64_sys_read+0x4a/0x70 [ 346.444352][T12062] do_syscall_64+0xbc/0xf0 [ 346.448764][T12062] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 346.454641][T12062] RIP: 0033:0x459a59 [ 346.458531][T12062] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 346.478122][T12062] RSP: 002b:00007fd7b49a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 346.486523][T12062] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 346.494482][T12062] RDX: 00000000000002a4 RSI: 0000000000000000 RDI: 0000000000000004 [ 346.502439][T12062] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 346.510396][T12062] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7b49a96d4 [ 346.518355][T12062] R13: 00000000004c70d5 R14: 00000000004dc948 R15: 00000000ffffffff [ 346.526334][T12062] [ 346.528647][T12062] Uninit was created at: [ 346.532888][T12062] kmsan_save_stack_with_flags+0x3f/0x90 [ 346.538507][T12062] kmsan_alloc_page+0x153/0x360 [ 346.543344][T12062] __alloc_pages_nodemask+0x142d/0x5fa0 [ 346.548874][T12062] alloc_pages_current+0x68d/0x9a0 [ 346.553971][T12062] kmalloc_order_trace+0x87/0x320 [ 346.558982][T12062] __kmalloc+0x2e6/0x430 [ 346.563472][T12062] kmalloc_array+0x86/0x110 [ 346.567962][T12062] ld_usb_probe+0x650/0x1650 [ 346.572540][T12062] usb_probe_interface+0xd19/0x1310 [ 346.577735][T12062] really_probe+0x1373/0x1dc0 [ 346.582401][T12062] driver_probe_device+0x1ba/0x510 [ 346.587501][T12062] __device_attach_driver+0x5b8/0x790 [ 346.593815][T12062] bus_for_each_drv+0x28e/0x3b0 [ 346.598663][T12062] __device_attach+0x489/0x750 [ 346.603440][T12062] device_initial_probe+0x4a/0x60 [ 346.608970][T12062] bus_probe_device+0x131/0x390 [ 346.613809][T12062] device_add+0x25b5/0x2df0 [ 346.618313][T12062] usb_set_configuration+0x309f/0x3710 [ 346.624473][T12062] generic_probe+0xe7/0x280 [ 346.628967][T12062] usb_probe_device+0x146/0x200 [ 346.633804][T12062] really_probe+0x1373/0x1dc0 [ 346.638481][T12062] driver_probe_device+0x1ba/0x510 [ 346.643578][T12062] __device_attach_driver+0x5b8/0x790 [ 346.648937][T12062] bus_for_each_drv+0x28e/0x3b0 [ 346.653793][T12062] __device_attach+0x489/0x750 [ 346.658545][T12062] device_initial_probe+0x4a/0x60 [ 346.665032][T12062] bus_probe_device+0x131/0x390 [ 346.669866][T12062] device_add+0x25b5/0x2df0 [ 346.674361][T12062] usb_new_device+0x23e5/0x2fb0 [ 346.679213][T12062] hub_event+0x581d/0x72f0 [ 346.683635][T12062] process_one_work+0x1572/0x1ef0 [ 346.688666][T12062] worker_thread+0x111b/0x2460 [ 346.693432][T12062] kthread+0x4b5/0x4f0 [ 346.697498][T12062] ret_from_fork+0x35/0x40 [ 346.701908][T12062] ===================================================== [ 346.708839][T12062] Disabling lock debugging due to kernel taint [ 346.714985][T12062] Kernel panic - not syncing: panic_on_warn set ... [ 346.721580][T12062] CPU: 0 PID: 12062 Comm: syz-executor.3 Tainted: G B 5.3.0-rc7+ #0 [ 346.731014][T12062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.741054][T12062] Call Trace: [ 346.744341][T12062] dump_stack+0x191/0x1f0 [ 346.749099][T12062] panic+0x3c9/0xc1e [ 346.753006][T12062] kmsan_report+0x2e5/0x2f0 [ 346.758030][T12062] __msan_warning+0x73/0xe0 [ 346.762528][T12062] ld_usb_read+0x872/0xc40 [ 346.766943][T12062] ? init_wait_entry+0x190/0x190 [ 346.771875][T12062] ? kmalloc_array+0x110/0x110 [ 346.776627][T12062] __vfs_read+0x1a9/0xc90 [ 346.780955][T12062] ? rw_verify_area+0x3a5/0x5e0 [ 346.785890][T12062] vfs_read+0x359/0x6f0 [ 346.790047][T12062] ksys_read+0x265/0x430 [ 346.794289][T12062] __se_sys_read+0x92/0xb0 [ 346.798698][T12062] __x64_sys_read+0x4a/0x70 [ 346.803643][T12062] do_syscall_64+0xbc/0xf0 [ 346.808062][T12062] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 346.813940][T12062] RIP: 0033:0x459a59 [ 346.817830][T12062] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 346.837420][T12062] RSP: 002b:00007fd7b49a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 346.845837][T12062] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 346.853814][T12062] RDX: 00000000000002a4 RSI: 0000000000000000 RDI: 0000000000000004 [ 346.861785][T12062] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 346.869870][T12062] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7b49a96d4 [ 346.877833][T12062] R13: 00000000004c70d5 R14: 00000000004dc948 R15: 00000000ffffffff [ 346.887243][T12062] Kernel Offset: disabled [ 346.891620][T12062] Rebooting in 86400 seconds..